SANS Workshops

Dive into material and get hands-on experience with tools and techniques that you can apply immediately with these FREE workshops led by SANS Faculty.

Free Upcoming SANS Workshops

In these workshops you will:

  • Learn Hands-on Skills that you can use immediately
  • Go In-Depth into the latest technology
  • Interact with other attendees
  • Get access to SANS top Instructors

The upcoming workshops are listed out below and will feature live stream instruction, subject matter expert support, immersive hands-on labs and student to student interactive Slack workspace similar to our Live Online environment.

Due to the nature of these workshops, many have a capacity limit and may not be made available for archive. To help us offer this opportunity to as many people as possible, we are asking that you please only register if you plan to attend live. Archived workshops will be available for self-guided viewing after the workshop has ended.

"I am an introductory learner and this would have helped me TREMENDOUSLY with a job interview I just failed because I hadn't worked with managing security for S3 buckets in application. Great (and free) training. Some of the best types of workshops I've attended. Will be coming back for more; even if I don't know what I'm getting myself into." - Avoiding Data Disasters attendee

Upcoming SANS Workshops

Please click through to registration for more information including prerequisites and systems requirements.
Cyber42: Transformational LeaderKevin GarveyThursday, 11 Jan 2024
10:00am EST (15:00 UTC)
Practice your skills in an engaging, team-based environment to improve your cyber security executive decision making proficiency. Cyber42 is a realistic leadership simulation with applicable and discussion-based outcomes. Leave with a confidence boast in a key skill senior leaders seek from their CISOs: nimble decision making.
Least Privilege - An Adventure in Third-Party Cloud Account AccessRyan NicholsonWednesday, 17 Jan 2024
10:00am EST (15:00 UTC)

Many cloud-focused tools and third-party vendors require access to your organization’s cloud account. Sure, you could open up the flood gates and allow full, administrative access, but do those vendors and tools need that level of access? Most likely, no. In an age of increased supply chain and upstream vendor compromises, we must ensure that we are limiting any and all external access to what is truly needed and nothing more.

Cyber42: Operational Cybersecurity LeaderJonathan RistoThursday, 25 Jan 2024
10:00am EST (15:00)

Enhance your proficiency in operational cybersecurity decision-making through immersive team-based simulations with Cyber42. Practice agile decision-making and information synthesis, key skills required for success in leadership roles. Engage in thought-provoking discussions and gain practical insights to improve your cybersecurity competencies.

Building Better Detections | Azure EditionAlex BraulikTuesday, 6 Feb 2024
10:00am EST (15:00)

As with any enterprise environment, we can (and should) focus on hardening our defenses to keep the adversaries out, but these defenses may some day be evaded via a variety of methods. Cloud is no different. In this workshop, we will work through the process of creating a detection that we can use as defenders to spot an adversary performing attack techniques against our Azure environments.

Details and registration for future workshops will be added as they become available.

Keep offering this useful and informative free workshops hosted by experienced speakers! Loved it.
Protecting Cloud Assets and Improving Security, attendee
I liked the explanations portions where Ryan would explain common scenarios.
Building Detections in Azure, attendee
Great workshop, love the hands-on experience.
Building Detections in AWS, attendee