SEC536: Adversarial AI - Penetration Testing AI Systems
SEC536Offensive Operations, Artificial Intelligence
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
KEYNOTE | The AI System Was the Victim: Forensics for a Crime Scene With No Disk Image
KEYNOTE | The AI System Was the Victim: Forensics for a Crime Scene With No Disk Image (PDF, 0.73MB)Last updated: 16 Oct, 2026
Related Courses
- Slide 1 of 18
FOR608: Enterprise-Class Incident Response & Threat Hunting
UPDATEDIntermediate FOR608Digital Forensics and Incident Response
- GIAC Enterprise Incident Responder (GEIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- GIAC Enterprise Incident Responder (GEIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 2 of 18
SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
Advanced SEC595Cyber Defense, Artificial Intelligence
- GIAC Machine Learning Engineer (GMLE)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 30 Hands-On Labs
- GIAC Machine Learning Engineer (GMLE)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 30 Hands-On Labs
- Slide 3 of 18
FOR589: Cybercrime Investigations
Intermediate FOR589Digital Forensics and Incident Response
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 4 of 18
FOR585: Smartphone Forensic Analysis In-Depth
MAJOR UPDATESEssentials FOR585Digital Forensics and Incident Response, Artificial Intelligence
- GIAC Advanced Smartphone Forensics (GASF)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- GIAC Advanced Smartphone Forensics (GASF)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 5 of 18
FOR478: Cyber Threat Intelligence Foundations
Essentials FOR478Digital Forensics and Incident Response, Artificial Intelligence
- 2 Days (Instructor-Led)
- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 8 Hands-On Labs
- 2 Days (Instructor-Led)
- 12 CPEs / 12 Hours (Self-Paced)
- Labs: 8 Hands-On Labs
- Slide 6 of 18
FOR518: Mac and iOS Forensic Analysis and Incident Response
UPDATEDIntermediate FOR518Digital Forensics and Incident Response
- GIAC iOS and macOS Examiner (GIME)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- GIAC iOS and macOS Examiner (GIME)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 7 of 18
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
MAJOR UPDATESIntermediate FOR508Digital Forensics and Incident Response, Artificial Intelligence
- GIAC Certified Forensic Analyst (GCFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 35 Hands-On Labs
- GIAC Certified Forensic Analyst (GCFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 35 Hands-On Labs
- Slide 8 of 18
FOR610: Reverse-Engineering Malware: Malware Analysis in the Age of AI
MAJOR UPDATESAdvanced FOR610Digital Forensics and Incident Response
- GIAC Reverse Engineering Malware (GREM)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 42 Hands-On Labs
- GIAC Reverse Engineering Malware (GREM)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 42 Hands-On Labs
- Slide 9 of 18
FOR578: Cyber Threat Intelligence
MAJOR UPDATESIntermediate FOR578Digital Forensics and Incident Response
- GIAC Cyber Threat Intelligence (GCTI)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- GIAC Cyber Threat Intelligence (GCTI)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 10 of 18
FOR668: Threat Hunting and Data Analysis
NEWIntermediate FOR668Digital Forensics and Incident Response
- 3 Days (Instructor-Led)
- 18 CPEs / 18 Hours
- Labs: 10 Hands-On Labs
- 3 Days (Instructor-Led)
- 18 CPEs / 18 Hours
- Labs: 10 Hands-On Labs
- Slide 11 of 18
FOR509: Enterprise Cloud Forensics and Incident Response
MAJOR UPDATESIntermediate FOR509Digital Forensics and Incident Response
- GIAC Cloud Forensics Responder (GCFR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- GIAC Cloud Forensics Responder (GCFR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 12 of 18
FOR528: Ransomware and Cyber Extortion
Intermediate FOR528Digital Forensics and Incident Response
- 3 Days (Instructor-Led)
- 24 CPEs / 24 Hours (Self-Paced)
- Labs: 12 Hands-On Labs
- 3 Days (Instructor-Led)
- 24 CPEs / 24 Hours (Self-Paced)
- Labs: 12 Hands-On Labs
- Slide 13 of 18
FOR577: LINUX Incident Response and Threat Hunting
MAJOR UPDATESIntermediate FOR577Digital Forensics and Incident Response, Artificial Intelligence
- GIAC Linux Incident Responder (GLIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 29 Hands-On Labs
- GIAC Linux Incident Responder (GLIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 29 Hands-On Labs
- Slide 14 of 18
FOR710: Reverse-Engineering Malware: Advanced Code Analysis
Advanced FOR710Digital Forensics and Incident Response
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 12 Hands-On Labs
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 12 Hands-On Labs
- Slide 15 of 18
FOR498: Digital Acquisition and Rapid Triage
Essentials FOR498Digital Forensics and Incident Response- GIAC Battlefield Forensics and Acquisition (GBFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- GIAC Battlefield Forensics and Acquisition (GBFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 16 of 18
FOR563: Applied AI for Digital Forensics and Incident Response: Leveraging Local Large Language Models
NEWIntermediate FOR563Digital Forensics and Incident Response, Artificial Intelligence- 1 Day (Instructor-Led)
- 6 CPEs / 6 Hours (Self-Paced)
- Labs: 4 Hands-On Labs
- 1 Day (Instructor-Led)
- 6 CPEs / 6 Hours (Self-Paced)
- Labs: 4 Hands-On Labs
- Slide 17 of 18
FOR500: Windows Forensic Analysis
UPDATEDEssentials FOR500Digital Forensics and Incident Response
- GIAC Certified Forensic Examiner (GCFE)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- GIAC Certified Forensic Examiner (GCFE)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 18 of 18
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response
Advanced FOR572Digital Forensics and Incident Response
- GIAC Network Forensic Analyst (GNFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- GIAC Network Forensic Analyst (GNFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs