SANS Courses

The SaaS-y Side of Incident Response - Key Log Sources for Okta, GitHub, and Salesforce

Explore key log sources for Okta, GitHub, and Salesforce in cloud-based incident response. Learn to interpret SaaS logs, avoid common pitfalls, and improve detection strategies for effective security management.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

The Allure of The Hunt - Drawing New Talent Into Digital Forensics and Incident Response

Explore the appeal of Digital Forensics and Incident Response for newcomers, addressing challenges and strategies to attract and retain talent in this evolving field of cybersecurity.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Cloud Kleptos: Lessons Learned Responding to Scattered Spider - SANS DFIR Summit 2024

Explore advanced cloud-focused attack techniques and defense strategies against persistent threat actors like Scattered Spider. Learn about their methodical approach, TTPs, and how to protect your organization's assets.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Ghost in Your Supply Chain - APT Attacks on Taiwan's Financial Sector

Explore APT attacks on Taiwan's financial sector, focusing on supply chain vulnerabilities. Learn about MDM platform exploitation, JIRA abuse, and malware-free attacks. Gain insights into island-hopping techniques and comprehensive threat mapping.

• YouTube
• 45 minutes
• Self-Paced
• Free Video

Staying Ahead of Ransomware: Communication During a Ransomware Engagement

Discover effective communication strategies for ransomware incidents, from managing internal team coordination to public responses and consumer notifications during and after the crisis.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

A Programmatic Approach to Capturing and Communicating Insights from Rising Geopolitical Tensions

Explore a systematic framework for analyzing and communicating cyber threat intelligence during geopolitical conflicts, using Russia-Ukraine war insights to prepare for future global tensions.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

Iterate and Innovate: Applying the Startup Mindset to Cyber Threat Intelligence

Discover how startup principles like growth mindset, ownership, and customer obsession can transform your Cyber Threat Intelligence practice, drawing from real-world experiences across various organizational contexts.

• YouTube
• 30 minutes
• Self-Paced
• Free Video

Threat Actor Collaboration and Framework for Comparative Attribution - A Case Study

Explore threat actor collaboration through a case study of "Red Ishtar", examining shared tools, infrastructure, and attribution challenges while gaining practical frameworks for comparative threat analysis.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Leveraging Classic HUMINT Tactics in CTI Investigations

Discover practical strategies for implementing CyberHUMINT in threat intelligence operations, from building covert online profiles to engaging with threat actors and managing compromised operations.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

The Secret Life of Forgotten Malware Command and Control (C2) Domains

Explore the intriguing afterlife of exposed malware command and control domains, their continued value for threat actors and defenders, and the surprising insights from monitoring these supposedly burned assets.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Ransomware Syndicates - Understanding Modern Cybercriminal Organizations

Delve into the evolving psychology and business tactics of modern ransomware syndicates, examining their sophisticated operations, target selection strategies, and effective countermeasures for enhanced cybersecurity defense.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Bridging CTI and Fraud - Understanding Social Media Cyber Threat Landscape and Beyond

Explore social media cyber threats and fraud prevention strategies in Indonesia, focusing on customer impersonation, platform exploitation, and effective CTI implementation for risk management.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Advanced Threat Research Methodologies - Unraveling a Triple-APT Intrusion

Dive into advanced threat intelligence methodologies through a real-world case study of a triple nation-state APT attack, covering clustering techniques, attribution frameworks, and intelligence-driven hunting approaches.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Building Cyber Threat Resilience with STRAT - A New Methodology for Cyber Threat Intelligence

Discover STRAT methodology for enhancing cyber defense resilience through systems thinking, enabling deeper threat analysis and improved defensive strategies while building adaptable security postures.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Identifying Detection Gaps and Enhancing CTI Value Through Case Study Analysis

Explore a real-world case study demonstrating how Cyber Threat Intelligence identifies detection gaps and transforms into actionable security strategies for enhanced organizational protection.

• YouTube
• 31 minutes
• Self-Paced
• Free Video