Learn real-world cyber security skills directly from top industry experts during SANS Live Training events. Explore options.


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

ICMP: A world beyond ping

  • Tuesday, June 30, 2020 at 10:30 AM EDT (2020-06-30 14:30:00 UTC)
  • Andrew Laman

You can now attend the webcast using your mobile device!



Many people are aware of Internet Control Message Protocol (ICMP) or at least some common tools that use ICMP, like Ping. ICMP is used to report errors but can be used for so much more. Were you aware that ICMP can be used for covert tunnels, exfiltrating data, and may be leaking information about your internal systems? Are you monitoring ICMP?

Join us for this webcast where we will dive into ICMP, look at expected and unexpected types of ICMP messages, and ways of monitoring ICMP to better defend our networks.

Speaker Bio

Andrew Laman

Andrew Laman teaches SEC503 Intrusion Detection In-Depth, for the SANS Institute. With more than 25 years of IT and security experience in multiple industries, he holds multiple GIAC certifications, including the GIAC Security Expert (GSE) and key certifications in the cyber defense, digital forensics and incident response, and penetration testing certification tracks, as well as the CISSP and a variety of other industry certifications. Andy is the founder and principal consultant at A4 InfoSec, an independent consulting firm with services focused on monitoring, detection and incident response. He previously held lead security positions in Fortune 500 and global companies.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.