Training
Featured Course View All Courses
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Group Purchasing
Group Purchasing

WAFstat: External Verification of WAF Enforcement Posture: Measuring Observable WAF Enforcement Beyond Presence Fingerprinting

Download File
WAFstat: External Verification of WAF Enforcement Posture: Measuring Observable WAF Enforcement Beyond Presence Fingerprinting (PDF, 0.80MB)Published: 22 Sep, 2026
Created by:
Tiago Kiill

This study presents WAFstat, a lightweight external verification method that combines a fixed, versioned marker corpus with response-shape baselines, configuration validation, and immutable provenance.

Additional Resources

Continuous Enforcement vs Out-of-Band Validation: Mitigating Configuration Drift on Windows Server 2022 with Automated Remediation Loops

WhitepaperCyber Defense
  • 22 Sep 2026
  • Christopher Sandoval

Beyond the Tunnel: A Lab-Based Comparative Evaluation of Network-Layer VPN and Identity-Aware Reverse Proxy Architectures Against the CISA Zero Trust Maturity Model

WhitepaperCyber Defense
  • 17 Sep 2026
  • Henry Cheung

Agentic Security: Detection and Response at Machine Speed

WhitepaperArtificial Intelligence, Cloud Security
  • 15 Sep 2026
  • Gee Rittenhouse, Eric Johnson

Zero Trust and AI in Cloud Environments: Securing Autonomous Agents and Modern Workloads

WhitepaperArtificial Intelligence, Cloud Security
  • 15 Sep 2026
  • Dave Shackleford, Dr. Anton Chuvakin

Architecting the Agentic Cloud: Building Secure AI Agents with Azure

WhitepaperArtificial Intelligence, Cloud Security
  • 15 Sep 2026
  • Wesley Kuzma, Chris Cochran

Securing the Agentic Cloud: Practical Strategies for Detection, Zero Trust, Governance, and Security Architecture

WhitepaperArtificial Intelligence, Cloud Security
  • 17 Aug 2026
  • Gee Rittenhouse, Eric Johnson, Dr. Anton Chuvakin, Dave Shackleford, Wesley Kuzma, Chris Cochran

Related Courses

  • Slide 1 of 19

    SEC546: Securing Agentic AI

    BETA
    AI-FOCUSED
    Advanced
    SEC546Cloud Security, Artificial Intelligence
    SEC546
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours
    • Labs: 19 Hands-On Labs

    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours
    • Labs: 19 Hands-On Labs
    View course detailsRegister
  • Slide 2 of 19

    FOR478: Cyber Threat Intelligence Foundations

    AI SKILLS
    Essentials
    FOR478Digital Forensics and Incident Response, Artificial Intelligence
    FOR498: Digital Acquisition and Rapid Triage
    • 2 Days (Instructor-Led)
    • 12 CPEs / 12 Hours (Self-Paced)
    • Labs: 8 Hands-On Labs

    • 2 Days (Instructor-Led)
    • 12 CPEs / 12 Hours (Self-Paced)
    • Labs: 8 Hands-On Labs
    View course detailsRegister
  • Slide 3 of 19

    SEC275: Foundations: Computers, Technology, & Security

    Beginner
    SEC275Cyber Defense
    SEC406: Linux Security for InfoSec Professionals
    • GIAC Foundational Cybersecurity Technologies (GFACT)
    • 38 CPEs / 38 Hours (Self-Paced)
    • Labs: 90 Hands-On Labs

    • GIAC Foundational Cybersecurity Technologies (GFACT)
    • 38 CPEs / 38 Hours (Self-Paced)
    • Labs: 90 Hands-On Labs
    View course detailsRegister
  • Slide 4 of 19

    SEC503: Network Monitoring and Threat Detection In-Depth

    Intermediate
    SEC503Cyber Defense
    SEC503: Network Monitoring and Threat Detection In-Depth
    • GIAC Certified Intrusion Analyst (GCIA)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours (Self-Paced)
    • Labs: 37 Hands-On Labs

    • GIAC Certified Intrusion Analyst (GCIA)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours (Self-Paced)
    • Labs: 37 Hands-On Labs
    View course detailsRegister
  • Slide 5 of 19

    SEC501: Applied Cyber Defense

    MAJOR UPDATES
    AI SKILLS
    Intermediate
    SEC501Cyber Defense, Artificial Intelligence
    SEC501: Advanced Security Essentials - Enterprise Defender
    • GIAC Certified Enterprise Defender (GCED)
    • 6 Days (Instructor-Led)
    • 38 CPEs / 38 Hours (Self-Paced)
    • Labs: 26 Hands-On Labs

    • GIAC Certified Enterprise Defender (GCED)
    • 6 Days (Instructor-Led)
    • 38 CPEs / 38 Hours (Self-Paced)
    • Labs: 26 Hands-On Labs
    View course detailsRegister
  • Slide 6 of 19

    SEC573: AI-Powered Security Automation: Building Tools with Python, LLMs, and MCP

    MAJOR UPDATES
    AI-FOCUSED
    Advanced
    SEC573Cyber Defense, Artificial Intelligence
    SEC573: Automating Information Security with Python
    • GIAC Python Coder (GPYC)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 128 Hands-On Labs

    • GIAC Python Coder (GPYC)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 128 Hands-On Labs
    View course detailsRegister
  • Slide 7 of 19

    SEC497: Practical Open-Source Intelligence (OSINT)

    Intermediate
    SEC497Cyber Defense
    SEC497: Practical Open-Source Intelligence (OSINT)
    • GIAC Open Source Intelligence (GOSI)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 29 Hands-On Labs

