New iPad Pro, Microsoft Surface Pro or $550 Off with SANS OnDemand or vLive - ends July 12!

SANS Courseware

To ensure students receive the best learning experience and value from their SANS Training Course, we provide pupils with an extensive library of resources such as textbooks and toolkits.

SANS Training Courses are written by world-leading subject matter experts and are reviewed and updated regularly. Student feedback, formally submitted after every day of training, contributes to ensuring courses remain of the highest possible standard.

There are several different routes students can take to complete their training.

Whichever training method a student follows, they receive a consistent training experience. Across all three training styles, students receive the same high quality cyber security learning resources.

These include:

  • SANS Textbooks
  • SANS Training Events generally run across five or six days. Typically, students will receive a new textbook each day. These books cover the day's lesson. They are the student's to keep and refer back to, or work through if an online study route is being followed. Courseware textbooks are:

    • Practical - Packed with skills-based advice, illustrations, notes, techniques, theory and screenshots.
    • Written by cyber security experts - Our Instructors deliver first-rate training content. Textbooks are of the same quality.
    • Exhaustive - Books often run into hundreds of pages.
    • Ideal for revision - Having key course content to hand is invaluable when revising for a GIAC Certification.
    • Up to date - SANS Training is always aligned with cutting edge technology and the latest attack vectors. Courseware textbooks are frequently updated and amended.

    When studying for GIAC Certification, exams are open book. Students are able to take their SANS Courseware with them on the day.

  • Tool Kits
  • In courses where the Instructor explores how specific software tools and applications can be leveraged, we'll make sure students leave their SANS Training Course with these tools. We'll generally copy them onto either a CD/DVD or a USB key.

    Armed with a SANS Toolkit, students will be able to return to their office, install the tools they've used in training and be ready to work immediately.

    Given our community focus, much of the software used is open source.

  • SIFT Workstation 3
  • The SANS Investigation Forensic Toolkit Workstation was created by Rob Lee, a SANS Faculty Fellow. SIFT is used in several SANS Courses and can be downloaded for free. Download SIFT here.

  • Trial Versions
  • Some of the tools our Instructors rely upon are commercial applications (opposed to open source). Where possible, we'll endeavour to supply a complete version of the program. If this isn't possible, students receive trial versions.

  • Disc Images
  • Forensic analysis often requires gathering data from a disc image. If a class exercise is based around such a scenario we'll make sure students have a copy of the image to take away. This means students will be able to recreate the lab experiment.

    If students are dealing with a disc image based on a commercial operating system, we'll make sure attendees have the correct licences to take away.

  • Posters
  • For some units and courses, we've created wall charts that summarise the session's key messages, techniques and tools. Students can pin them to their office wall and refer back to them when they're working on a project.

  • Cheat Sheets
  • Often, a SANS Instructor will deliver information and practical advice about a tool or technology. To help put what's learned into action as soon as a student is back in the office, SANS often compile a list of command line actions and keyboard shortcuts.


Training Events
Event Dates Register
SANS London July 2017 Jul 03 - Jul 08, 2017  
SANS Munich Summer 2017 Jul 10 - Jul 15, 2017  
SANS Prague 2017 Aug 07 - Aug 12, 2017  
SANS Dublin 2017 Sep 11 - Sep 16, 2017  
SANS Copenhagen 2017 Sep 25 - Sep 30, 2017  
SANS London September 2017 Sep 25 - Sep 30, 2017  
SANS SEC504 at Cyber Security Week 2017 Sep 25 - Sep 30, 2017  
SANS DFIR Summit Prague 2017 Oct 02 - Oct 08, 2017  
SANS Oslo Autumn 2017 Oct 02 - Oct 07, 2017  
SANS Brussels Autumn 2017 Oct 16 - Oct 21, 2017  
SANS Berlin 2017 Oct 23 - Oct 28, 2017  
SANS Gulf Region 2017 Nov 04 - Nov 16, 2017  
SANS Amsterdam 2017 Nov 06 - Nov 11, 2017  
SANS Paris November 2017 Nov 13 - Nov 18, 2017  
SANS London November 2017 Nov 27 - Dec 02, 2017  
SANS Khobar 2017 Dec 02 - Dec 07, 2017  
European Security Awareness Summit 2017 Dec 04 - Dec 07, 2017  
SANS Munich December 2017 Dec 04 - Dec 09, 2017 Coming Soon
SANS Frankfurt 2017 Dec 11 - Dec 16, 2017 Coming Soon
SANS Amsterdam January 2018 Jan 15 - Jan 20, 2018 Coming Soon
SANS Brussels February 2018 Feb 19 - Feb 24, 2018 Coming Soon
Online Training: SANS OnDemand
Event Dates Register
OnDemand - Various Courses Anytime  
Private Training
Event Dates Register
Private Training Course of Your Choice Your Choice  

Event set up in process - please check back soon for further event information and registration.