Three More Days to Get an iPad Air w/ Smart Keyboard with any 5 or 6 Day SANS Training - Register Today!


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Maximizing Your Existing Toolset… I Got 99 Tools, but Time Ain't One

  • Thursday, June 07, 2018 at 10:30 AM EDT (2018-06-07 14:30:00 UTC)
  • Jon Gorenflo

You can now attend the webcast using your mobile device!



Does your security team constantly purchase "one more tool" to achieve compliance and be "truly secure"? Unfortunately, focusing on tools and compliance tends to consume enormous amounts of your time and energy, which can distract you from the real security issues that put your company at the most risk. 

Sadly, this also robs you of the joy and meaning derived from building effective security controls and demonstrably defending your organization from attackers.

 Register for this webcast if you'd like to learn how to create a measurable security program that:

  • Focuses time and energy on real risks
  • Aligns security's efforts with those of the business
  • Maximizes the effectiveness of your existing tools
  • Identifies the need and requirements for new security tools
  • Demonstrates the value of security spending to the business

 Jon Gorenflo is a SANS instructor and teaches SEC504: Hacker Tools, Techniques, Exploits, and Incident Handling and SEC560: Network Penetration Testing and Ethical Hacking.

Speaker Bio

Jon Gorenflo

Jon is the Founder and Principle Consultant of Fundamental Security, a small consulting firm focused on penetration testing, incident response, and strategic security consulting.He has worked in Information Technology since 2004, and has focused on Information Security since 2006. Most recently, he was the Application Security Testing manager a Fortune 500 Financial Institution, and a Security Architect and Penetration Tester for a Fortune 500 retailer. In all, he has performed security engineering, security architecture, incident response, and penetration testing in the government, retail, and finance.

Passionate about security and leadership, he loves trying to ignite those passions in other people. Jon is proud to have served in the Army Reserve for 11 years, where he became a Warrant Officer and served one tour in Afghanistan. He currently maintains the GCIH, GPEN, GAWN, GMOB, CISSP, and Security+.

"I really appreciated Jon's way of teaching, insight and passion. It kept me interested each and every day and I kept looking forward to the next day. Keep up the excellent work!" Homer Rodriguez, Idaho Department of Finance

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.