SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals


Experience SANS training through course previews.
Learn MoreLet us help.
Contact usBecome a member for instant access to our free resources.
Sign UpWe're here to help.
Contact UsAdvanced OSINT Training techniques help security professionals and organizations identify risks, uncover insights, and anticipate emerging threats. As public data grows exponentially, OSINT is essential for collecting and analyzing available data, enhancing investigations, threat detection, and strategic decision-making.

At SANS, we believe OSINT isn’t just about collecting data—it’s about turning public information into strategic intelligence. Our hands-on OSINT courses equip professionals with the tools and techniques to uncover hidden connections, detect emerging threats, and make fast, informed decisions. In a rapidly expanding data landscape, OSINT mastery is essential for staying ahead.
Gather, analyze, and validate intelligence from social media, web archives, and digital platforms using modern, field-tested approaches.
Identify digital risks, trace adversary activity, and generate actionable intelligence to support proactive security decisions.
Correlate data, assess source reliability, and produce clear, multi-domain intelligence for high-impact investigations.
[SANS OSINT training] gives hands-on experience for using applications and websites which really helps with the collection, processing, and analysis phases of the intel cycle.


Dario Beniamini teaches SEC497: Practical Open-Source Intelligence (OSINT), combining law enforcement and private-sector expertise to help students master real-world intelligence gathering.
Learn more

Matt Edmonson, Senior SANS Instructor, STI faculty, and Founder of Argelius Labs, authored SEC497 and SEC587. An industry veteran with 11 GIAC certifications and OSCP, he draws on 20 years of investigations to deliver accessibly, real-world OSINT training.
Learn more

Nico Dekens, known as Dutch OsintGuy, draws on 20 years of intelligence and investigation experience to teach SANS OSINT courses that help analysts turn open data into credible, actionable intelligence.
Learn more

Mick Douglas is a SANS Principal Instructor, cybersecurity practitioner, and community mentor with 20+ years helping defenders master detection, incident response, and OSINT—combining hands-on tools, real-world frameworks, and a knack for making hard concepts stick.
Learn more

Jeff Lomas, SANS Instructor for SEC497 and Principal Forensics Analyst at Mission Support and Test Services, brings 17 years of law enforcement and digital forensics experience to teach practical, ethical OSINT skills students can use immediately.
Learn more

With 30 years in cyber and intelligence operations, Chris Pizor teaches SEC504 and SEC497 to help students master OSINT techniques, incident response, and hands-on defense skills shaped by real-world missions.
Learn moreOver the past few years, the cyber threat landscape has been defined by supply chain compromises, the targeting of cloud and SaaS environments, and the growing use of AI by both defenders and adversaries.

The SANS Fall Cyber Solutions Fest 2026 Threat Intelligence Track explores how organizations can transform raw data into operational insight that drives faster, more precise decision-making across the enterprise.




Open Source Intelligence plays a critical role in malware analysis, especially in understanding the broader context of the attack, enriching findings, and speeding up attribution. In this talk, we will cover many examples about useful information found in malware samples, and, how to access them and enrich them.



