Upcoming SANS Mentor Session – Security 504: Hacker Techniques, Exploits & Incident Handling

This is something that I’ve really been looking forward to announcing for a while now.  I will be running a Mentor session for SANS starting on Sept 21 and running until November 23, 2010.  We will be meeting once per week for two hours to cover course material, discuss what we’ve studied and do some of the labs.  We will be meeting in South Jordan, so its fairly central to the Salt Lake and Provo area.

The course will cover how to handle security incidents, demonstrate what tools attackers use and how they exploit systems.  I took this course in 2009 and I can’t say enough how good it is.  It’s one thing to read about how an exploit works.  It brings a whole new level of awareness when you actually run an exploit and start pulling data from the target system.

What was most valuable to me was the background on how to prepare, respond and recover from a security incident.  There is quite a bit of preparation that you need to take so that you are ready to conduct incident response in a way which will stand up in civil or criminal proceedings.  There are lots of pitfalls that you want to avoid so that you protect your employer and don’t get in trouble yourself.

Here are two key things you can use to “sell” this course to management.

  1. You will learn how to handle an incident in a way that best protects your company, is thorough and preserves the company’s legal options.
  2. You will see what exploits can do to a system, how they are used and what they look like.  Every exploit covered includes how to defend against them.

If you are in the Salt Lake City area and would like to read more about this course or sign up, use the link below.

Security 504: Hacker Techniques, Exploits & Incident Handling
Jason Wood
Latest posts by Jason Wood (see all)