SANS Courseware

To ensure students receive the best learning experience and value from their SANS Training Course, we provide pupils with an extensive library of resources such as textbooks and toolkits.

SANS Training Courses are written by world-leading subject matter experts and are reviewed and updated regularly. Student feedback, formally submitted after every day of training, contributes to ensuring courses remain of the highest possible standard.

There are several different routes students can take to complete their training.

Whichever training method a student follows, they receive a consistent training experience. Across all three training styles, students receive the same high quality cyber security learning resources.

These include:

  • SANS Textbooks
  • SANS Training Events generally run across five or six days. Typically, students will receive a new textbook each day. These books cover the day's lesson. They are the student's to keep and refer back to, or work through if an online study route is being followed. Courseware textbooks are:

    • Practical - Packed with skills-based advice, illustrations, notes, techniques, theory and screenshots.
    • Written by cyber security experts - Our Instructors deliver first-rate training content. Textbooks are of the same quality.
    • Exhaustive - Books often run into hundreds of pages.
    • Ideal for revision - Having key course content to hand is invaluable when revising for a GIAC Certification.
    • Up to date - SANS Training is always aligned with cutting edge technology and the latest attack vectors. Courseware textbooks are frequently updated and amended.

    When studying for GIAC Certification, exams are open book. Students are able to take their SANS Courseware with them on the day.

  • Tool Kits
  • In courses where the Instructor explores how specific software tools and applications can be leveraged, we'll make sure students leave their SANS Training Course with these tools. We'll generally copy them onto either a CD/DVD or a USB key.

    Armed with a SANS Toolkit, students will be able to return to their office, install the tools they've used in training and be ready to work immediately.

    Given our community focus, much of the software used is open source.

  • SIFT Workstation 3
  • The SANS Investigation Forensic Toolkit Workstation was created by Rob Lee, a SANS Faculty Fellow. SIFT is used in several SANS Courses and can be downloaded for free. Download SIFT here.

  • Trial Versions
  • Some of the tools our Instructors rely upon are commercial applications (opposed to open source). Where possible, we'll endeavour to supply a complete version of the program. If this isn't possible, students receive trial versions.

  • Disc Images
  • Forensic analysis often requires gathering data from a disc image. If a class exercise is based around such a scenario we'll make sure students have a copy of the image to take away. This means students will be able to recreate the lab experiment.

    If students are dealing with a disc image based on a commercial operating system, we'll make sure attendees have the correct licences to take away.

  • Posters
  • For some units and courses, we've created wall charts that summarise the session's key messages, techniques and tools. Students can pin them to their office wall and refer back to them when they're working on a project.

  • Cheat Sheets
  • Often, a SANS Instructor will deliver information and practical advice about a tool or technology. To help put what's learned into action as soon as a student is back in the office, SANS often compile a list of command line actions and keyboard shortcuts.


Training Events
Event Dates Register
SANS Dublin 2017 Sep 11 - Sep 16, 2017  
SANS Copenhagen 2017 Sep 25 - Sep 30, 2017  
SANS London September 2017 Sep 25 - Sep 30, 2017  
SANS SEC504 at Cyber Security Week 2017 Sep 25 - Sep 30, 2017  
SANS DFIR Prague 2017 Oct 02 - Oct 08, 2017  
SANS Oslo Autumn 2017 Oct 02 - Oct 07, 2017  
SANS Brussels Autumn 2017 Oct 16 - Oct 21, 2017  
SANS Berlin 2017 Oct 23 - Oct 28, 2017  
SANS Gulf Region 2017 Nov 04 - Nov 16, 2017  
SANS Amsterdam 2017 Nov 06 - Nov 11, 2017  
SANS Milan November 2017 Nov 06 - Nov 11, 2017  
SANS Paris November 2017 Nov 13 - Nov 18, 2017  
SANS London November 2017 Nov 27 - Dec 02, 2017  
SANS Khobar 2017 Dec 02 - Dec 07, 2017  
European Security Awareness Summit 2017 Dec 04 - Dec 07, 2017  
SANS Munich December 2017 Dec 04 - Dec 09, 2017  
SANS Frankfurt 2017 Dec 11 - Dec 16, 2017  
SANS Amsterdam January 2018 Jan 15 - Jan 20, 2018 Coming Soon
SANS Dubai 2018 Jan 27 - Feb 01, 2018 Coming Soon
SANS London February 2018 Feb 05 - Feb 10, 2018 Coming Soon
SANS Oslo 2018 Feb 05 - Feb 10, 2018 Coming Soon
SANS Brussels February 2018 Feb 19 - Feb 24, 2018 Coming Soon
SANS Abu Dhabi 2018 Mar 03 - Mar 08, 2018 Coming Soon
SANS London March 2018 Mar 05 - Mar 10, 2018 Coming Soon
SANS Munich March 2018 Mar 19 - Mar 24, 2018 Coming Soon
SANS Zurich 2018 Apr 16 - Apr 21, 2018 Coming Soon
SANS London April 2018 Apr 16 - Apr 21, 2018 Coming Soon
SANS Amsterdam May 2018 May 28 - Jun 02, 2018 Coming Soon
SANS London June 2018 Jun 04 - Jun 09, 2018 Coming Soon
Online Training: SANS OnDemand
Event Dates Register
OnDemand - Various Courses Anytime  
Private Training
Event Dates Register
Private Training Course of Your Choice Your Choice  

Event set up in process - please check back soon for further event information and registration.