Tech Tuesdays Workshops Banner

Experience SANS Live Online with Tech Tuesday Workshops

Dive into the material and get hands-on experience with tools and techniques that you can apply immediately.

Free Upcoming Live Online Workshops

In these workshops you will:

  • Learn Hands-on Skills that you can use immediately
  • Go In-Depth into the latest technology
  • Interact with other attendees
  • Get access to SANS top Instructors
  • Experience the SANS Live Online platform

The upcoming workshops are listed out below and will feature the live stream instruction, subject matter expert support, immersive hands on labs and student to student interactive Slack channel benefits that you would get in a Live Online environment. We recommend bookmarking this page and checking back frequently, as we'll be adding more in the days and weeks to come.

Due to the nature of these workshops, many have a capacity limit and will not be made available for archive. To help us offer this opportunity to as many people as possible, we are asking that you please only register if you plan to attend live.


Building Out a Hands-On Purple Team Stack

Tuesday, February 2nd, 2021 at 10:00am - 12:00pm EST (15:00 UTC)
Duration: 2 Hours
Erik Van Buggenhout

We will start the workshop by laying the foundations that are required to perform successful adversary emulation and purple teaming. We will explain core concepts and tooling required to start doing purple teaming. In true purple team fashion, this includes both tools aimed at blue and red teaming;

  • Elastic and SIGMA for detection and visibility
  • Covenant as a C2 tool
  • Caldera as an automated adversary emulation tool
  • VECTR as a purple team tracking tool

Once the introduction is done, we will “get our hands dirty” and spin up an environment to run through some practical exercises using the above tools!


    Familiarity with Linux and Windows is mandatory.

    System Requirements

    Prior to the workshop participants should prepare the following –

    • Download and install the workshop VM:
    • Installed 64-bit host operating systems (Windows is recommended)
    • Download and install VM Workstation Pro 15.5 or higher, VMware Fusion 11.5 or higher, or VMware Workstation Player 15.5 or higher versions on your system prior to the start of the workshop
    • Adobe Acrobat or other PDF reader application
    • IMPORTANT! An AWS account is required to do hands-on exercises during the workshop. The AWS account must be created prior to the workshop.
      • A credit card should be linked to the AWS account that was created. Estimated usage costs for the AWS account during the workshop are a maximum of $10.
      • For detailed instructions on these preparation steps, please refer to the following URL: