Home of the Cyber Defense curriculum of @SANSInstitute, a hub for #CyberDefense, #BlueTeam, and #OSINT info, training, media, community, and events.

Joined November 2014
12,153 Photos and videos
AI is already changing how attackers operate AND how defenders respond. This event includes sessions on AI-driven SOC workflows, vulnerability management, agent-based threats, and more! 🔗 go.sans.org/UvGjLn
1
3
443
The former head of NSA's red team said his biggest fear was an out-of-band tap. SANS Fellow Eric Conrad explains what that means for defenders — and how to build one. ▶️ youtu.be/JD76YD8qdjo
1
3
440
🌐 SEC497 is your gateway to OSINT mastery! From beginner to advanced techniques, this course covers it all. Explore the course and try the free preview: go.sans.org/RHrRJ3 #OSINT
298
Struggling to connect evidence to conclusions? The Intelligence Analyst’s Playbook breaks down: • BLUF key judgments • Evidence-to-judgment traceability • Alternative hypotheses Build stronger analysis → go.sans.org/ZMSFGx
2
380
Want to build AI agents that actually work? Start by understanding why they fail. SANS Faculty Fellow Mark Baggett walks through context limits, tool calling, and scaffolding — live in Python. ▶️ youtu.be/m6QABn2_nXE
2
361
Cybersecurity is not a vocabulary test. Rich Greene’s new blog explains how practitioners move from memorizing terms to seeing the whole system: technology, operations, people, and business. 👉 Read the blog: go.sans.org/7oVCGy
1
215
AI in the SOC needs focus. This blog breaks down where AI fits into security operations and why telemetry, data quality, and workflow design matter before automation does. Read on to learn more! 👉 go.sans.org/l1oi8E
1
1
3
211
AI is the future—secure it now. 🔐 Learn how to build & secure Retrieval-Augmented Generation (RAG) solutions with LLMs on-prem—no need to expose sensitive data to third parties. Try the FREE course preview today! 👉 go.sans.org/UjvXfD
1
255
Cyber defense is being tested by speed, scale, and assumptions. This recap of Secure Your Fortress 2026 covers detection gaps, agentic AI risk, MCP trust issues, timestamp failures, and what defenders need to question next. 👉 go.sans.org/QSnZ6r
2
239
📺 Now OnDemand. Watch Ted Demopoulos break down the infosec startup path: ideas, funding, execution, and exits. 🔗 go.sans.org/T7u86g #OnDemand #Infosec #Startups
2
196
🔍 Detect and defeat cyber threats with SEC503 Intrusion Detection In-Depth! Learn to catch what others miss and respond to network intrusions effectively. Try our FREE course preview today! 🛡️ #CyberSecurity #IntrusionDetection #NetworkSecurity go.sans.org/qeFG5D
221
New video just dropped! 🎉 Andy Laman walks through Wireshark's command-line tools that most people don't know exist — capinfos, editcap, mergecap, tshark, and more. If you live in the terminal, this one's for you. 👇 youtu.be/SpbUTsrRAP4
5
676
🚨 Starting in 1 hour. Infosec startups require more than a good idea. This session covers funding, execution, exits, and the business side of building. 🔗 go.sans.org/T7u86g #Infosec #Startups #CyberSecurity
144
#SEC501 Advanced Security Essentials - Enterprise Defender teaches how to build a comprehensive security program, detect advanced attacks, perform pen tests, analyze malware, & respond to incidents. Try course preview: go.sans.org/9NxlWW
1
212
Your analysis is only as strong as your process. From ACH to bias mitigation to calibrated probability language—this playbook helps you think like an analyst. Start using it today: go.sans.org/ZMSFGx
1
295
Stop treating AI like a buzzword. In SEC573, you’ll build Python-powered AI tools that: • Detect anomalies in real time • Automate investigations • Uncover hidden attack patterns Start exploring → Free course preview: go.sans.org/uQgx46
286
Tomorrow: infosec meets startups. Ted Demopoulos covers ideas, funding, execution, and what security pros should understand before building or joining a startup. 📅 Jun 10 | 11:00 AM ET 🔗 go.sans.org/T7u86g #Infosec #Startups #CyberSecurity
225
🔐 Protect your organization from AI-specific threats with SEC411! Learn to defend against prompt injection, jailbreaking, and RAG manipulation through practical, hands-on labs. Start your AI security journey today: go.sans.org/gHJMPX #AISecurity #LLM #CyberDefense
285
Russia's IRA ran a $35M influence operation. 31M Facebook shares. 185M Instagram likes. SANS instructor and former USAF intel analyst Chris Pizor breaks down how it worked — and what defenders need to understand. ▶️ youtu.be/giG5VjFpvO8
1
584
🚨 Ready to boost your defense skills? SEC450 SOC Analyst Training covers essential tools and techniques for SOC Analysts. Get started with a FREE one-hour course preview today! 🔐 #BlueTeam #CyberSecurityTraining #SecurityOperations #SOC go.sans.org/AKgyXT
191
"It's all encrypted" is not a reason to stop watching the wire. SANS Fellow Eric Conrad on why Cobalt Strike, Sliver, and Metasploit still give themselves away — and how to catch them. ▶️ youtu.be/JD76YD8qdjo
1
1
561