SANS Cyber Defense 🧢

Home of the Cyber Defense curriculum of @SANSInstitute, a hub for #CyberDefense, #BlueTeam, and #OSINT info, training, media, community, and events.

[SANS Cyber Defense 🧢 @SANSDefense]

AI is already changing how attackers operate AND how defenders respond.

This event includes sessions on AI-driven SOC workflows, vulnerability management, agent-based threats, and more!

🔗 https://t.co/AXhZKfMWQf

[SANS Cyber Defense 🧢 @SANSDefense]

Your AI tools have trust issues. 🧵

Seth Misenar breaks down how MCP servers hijack your AI — tool poisoning, rug pulls, and cross-server attacks.

https://t.co/GfEi6qzeqO

#AISecurity #MCP #CyberSecurity

[SANS Cyber Defense 🧢 @SANSDefense]

Vulnerability management feels endless as the volume keeps rising.

Learn how to step off the treadmill of pain by using AI to help triage findings, reason through attack paths, and focus on fixes that really matter.

👉 https://t.co/HApuo69NYB

[SANS Cyber Defense 🧢 @SANSDefense]

🚨 LIVE in 1 hour!

Learn how to turn an infosec idea into a book, from topic and proposal to publishing and readers.

🔗 https://t.co/kYkzhY0WtD

#Infosec #Writing #CyberSecurity

[SANS Cyber Defense 🧢 @SANSDefense]

Know the Data. Know the Threat. Craft the Detection. 🎯

Our free #DetectionEngineering poster covers everything from the detection lifecycle and #SIEM architecture to KQL, Sigma rules, log collection, and more.

Grab your copy 👇
https://t.co/1gUNfaxJXG
#Cybersecurity #BlueTeam

[SANS Cyber Defense 🧢 @SANSDefense]

Take your OSINT skills to the next level! The new SANS OSINT Poster is packed with tools, syntax tips, and real-world examples. Perfect for any cybersecurity pro. 💡
https://t.co/q4E7bvlm7I #CyberIntel #OSINT

[SANS Cyber Defense 🧢 @SANSDefense]

Tomorrow: turn your infosec idea into a book.

Ted Demopoulos covers topic selection, book proposals, publishing options, and how to get people to read it.

📅 Jun 3 | 11:00 AM ET
🔗 https://t.co/kYkzhY0WtD

#Infosec #Writing #CyberSecurity

[SANS Cyber Defense 🧢 @SANSDefense]

New video: SANS instructor Chris Pizor — retired USAF intel analyst — breaks down how disinformation and influence operations actually work.

Real cases. Nation-state doctrine. A practical framework for spotting it.

▶️ https://t.co/FBKNMvfX2a

[SANS Cyber Defense 🧢 @SANSDefense]

AI is changing cloud security at machine speed.

Join AWS, Google, Microsoft, Anthropic, SANS & more at the SANS Cloud Security Exchange Summit this August in San Francisco.

Topics include agentic AI, Zero Trust, autonomous response & AI governance.

⬇️ https://t.co/huySq0i1m0

[SANS Cyber Defense 🧢 @SANSDefense]

You do not have to found a company to play a role in one.

Infosec startups need builders, operators, advisors, investors, and leaders.

Jun 10, learn how the startup model works.

🔗 https://t.co/feiBwiCuWP

[SANS Cyber Defense 🧢 @SANSDefense]

🚨 Stay ahead of cyber threats with SEC401 Security Essentials! Gain hands-on experience in securing networks, endpoints, and the cloud. Try our FREE course preview and see the difference! 🔐 #Cybersecurity #SecurityTraining https://t.co/4kmKl13Y53

[SANS Cyber Defense 🧢 @SANSDefense]

"AI is really just the world's most advanced autocomplete."
SANS Faculty Fellow Mark Baggett breaks down exactly why — then builds an agent live in Python.
▶️ https://t.co/O2w5lTDMef

[SANS Cyber Defense 🧢 @SANSDefense]

Two weeks to go until the SANS OSINT Summit Amsterdam, 15–16 June.
Hands-on workshops, practitioner talks, up to 8 CPE credits.

15–16 June | Amsterdam, Capital C
Register now: https://t.co/opYnTwppK5

[SANS Cyber Defense 🧢 @SANSDefense]

#SEC501 Advanced Security Essentials - Enterprise Defender teaches how to build a comprehensive security program, detect advanced attacks, perform pen tests, analyze malware, & respond to incidents.
Try course preview: https://t.co/nvvwlBbV6l

[SANS Cyber Defense 🧢 @SANSDefense]

AI is the future—secure it now. 🔐 Learn how to build & secure Retrieval-Augmented Generation (RAG) solutions with LLMs on-prem—no need to expose sensitive data to third parties. Try the FREE course preview today!
👉 https://t.co/0QBMaqfYW6

[SANS Cyber Defense 🧢 @SANSDefense]

"The LLM cannot take any action on its own. It isn't the agent."

SANS Fellow Dave Hoelzer on what most people building AI workflows still don't fully understand.

▶️ https://t.co/F007ClOQ9X

[SANS Cyber Defense 🧢 @SANSDefense]

Your detections were built for humans and service accounts.
AI agents are neither. They adapt, clone, fork, and scale in seconds — using the same tokens your users do.
Ismael Valenzuela breaks down the replicant problem:
https://t.co/ebxra49IbB

[SANS Cyber Defense 🧢 @SANSDefense]

🐍 Ready to take your Python security automation skills to the next level? SEC673 dives deep into advanced techniques to make your code faster, more efficient, and easier to maintain. Check out the course: https://t.co/b8G8Oc5goH #CyberSecurity #Python #Automation

[SANS Cyber Defense 🧢 @SANSDefense]

New video: SANS Fellow Eric Conrad — 30 slides, 30 minutes on detecting encrypted C2 traffic.

Cobalt Strike, Sliver, Metasploit all leave fingerprints. He shows you exactly where to look.

▶️ https://t.co/2MWQeOd6WW

[SANS Cyber Defense 🧢 @SANSDefense]

Most insider threat programs don't look outside the corporate network. Ritu Gill, OSINT Specialist at Okta, on how public sources catch what internal telemetry misses.

SANS OSINT Summit Amsterdam | 15–16 June.
Register now: https://t.co/opYnTwppK5

[SANS Cyber Defense 🧢 @SANSDefense]

🚀 Ready to harness AI & Data Science for advanced threat hunting? SEC595 equips cybersecurity pros with hands-on skills using ML and AI. Try the free course preview and learn more: https://t.co/bFHv38aRGo #CyberSecurity #DataScience #MachineLearning