NEW SANS Stay Sharp Training - Live Online: Quickly sharpen your skills with 2-day management courses. Save 25% thru tomorrow!


Subscribe to SANS Newsletters

Join the SANS Community to receive the latest curated cyber security news, vulnerabilities and mitigations, training opportunities, and our webcast schedule.

Microsoft Security Expert Jason Fossen to Keynote SANS Orlando Security Training Event

Offers Valuable Insight into PowerShell Including How it is Used and Abused

  • Bethesda, MD
  • February 12, 2020

SANS Institute, the global leader in cyber security training and certifications, today announced SANS Faculty Fellow and Microsoft Security Expert Jason Fossen (@JasonFossen) will deliver the keynote at SANS 2020 taking place April 3-10 in Orlando, FL. Fossen will share his unique insight into PowerShell during his talk, "PowerShell 2020: State of the Art/Hack/Infection."

"PowerShell is a classic dual-use technology. It can be used as a Weapon of Mass Infection (WMI) or as an enterprise-scale automation tool for security hardening and threat hunting," says Fossen. "Hackers and ransomware authors love PowerShell as a coder-friendly wrapper for the operating system -- and so do we. The challenge is how to keep the benefits of PowerShell for the defenders and deny its being commandeered by our adversaries. Join me in Orlando to learn all you need to know about this powerful technology."

For those wanting to learn even more about PowerShell, Fossen will teach his newly updated six-day course SEC505: Securing Windows and PowerShell Automation. This course teaches students how to write PowerShell scripts for Windows and Active Directory security automation and how to safely run these scripts on thousands of hosts over the network. Students will also learn how to defend against PowerShell malware such as ransomware and what is needed to harden Windows Server and Windows 10 against skilled attackers.

SANS 2020 features more than 50 immersion-style courses. Courses are available for all skill levels. Included on the agenda are SEC301: Introduction to Cyber Security, SEC402: Cybersecurity Writing: Hack the Reader, SEC564: Red Team Exercises & Adversary Emulation, SEC506: Securing Linux/Unix, SEC540: Cloud Security and DevOps Automation, SEC575: Mobile Device Security and Ethical Hacking, and more.

In addition to SANS classroom training, students can test their security skills at the Core NetWars Tournament, DFIR NetWars Tournament, or the Cyber Defense NetWars Tournament. Bonus evening talks will round out the agenda.

For a complete list of courses and instructors, or to register for SANS 2020, visit:

About SANS Institute

The SANS Institute was established in 1989 as a cooperative research and education organization. Today, SANS is the most trusted and, by far, the largest provider of cyber security training and certification to professionals in government and commercial institutions worldwide. Renowned SANS instructors teach more than 60 courses at In-Person and Live Online cyber security training events, and more than 50 courses are available anytime, anywhere with our OnDemand platform. GIAC, an affiliate of the SANS Institute, validates practitioner skills through more than 35 hands-on, technical certifications in cyber security. The SANS Technology Institute, a regionally accredited independent subsidiary, offers a master’s degree, graduate certificates, and an undergraduate certificate in cyber security. SANS Security Awareness, a division of SANS, provides organizations with a complete and comprehensive security awareness solution, enabling them to easily and effectively manage their ‘human’ cybersecurity risk. SANS also delivers a wide variety of free resources to the InfoSec community including consensus projects, research reports, webcasts, podcasts, and newsletters; it also operates the Internet's early warning system – the Internet Storm Center. At the heart of SANS are the many security practitioners, representing varied global organizations from corporations to universities, working together to support and educate the global information security community. (