As synonyms for term SANS frequently mentioned are: cybersecurity training provider leader, most-wanted and highly regarded certifications in the IT security field, be it cyber defense, cloud security, digital forensics, industrial control systems or offensive operations.
\r\n\r\n
It can be heard that SANS training is expensive. Bear in mind that some of the trainings and related certifications SANS offers is aimed at corporations that can afford to send, virtually or physically, an employee or part of their workforce as future experts of the company on a specialized training. I will here focus on resources SANS publishes on a regular basis and makes freely available to anyone who shows interest.
\r\n\r\n
Do the free stuff first! Even if a company decides to send you on a training or you win a scholarship, it is wise to be prepared to ask instructors questions that are not already answered on the Internet and verified. Or, let’s reverse it, if you know that you will send employees on a SANS training, equip them in a timely manner with an adequate pre-knowledge so the training with instructors can be fully utilized.
\r\n\r\n
First things first, subscribe to SANS newsletters and create a free account on SANS Institute’s website. Just do it. You will periodically receive event reminders, news from the industry, information on relevant Slack or Discord channels of communication, and joining the SANS Community grants access to resources sorted by focus areas, webcasts, Tech Tuesday Workshops, Cyber42 Game Days, Security Awareness Planning Toolkit and you can test-drive more than 50 courses with one-hour free course previews.
\r\nTo get started with SANS courses, you can immediately take SANS Cyber Aces Online, a free online course that covers three foundation areas of information security: Operating Systems, Networking and System Administration.
\r\n\r\n
Next, let’s jump to SANS blog post Top 5 Steps to Immerse yourself into the cybersecurity field. Some of here mentioned Holiday Hack hands-on challenges are also sorted by topic in a Google Sheets H2 matrix. Well, this should get you occupied for a while.
\r\n\r\n
Maybe you noticed that most of SANS courses have three digits in their names, but how do they form a learning path that covers wanted skills for a real-world job role? Full list of courses and certifications can be found here, sorted by focus areas, training formats, with available syllabus. Use the Training roadmap to see how individual courses lay out in learning paths.
\r\n\r\n
To get a feel of how it is like to take a SANS course and eventually pass a certification exam, i will here mention:\r\n
- \r\n
- Stereotype Breakers founder Masha Zvereva who shares her ongoing SANS journey in vlogs available on Youtube, and recently had the opportunity to take Foundations in Cybersecurity and SEC401 courses; \r\n
- Andrew Roderos, an IT professional specializing in networking and security, who on his website shared how he Passed GCIH, including detailed preparation, troubleshooting on the exam day, and tips on how to achieve a high score when the time comes. Bravo Andrew! \r\n
- Women in CyberSecurity (WiCyS) blog post where Dominique Serna, a WiCyS member and a SANS GIAC scholarship recipient, talks about the scholarship, gives us insight in her progress and achievements so far. \r\n
\r\n\r\n
Other than courses, there will be SANS tools you’ll frequently hear about during the first year in the IT security field. There is a full list of SANS faculty tools, but do not let the sheer amount of information overwhelm you, start with DeepBlueCLI, a PowerShell module by Eric Conrad for threat hunting via Windows Event logs, and oledump, a python tool by Didier Stevens for analyzing malware in documents. These tools are well respected and used throughout the Community, to see them in action you could watch the video Free Analytical Tools you can use today…. For Free! from Black Hills Information Security and read the Malware Analysis: Phishing Docs from HTB Reel from infosec practioner 0xdf.
\r\n\r\n
In December 2021, SANS published a blog post Top 10 Most Popular Free Resources created by SANS Faculty and team, be it top 10 webcasts, blogs, open-source tools, Summit videos or whitepapers. Stay current.
\r\n\r\n
You need an adequate virtual machine for work and practice? Check out Slingshot, Ubuntu-based Linux distribution built for use in the SANS penetration testing class labs and beyond, available in Community and C2 Matrix Edition. Sift workstation, with over 200 pre-installed DFIR tools, will be interesting to future Incident Responders and Digital Forensic Analysts.
\r\nAlso on the hands-on subject, SANS CyberStart is a cybersecurity training with hacking challenges and puzzles. Right now, there are 12 challenges available to play for free. But, stay tuned and continue reading until the end, maybe you are eligible for more free training.
\r\n\r\nFor the global cybersecurity community, SANS during 2022 offers a variety of free Solutions Forums and Virtual Summits, where you can register for attending, listen to industry’s professionals, level up your knowledge, hands-on skills, industry connections, and eventually submit your first presentation.
\r\n\r\n
SANS Cyber Ranges like NetWars Tournaments and Continuous are, in most cases, self-contained paid cyber challenges, but there are occasions when they are available as a course complimentary or even, as last year, free around some of the Virtual Summits if you register quick enough. Thus, i will repeat the importance of joining the SANS Community in-advance and registering for newsletters.
\r\nThere is an annual competition of the top-scoring NetWars Core players from the past two years called Core NetWars Tournament of Champions. Recording of the NetWars Tournament of Champions 2021 is available on SANS Youtube, and other than the competition for the best of the best and a live giveaway, it was filled with cybersecurity related trivia. I made the trivia available externally as flipcards, but you can view them in other forms: quiz, matching, bingo, or print them.
Depending on whether you take part of an interest group, are a veteran, high school or college student in the US, or other, you could be eligible for a scholarship, discounted tuition via work study program of even free training, so make sure you stay up-to-date with available options, their schedules, and engaged in the Community.
\r\n\r\n
Hopefully, you found some useful information for yourself or someone you know. Let me know.
\r\nDo your own #100daysofcyber. You do not have to have everything sorted out from the get-go, just start. Create a new folder, and start filling it.
\r\n\r\n
Godspeed.
\r\n\r\n
Opinions expressed here are solely my own, this post is not sponsored by SANS Institute.
\r\n”}
