SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
SEC595Cyber Defense, Artificial Intelligence
SANS Community Benefits
Connect, learn, and share with other cybersecurity professionals
In-Depth Endpoint Forensics and Response at Scale
In-Depth Endpoint Forensics and Response at Scale (PDF, 5.32MB)Published: 30 Apr, 2026
Thank You To Our Sponsor
Enterprise DFIR at Scale: From Investigation to Response
This webcast examines how OpenText Endpoint Forensics and Response can bridge the gap between detection tools and deep forensic investigation, enabling organizations to pivot directly from discovery to containment and recovery.
Meet Your Author
Related Courses
- Slide 1 of 20
SEC275: Foundations: Computers, Technology, & Security
Beginner SEC275Cyber Defense
- GIAC Foundational Cybersecurity Technologies (GFACT)
- 38 CPEs / 38 Hours (Self-Paced)
- Labs: 90 Hands-On Labs
- Slide 2 of 20
SEC503: Network Monitoring and Threat Detection In-Depth
Intermediate SEC503Cyber Defense
- GIAC Certified Intrusion Analyst (GCIA)
- 6 Days (Instructor-Led)
- 46 CPEs / 46 Hours (Self-Paced)
- Labs: 37 Hands-On Labs
- Slide 3 of 20
SEC501: Advanced Security Essentials - Enterprise Defender
Intermediate SEC501Cyber Defense
- GIAC Certified Enterprise Defender (GCED)
- 6 Days (Instructor-Led)
- 38 CPEs / 38 Hours (Self-Paced)
- Labs: 25 Hands-On Labs
- Slide 4 of 20
FOR589: Cybercrime Investigations
Intermediate FOR589Digital Forensics and Incident Response
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 5 of 20
SEC573: AI-Powered Security Automation: Building Tools with Python, LLMs, and MCP
MAJOR UPDATESAdvanced SEC573Cyber Defense, Artificial Intelligence
- GIAC Python Coder (GPYC)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 128 Hands-On Labs
- Slide 6 of 20
SEC497: Practical Open-Source Intelligence (OSINT)
Intermediate SEC497Cyber Defense
- GIAC Open Source Intelligence (GOSI)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 29 Hands-On Labs
- Slide 7 of 20
SEC450: SOC Analyst Training – Applied Skills for Cyber Defense Operations
MAJOR UPDATESIntermediate SEC450Cyber Defense
- GIAC Security Operations Certified (GSOC)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 8 of 20
FOR585: Smartphone Forensic Analysis In-Depth
MAJOR UPDATESEssentials FOR585Digital Forensics and Incident Response
- GIAC Advanced Smartphone Forensics (GASF)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 22 Hands-On Labs
- Slide 9 of 20
SEC401J: Security Essentials - Network, Endpoint, and Cloud (Japanese)
Essentials SEC401JCyber Defense
- GIAC Security Essentials (GSEC)
- 6 Days (Instructor-Led)
- 46 CPEs / 46 Hours
- Labs: 20 Hands-On Labs
- Slide 10 of 20
SEC587: Advanced Open-Source Intelligence (OSINT) Gathering and Analysis
Advanced SEC587Cyber Defense
- GIAC Strategic OSINT Analyst (GSOA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 28 Hands-On Labs
- Slide 11 of 20
SEC411: AI Security Principles and Practices: GenAI and LLM Defense
NEWIntermediate SEC411Cyber Defense, Artificial Intelligence
- 18 CPEs / 18 Hours (Self-Paced)
- Labs: 5 Hands-On Labs
- Slide 12 of 20
SEC511: Cybersecurity Engineering: Advanced Threat Detection and Monitoring
Intermediate SEC511Cyber Defense
- GIAC Continuous Monitoring Certification (GMON)
- 6 Days (Instructor-Led)
- 46 CPEs / 46 Hours (Self-Paced)
- Labs: 18 Hands-On Labs
- Slide 13 of 20
FOR478: Cyber Threat Intelligence Foundations
NEWEssentials FOR478Digital Forensics and Incident Response
- 2 Days (Instructor-Led)
- 12 CPEs / 12 Hours
- Labs: 8 Hands-On Labs
- Slide 14 of 20
SEC555: Detection Engineering and SIEM Analytics
Intermediate SEC555Cyber Defense
- GIAC Certified Detection Analyst (GCDA)
- 5 Days (Instructor-Led)
- 30 CPEs / 30 Hours (Self-Paced)
- Labs: 18 Hands-On Labs
- Slide 15 of 20
FOR608: Enterprise-Class Incident Response & Threat Hunting
UPDATEDIntermediate FOR608Digital Forensics and Incident Response
- GIAC Enterprise Incident Responder (GEIR)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 16 of 20
FOR518: Mac and iOS Forensic Analysis and Incident Response
UPDATEDIntermediate FOR518Digital Forensics and Incident Response
- GIAC iOS and macOS Examiner (GIME)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 23 Hands-On Labs
- Slide 17 of 20
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
MAJOR UPDATESIntermediate FOR508Digital Forensics and Incident Response
- GIAC Certified Forensic Analyst (GCFA)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 35 Hands-On Labs
- Slide 18 of 20
FOR610: Reverse-Engineering Malware: Malware Analysis Tools and Techniques
Advanced FOR610Digital Forensics and Incident Response
- GIAC Reverse Engineering Malware (GREM)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 48 Hands-On Labs
- Slide 19 of 20
FOR578: Cyber Threat Intelligence
MAJOR UPDATESIntermediate FOR578Digital Forensics and Incident Response
- GIAC Cyber Threat Intelligence (GCTI)
- 6 Days (Instructor-Led)
- 36 CPEs / 36 Hours (Self-Paced)
- Labs: 20 Hands-On Labs
- Slide 20 of 20
SEC495: Leveraging LLMs: Building & Securing RAG, Contextual RAG, and Agentic RAG
Essentials SEC495Cyber Defense, Artificial Intelligence
- 7 CPEs / 7 Hours (Self-Paced)