SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
SEC595Cyber Defense
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
Let’s Be Honest About MITRE ATT&CK® Mappings and the “So What?”
Let’s Be Honest About MITRE ATT&CK® Mappings and the “So What?” (PDF, 16.76MB)Last updated: 30 Jan, 2024
Presenters
Jamie Williams
Jamie is an adversary emulation engineer for The MITRE Corporation where he works with amazing people on various exciting efforts involving security operations and research, mostly focused on adversary emulation and behavior-based detections. He leads the development of MITRE ATT&CK® for Enterprise and has also led teams that help shape and deliver the “adversary-touch” within MITRE Engenuity ATT&CK Evaluations.
- Slide 1 of 18
AIS247: AI Security Essentials for Business Leaders
Essentials AIS247Cybersecurity Leadership
- 2 CPEs / 2 Hours (Self-Paced)
- Slide 2 of 18
SEC535: Offensive AI - Attack Tools and Techniques
newIntermediate SEC535Offensive Operations
- 3 Days (Instructor-Led)
- 18 CPEs / 18 Hours (Self-Paced)
- Labs: 14 Hands-On Labs
- Slide 3 of 18
SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
Advanced SEC595Cyber Defense- GIAC Machine Learning Engineer (GMLE)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 30 Hands-On Labs
- Slide 4 of 18
FOR589: Cybercrime Investigations
Intermediate FOR589Digital Forensics and Incident Response
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 5 of 18
FOR585: Smartphone Forensic Analysis In-Depth
Essentials FOR585Digital Forensics and Incident Response
- GIAC Advanced Smartphone Forensics (GASF)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 6 of 18
FOR608: Enterprise-Class Incident Response & Threat Hunting
Intermediate FOR608Digital Forensics and Incident Response
- GIAC Enterprise Incident Responder (GEIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 7 of 18
FOR518: Mac and iOS Forensic Analysis and Incident Response
Intermediate FOR518Digital Forensics and Incident Response
- GIAC iOS and macOS Examiner (GIME)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 8 of 18
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
Intermediate FOR508Digital Forensics and Incident Response
- GIAC Certified Forensic Analyst (GCFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 35 Hands-On Labs
- Slide 9 of 18
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Advanced FOR610Digital Forensics and Incident Response
- GIAC Reverse Engineering Malware (GREM)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 48 Hands-On Labs
- Slide 10 of 18
FOR578: Cyber Threat Intelligence
Intermediate FOR578Digital Forensics and Incident Response
- GIAC Cyber Threat Intelligence (GCTI)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 11 of 18
FOR509: Enterprise Cloud Forensics and Incident Response
Major UpdatesIntermediate FOR509Digital Forensics and Incident Response
- GIAC Cloud Forensics Responder (GCFR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 12 of 18
FOR528: Ransomware and Cyber Extortion
Intermediate FOR528Digital Forensics and Incident Response
- 4 Days (Instructor-Led)
- 24 CPEs / 24 Hours (Self-Paced)
- Labs: 13 Hands-On Labs
- Slide 13 of 18
FOR577: LINUX Incident Response and Threat Hunting
Intermediate FOR577Digital Forensics and Incident Response
- GIAC Linux Incident Responder (GLIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 14 of 18
FOR710: Reverse-Engineering Malware: Advanced Code Analysis
Advanced FOR710Digital Forensics and Incident Response
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 12 Hands-On Labs
- Slide 15 of 18
FOR498: Digital Acquisition and Rapid Triage
Essentials FOR498Digital Forensics and Incident Response
- GIAC Battlefield Forensics and Acquisition (GBFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 16 of 18
FOR563: Applied AI for Digital Forensics and Incident Response: Leveraging Local Large Language Models
newIntermediate FOR563Digital Forensics and Incident Response- 1 Day (Instructor-Led)
- 6 CPEs / 6 Hours (Self-Paced)
- Labs: 4 Hands-On Labs
- Slide 17 of 18
FOR500: Windows Forensic Analysis
Essentials FOR500Digital Forensics and Incident Response
- GIAC Certified Forensic Examiner (GCFE)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 18 of 18
FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response
Advanced FOR572Digital Forensics and Incident Response
- GIAC Network Forensic Analyst (GNFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs