cyber-defense.sans.orgBlue Team Training & Resources | SANS Institute

Blue Team Training & Resources | SANS Institute homepage Open menu Go one level top Train and Certify Get Started in Cyber Courses & Certifications Training Roadmap Search For Training Online Training OnDemand Live Training Summits Cyber Ranges College Degrees & Certificates NICE Framework DoDD 8140 Specials Manage Your Team Overview Security Awareness Training Voucher Program Private Training Workforce Development Skill Assessments Hiring Opportunities Resources Overview Reading Room Webcasts Newsletters Blog Tip of The Day Posters Top 25 Programming Errors The Critical Security Controls Security Policy Project Critical Vulnerability Recaps Affiliate Directory Focus Areas Blue Team Operations Cloud Security Digital Forensics & Incident Response Industrial Control Systems Leadership Offensive Operations Get Involved Overview SANS Community CyberTalent Work Study Instructor Development Sponsorship Opportunities COINS About About SANS Why SANS? Instructors Cybersecurity Innovation Awards Contact Frequently Asked Questions Customer Reviews Press Room PGP Key Log In Join Contact Us SANS Sites GIAC Security Certifications Internet Storm Center SANS Technology Institute Security Awareness Training Search SANS Blue Team Operations The most trusted source of cyber defense and blue team training, certification, and research. Courses & Certifications Resources & Tools News & Updates Courses Certifications Instructors Free Resources About Latest Blue Team News & Updates Follow Us: SANSDefense sansdefense1 sansdefense Podcast Introducing the SANS Blueprint Podcast The new Blueprint podcast arms blue teamers with the most valuable and actionable content to help take your cyber defense skills to the next level. Learn More Poster November 17, 2020 Guide to Security Operations This guide is a collection of some of the most useful information and models for those working in cybersecurity operations centers, as well as pointers to some incredibly powerful free tools, book references, and more to help build your team, skills, and defensive capabilities. Download Now Webcast September 9, 2020 PowerShell 2020: State of the Art / Hack / Infection Blog July 30, 2020 Becoming an All-Around Defender: Social Engineering Your Way to Success Podcast June 16, 2020 Shock to the System: Re-Evaluating Your Security Operations Webcast June 24, 2020 Threat Hunting via DNS Blog June 8, 2020 "Must Have" Free Resources for Open-Source Intelligence (OSINT) Featured Blue Team Courses & Certifications Previous Next new Blue Team Operations SEC503: Intrusion Detection In-Depth SEC503: Intrusion Detection In-Depth delivers the technical knowledge, insight, and hands-on training you need to defend your network with confidence. You will learn about the underlying theory of TCP/IP and the most used application protocols, such as HTTP, so that you can intelligently examine... Certification: GCIA Course Details beta Blue Team Operations SEC586: Blue Team Operations: Defensive PowerShell Are you a Blue Teamer who has been asked to do more with less? Do you wish that you could detect and respond at the same pace as your adversaries who are breaking into and moving within the network? Blue Team Operations: Defensive PowerShell teaches deep automation and defensive capabilities using... Course Details Blue Team Operations SEC450: Blue Team Fundamentals: Security Operations and Analysis SEC450 provides students with technical knowledge and key concepts essential for security operation center (SOC) analysts and new cyber defense team members. By providing a detailed explanation of the mission and mindset of a modern cyber defense operation, this course will jumpstart and empower... Course Details Blue Team Operations SEC487: Open-Source Intelligence (OSINT) Gathering and Analysis A foundational course in open-source intelligence (OSINT) gathering that teaches students how to find, collect, and analyze data from the Internet. This course provides the OSINT groundwork knowledge for students to be successful in their fields and enforces that knowledge with over 20 hands-on... Certification: GOSI Course Details Blue Team Operations SEC511: Continuous Monitoring and Security Operations This course assesses the current state of security architecture and continuous monitoring, and provides a new approach to security architecture that can be easily understood and defended. When students finish, they have a list of action items in hand for making their organization one of the most... Certification: GMON Course Details Blue Team Operations SEC530: Defensible Security Architecture and Engineering This course is designed to help students build and maintain a truly defensible security architecture. There will be a heavy focus on leveraging current infrastructure (and investment), including switches, routers, and firewalls. Students will learn how to reconfigure these devices to better address... Certification: GDSA Course Details See All Blue Team Courses & Certifications Blue Team Certifications Cyber defenders play an essential role in securing the enterprise. Defending against attacks is only possible with the right skill set - and confidence in your abilities as an all-around defender and those of your team. GIAC's Cyber Defense certifications span the entire defense spectrum and are focused in two areas: cyber defense essentials and blue team operations. Whether your needs are beginner-level, advanced, or for a specialized area of defense, GIAC has the credentials you need to keep your organization safe from the latest threats. Learn More Join us for OSINT Summit 2021! The Open-Source Intelligence (OSINT) Summit will bring together leading security practitioners and investigators over 2 days to share proven techniques and tools that can be applied to OSINT gathering and analysis. As an attendee, you will learn current, real-world methods from law enforcement officers, private investigators, pen testers, and cyber defenders who collect information across the Internet, analyze the results, and utilize key data to reach their objectives. Learn More Learn Blue Team Skills With These Experts “Build something stronger that’s harder to break into but defend it with the knowledge that they’re going to break in.” - Seth Misenar, Curriculum Lead Micah Hoffman Principal Instructor Micah Hoffman has over 20 years of experience in the information technology field supporting federal government, commercial, and internal customers in their efforts to discover and quantify information security weaknesses. Learn More Seth Misenar Fellow Seth Misenar is a Cyber Security Expert, a SANS Faculty Fellow and Principal Consultant at Context Security, LLC. He is also a GIAC GSE (#28). Learn More Eric Conrad Fellow Eric Conrad, a SANS Faculty Fellow and course author, has 28 years of information security experience. Eric is the CTO of Backshore Communications and his specialties include Intrusion Detection, Threat Hunting, and Penetration Testing. Learn More John Hubbard Certified Instructor John Hubbard is a Security Operations Center (SOC) consultant and speaker, a Certified SANS instructor, and course author of SEC450: Blue Team Fundamentals, MGT551: Building and Leading Security Operations Centers, and SEC455: SIEM Design & Implementation. Learn More View All Instructors Become an Instructor Blue Team Ops Courses SANS Blue Team Operations Curriculum has a myriad of both long and short courses for cyber defenders at all levels. Whether you're just starting on your journey or have been a blue teamer for decades. Our courses and best in class instructors will help you progress in your cyber defense career. Download PDF Challenge Coins The ultimate recognition to elite cybersecurity professionals. Hundreds of SANS Institute students have stepped up to the challenge and conquered. They've mastered the concepts and skills, beat out their classmates, and proven their prowess. These are ...