SEC504: Hacker Tools, Techniques, and Incident Handling

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usConnect, learn, and share with other cybersecurity professionals
Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders
Become a member for instant access to our free resources.
Sign UpMission-focused cybersecurity training for government, defense, and education
Explore industry-specific programming and customized training solutions
Sponsor a SANS event or research paper
We're here to help.
Contact UsWith the breadth of technologies in use across many enterprise organizations today, security analysts need more visibility than ever. There’s a real need for security operations centers (SOCs) to ingest more data, driving teams toward more unified platforms and intelligent automation for detection and response.
Join SANS Analyst Dave Shackleford and Palo Alto on July 31st at 10:30 am ET for a deep dive into Palo Alto’s XSIAM platform, which has been designed from the ground up to meet these requirements. They will dig into how AI/ML can help to prioritize threats, streamline investigations, and accelerate response. XSIAM can ingest, distill, and correlate a vast array of data sources, and execute contextual detection and response playbooks to help SOC teams automate incident remediation. In addition, they’ll cover: • How SmartScore enables risk-based prioritization.
• Using Cortex Copilot to sharpen analyst focus.
• How continuous learning loops improve incident resolution outcomes over time.
This session will break down how automation and AI are being operationalized with security teams today. If you're working to modernize your SOC, reduce alert fatigue, and gain more value from your data and tooling, this session will deliver practical insights grounded in real-world use cases.
Dave Shackleford, founder of Voodoo Security, has advanced cybersecurity through his leadership roles, including serving as CTO for the Center for Internet Security, where he coordinated the first published virtualization security benchmarks.
Read more about Dave Shackleford