Your organizations information is at risk. Learn how to protect it at SANS Minneapolis - August 12-17.

SANS Courseware

To ensure students receive the best learning experience and value from their SANS Training Course, we provide pupils with an extensive library of resources such as textbooks and toolkits.

SANS Training Courses are written by world-leading subject matter experts and are reviewed and updated regularly. Student feedback, formally submitted after every day of training, contributes to ensuring courses remain of the highest possible standard.

There are several different routes students can take to complete their training.

Whichever training method a student follows, they receive a consistent training experience. Across all three training styles, students receive the same high quality cyber security learning resources.

These include:

  • SANS Textbooks
  • SANS Training Events generally run across five or six days. Typically, students will receive a new textbook each day. These books cover the day's lesson. They are the student's to keep and refer back to, or work through if an online study route is being followed. Courseware textbooks are:

    • Practical - Packed with skills-based advice, illustrations, notes, techniques, theory and screenshots.
    • Written by cyber security experts - Our Instructors deliver first-rate training content. Textbooks are of the same quality.
    • Exhaustive - Books often run into hundreds of pages.
    • Ideal for revision - Having key course content to hand is invaluable when revising for a GIAC Certification.
    • Up to date - SANS Training is always aligned with cutting edge technology and the latest attack vectors. Courseware textbooks are frequently updated and amended.

    When studying for GIAC Certification, exams are open book. Students are able to take their SANS Courseware with them on the day.

  • Tool Kits
  • In courses where the Instructor explores how specific software tools and applications can be leveraged, we'll make sure students leave their SANS Training Course with these tools. We'll generally copy them onto either a CD/DVD or a USB key.

    Armed with a SANS Toolkit, students will be able to return to their office, install the tools they've used in training and be ready to work immediately.

    Given our community focus, much of the software used is open source.

  • SIFT Workstation 3
  • The SANS Investigation Forensic Toolkit Workstation was created by Rob Lee, a SANS Faculty Fellow. SIFT is used in several SANS Courses and can be downloaded for free. Download SIFT here.

  • Trial Versions
  • Some of the tools our Instructors rely upon are commercial applications (opposed to open source). Where possible, we'll endeavour to supply a complete version of the program. If this isn't possible, students receive trial versions.

  • Disc Images
  • Forensic analysis often requires gathering data from a disc image. If a class exercise is based around such a scenario we'll make sure students have a copy of the image to take away. This means students will be able to recreate the lab experiment.

    If students are dealing with a disc image based on a commercial operating system, we'll make sure attendees have the correct licences to take away.

  • Posters
  • For some units and courses, we've created wall charts that summarise the session's key messages, techniques and tools. Students can pin them to their office wall and refer back to them when they're working on a project.

  • Cheat Sheets
  • Often, a SANS Instructor will deliver information and practical advice about a tool or technology. To help put what's learned into action as soon as a student is back in the office, SANS often compile a list of command line actions and keyboard shortcuts.


Training Events
Event Dates Register
SANS ICS Europe 2019 Jun 24 - Jun 29, 2019  
SANS Paris July 2019 Jul 01 - Jul 06, 2019  
SANS Munich July 2019 Jul 01 - Jul 06, 2019  
SANS London July 2019 Jul 08 - Jul 13, 2019  
SANS Pen Test Hackfest Europe 2019 Jul 22 - Jul 28, 2019  
SANS Riyadh July 2019 Jul 28 - Aug 01, 2019  
SANS London August 2019 Aug 05 - Aug 10, 2019  
SANS Prague August 2019 Aug 12 - Aug 17, 2019  
SANS Amsterdam August 2019 Aug 19 - Aug 24, 2019  
SANS Copenhagen August 2019 Aug 26 - Aug 31, 2019  
SANS Brussels September 2019 Sep 02 - Sep 07, 2019  
SANS Munich September 2019 Sep 02 - Sep 07, 2019  
SANS Oslo September 2019 Sep 09 - Sep 14, 2019  
SANS Dubai September 2019 Sep 14 - Sep 19, 2019  
SANS Rome September 2019 Sep 16 - Sep 21, 2019  
SANS Paris September 2019 Sep 16 - Sep 21, 2019  
SANS Bahrain September 2019 Sep 21 - Sep 26, 2019  
SANS London September 2019 Sep 23 - Sep 28, 2019  
SANS Kuwait September 2019 Sep 28 - Oct 03, 2019  
SANS DFIR Europe 2019 Sep 30 - Oct 06, 2019  
SANS Cardiff September 2019 Sep 30 - Oct 05, 2019  
SANS Riyadh October 2019 Oct 05 - Oct 10, 2019  
SANS Lisbon October 2019 Oct 07 - Oct 12, 2019  
SANS Doha October 2019 Oct 12 - Oct 17, 2019  
SANS London October 2019 Oct 14 - Oct 19, 2019  
SANS SEC504 Madrid October 2019 (in Spanish) Oct 14 - Oct 19, 2019  
SANS Cairo October 2019 Oct 19 - Oct 24, 2019  
SANS Amsterdam October 2019 Oct 28 - Nov 02, 2019  
SANS Paris November 2019 Nov 04 - Nov 09, 2019  
SANS London November 2019 Nov 11 - Nov 16, 2019  
SANS Gulf Region 2019 Nov 16 - Nov 28, 2019  
SANS SEC401 Madrid November 2019 (in Spanish) Nov 18 - Nov 23, 2019  
SANS Munich November 2019 Nov 18 - Nov 23, 2019  
SANS European Security Awareness Summit Nov 18 - Nov 21, 2019  
SANS Khobar December 2019 Dec 01 - Dec 05, 2019  
SANS Security Operations London 2019 Dec 02 - Dec 07, 2019  
SANS Paris December 2019 Dec 02 - Dec 07, 2019  
SANS Frankfurt December 2019 Dec 09 - Dec 14, 2019  
Online Training: SANS OnDemand
Event Dates Register
OnDemand - Various Courses Anytime  
Private Training
Event Dates Register
Private Training Course of Your Choice Your Choice