    • GIAC Open Source Intelligence (GOSI)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 29 Hands-On Labs
    View course detailsRegister
  • Slide 8 of 19

    SEC450: AI-Enabled Security Operations: Hands-on Investigation, Detection, and Automation

    MAJOR UPDATES
    AI SKILLS
    Intermediate
    SEC450Cyber Defense, Artificial Intelligence
    SEC450: Blue Team Fundamentals: Security Operations and Analysis
    • GIAC Security Operations Certified (GSOC)
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 19 Hands-On Labs

    • GIAC Security Operations Certified (GSOC)
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 19 Hands-On Labs
    View course detailsRegister
  • Slide 9 of 19

    SEC401J: Security Essentials - Network, Endpoint, and Cloud (Japanese)

    Essentials
    SEC401JCyber Defense
    SEC401: Security Essentials - Network, Endpoint, and Cloud
    • GIAC Security Essentials (GSEC)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours
    • Labs: 20 Hands-On Labs

    • GIAC Security Essentials (GSEC)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours
    • Labs: 20 Hands-On Labs
    View course detailsRegister
  • Slide 10 of 19

    SEC587: Advanced Open-Source Intelligence (OSINT) Gathering and Analysis

    AI SKILLS
    Advanced
    SEC587Cyber Defense, Artificial Intelligence
    SEC587
    • GIAC Strategic OSINT Analyst (GSOA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 28 Hands-On Labs

    • GIAC Strategic OSINT Analyst (GSOA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 28 Hands-On Labs
    View course detailsRegister
  • Slide 11 of 19

    SEC411: AI Security Principles and Practices: GenAI and LLM Defense

    NEW
    AI-FOCUSED
    Intermediate
    SEC411Cyber Defense, Artificial Intelligence
    SEC411
    • 24 CPEs / 24 Hours (Self-Paced)
    • Labs: 5 Hands-On Labs

    • 24 CPEs / 24 Hours (Self-Paced)
    • Labs: 5 Hands-On Labs
    View course detailsRegister
  • Slide 12 of 19

    SEC511: Cybersecurity Engineering: Advanced Threat Detection and Monitoring

    Intermediate
    SEC511Cyber Defense
    SEC511: Continuous Monitoring and Security Operations
    • GIAC Continuous Monitoring Certification (GMON)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours (Self-Paced)
    • Labs: 18 Hands-On Labs

    • GIAC Continuous Monitoring Certification (GMON)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours (Self-Paced)
    • Labs: 18 Hands-On Labs
    View course detailsRegister
  • Slide 13 of 19

    SEC555: Detection Engineering and SIEM Analytics

    Intermediate
    SEC555Cyber Defense
    SEC555: SIEM with Tactical Analytics
    • GIAC Certified Detection Analyst (GCDA)
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 18 Hands-On Labs

    • GIAC Certified Detection Analyst (GCDA)
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 18 Hands-On Labs
    View course detailsRegister
  • Slide 14 of 19

    SEC495: Leveraging LLMs: Building & Securing RAG, Contextual RAG, and Agentic RAG

    AI-FOCUSED
    Essentials
    SEC495Cyber Defense, Artificial Intelligence
    SEC495: Leveraging LLMs: Building & Securing RAG, Contextual RAG, and Agentic RAG
    • 7 CPEs / 7 Hours (Self-Paced)

    • 7 CPEs / 7 Hours (Self-Paced)
    View course detailsRegister
  • Slide 15 of 19

    SEC401: Security Essentials

    AI SKILLS
    Essentials
    SEC401Cyber Defense, Artificial Intelligence
    SEC401: Security Essentials - Network, Endpoint, and Cloud
    • GIAC Security Essentials (GSEC)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs

    • GIAC Security Essentials (GSEC)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs
    View course detailsRegister
  • Slide 16 of 19

    SEC673: Advanced Information Security Automation with Python

    Advanced
    SEC673Cyber Defense
    SEC673: Advanced Information Security Automation with Python
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 27 Hands-On Labs

    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 27 Hands-On Labs
    View course detailsRegister
  • Slide 17 of 19

    SEC301: Introduction to Cybersecurity

    AI SKILLS
    Beginner
    SEC301Cyber Defense, Artificial Intelligence
    SEC673: Advanced Information Security Automation with Python
    • GIAC Information Security Fundamentals (GISF)
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 14 Hands-On Labs

    • GIAC Information Security Fundamentals (GISF)
    • 5 Days (Instructor-Led)
    • 30 CPEs / 30 Hours (Self-Paced)
    • Labs: 14 Hands-On Labs
    View course detailsRegister
  • Slide 18 of 19

    SEC530: Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise

    Intermediate
    SEC530Cyber Defense
    SEC530: Defensible Security Architecture and Engineering: Implementing Zero Trust for the Hybrid Enterprise
    • GIAC Defensible Security Architecture (GDSA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 24 Hands-On Labs

    • GIAC Defensible Security Architecture (GDSA)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 24 Hands-On Labs
    View course detailsRegister
  • Slide 19 of 19

    SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

    AI-FOCUSED
    Advanced
    SEC595Cyber Defense, Artificial Intelligence
    SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
    • GIAC Machine Learning Engineer (GMLE)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 30 Hands-On Labs

    • GIAC Machine Learning Engineer (GMLE)
    • 6 Days (Instructor-Led)
    • 36 CPEs / 36 Hours (Self-Paced)
    • Labs: 30 Hands-On Labs
    View course detailsRegister