

By getting into the mindset of attackers, you will learn how they apply their trade against your organization, and you will be able to use that insight to anticipate their moves and build better defenses. In the hands-on environment provided by SEC504, you will use the tools of the attackers themselves in order to understand how they are applied and the artifacts the attackers leave behind. To fully grasp the actions attackers take against an organization, from initial compromise to internal network pivoting, you also need to understand their tools and techniques. Understanding the steps to effectively conduct incident response is only one part of the equation. All lab exercises come with detailed walkthrough video content to help reinforce the learning concepts in the course. You never lose access to the lab exercises, and they can be repeated as often as you like. You will work with complex network environments, real-world host platforms and applications, and complex data sets that mirror the kind of work you may be asked to do. You will be able to take the skills and hands-on experience gained in the course back to the office and apply them immediately.Ī big focus in SEC504 is applying what you learn with hands-on exercises: 50% of the course is hands-on where you will attack, defend, and assess the damage done by threat actors. Using indicators of compromise, you will practice the steps to effectively respond to breaches affecting Windows, Linux, and cloud platforms. In SEC504, you will learn how to apply a dynamic approach to incident response. Keeping your organization out of the breach headlines depends on how well incidents are handled to minimize loss to the company. The goal of modern cloud and on-premises systems is to prevent compromise, but the reality is that detection and response are critical. Immediately apply the skills and techniques learned in SANS courses, ranges, and summits
