Register by tomorrow to save $300 on cutting-edge cyber security training at SANS Miami 2020!


To attend this webcast, login to your SANS Account or create your Account.

Are You Ready for Threat Intelligence? Behind the Scenes with FOR578

  • Wednesday, January 6th, 2016 at 12:00 PM EST (17:00:00 UTC)
  • Robert M Lee and Mike Cloppert
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.

You can now attend the webcast using your mobile device!


This webcast will discuss SANS' new FOR578 - Cyber Threat Intelligence course with the two co-authors Mike Cloppert and Robert M. Lee. The presentation will help people understand if they are ready for threat intelligence, how it can be useful in their environments, and what students can expect from taking the class. Webcast participants will learn about the direction of the class, what is covered in terms of content and labs, what useful prerequisites should be sought, and about the value of threat intelligence training. Additionally, lessons learned from student and instructor interactions will be discussed to educate on the challenges posed to the threat intelligence community today. SANS FOR578 is one of the most anticipated new SANS classes available and attending this webcast will help you determine if you are ready to join the list of alumni."

Explore opportunities to enrich your Cyber Intel skills:

Take the FOR578 Cyber Threat Intelligence course in a city near you
The FOR578 course will not only provide you with the technical expertise needed to detect and scope cyber threats but also with the skills required to become a better analytical thinker; allowing you to understand how adversaries operate and therefore combat threats effectively. For more information or for the next available class click here:

Attend one of the most comprehensive event in Cyber Threat Intelligence
Hosted in beautiful Alexandria, VA, the fourth annual Cyber Threat Intelligence Summit will feature contemporary theories, research, and tradecraft presented by more than twenty foremost CTI experts. Learn how to detect and respond to all ranges of adversaries including some of the most sophisticated threats targeting your networks. For more information or to register click here:

Speaker Bios

Robert M. Lee

Robert M. Lee, a SANS certified instructor and author of the "ICS Active Defense and Incident Response" and "Cyber Threat Intelligence" courses, is the founder and CEO of Dragos, a critical infrastructure cybersecurity company, where he focuses on control system traffic analysis, incident response and threat intelligence research. He has performed defense, intelligence and attack missions in various government organizations, including the establishment of a first-of-its-kind ICS/SCADA cyber threat intelligence and intrusion analysis mission. Author of SCADA and Me and a nonresident National Cyber Security Fellow at New America, focusing on critical infrastructure cybersecurity policy issues, Robert was named EnergySec's 2015 Energy Sector Security Professional of the Year.

Mike Cloppert

Michael has been a security and threat intelligence analyst since 2001, and has been an IT practitioner since 1997. He is an original author of the SANS FOR578 Cyber Threat Intel Analysis course, the seminal paper Intel-driven CND Through Analysis of Adversary Campaigns and Intrusion Kill Chains, and has co-chaired the SANS CTI Summit since its inception in 2013. Michael holds a B.S. in Computer Engineering from The University of Dayton and an M.S. in Computer Science from The George Washington University. He has also earned GIAC GCFA gold and GCIA gold certifications (among others) throughout his career. Michael presently works as a consultant for PriceWaterhouseCoopers after over a decade with Lockheed Martin, where he helped build their world-class CIRT from the ground up, and supported clients in the pharmaceutical, energy, DoD, and Intelligence Community. Previous to LM, he worked full time in the federal government and financial industry. He is a professional member of ACM and IEEE, and in his spare time is an amateur bassist and semi-professional jazz trombonist.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.