SEC504: Hacker Tools, Techniques, and Incident Handling

Experience SANS training through course previews.
Learn MoreLet us help.
Contact usConnect, learn, and share with other cybersecurity professionals
Engage, challenge, and network with fellow CISOs in this exclusive community of security leaders
Become a member for instant access to our free resources.
Sign UpMission-focused cybersecurity training for government, defense, and education
Explore industry-specific programming and customized training solutions
Sponsor a SANS event or research paper
We're here to help.
Contact UsFrom the U.S. government's 72-hour capture mandate to the EU’s NIS2 Directive, organizations are facing mounting pressure to implement full packet capture to meet emerging compliance obligations. What began as simple log retention requirements has evolved into a complex global web of regulations demanding forensic-grade network visibility.
This webcast will explore why traditional monitoring is no longer sufficient—and how organizations can strategically implement FPC to meet regulatory needs, accelerate threat detection, and avoid costly compliance gaps.
Whether you work in the public sector, financial services, healthcare, or critical infrastructure, understanding the technical and compliance imperatives behind FPC will help you future-proof your monitoring strategy.
What You’ll Learn
The Compliance-Driven Shift Toward FPC
Why governments and industry regulators are mandating full packet capture
Overview of U.S. mandates (OMB M-21-31, Zero Trust, NIST CSF 2.0)
Global trends: NIS2, DORA, GDPR, Saudi NCA ECC, and more
Technical Capabilities That Matter
Real-time and historical traffic visibility
Chain of custody, encryption, and tamper-proof preservation
Integration with SIEM, SOAR, and other security platforms
Strategic Implementation Considerations
Balancing visibility with privacy (GDPR, employee data rights, etc.)
Dealing with encrypted traffic: break-and-inspect strategies
Data retention, deletion, and lifecycle optimization
Building the Business Case
How one FPC platform can satisfy multiple regulatory frameworks
ROI through cost avoidance, reduced investigation time, and compliance readiness
Vendor selection criteria and phased rollout roadmap
Why Register:
Learn from industry experts
Submit your questions to webcast speakers (When attending live)
Earn CPE credits
Flexible access (Join live or watch the replay on your own time)
Bonus:
Exclusive complimentary white paper, available for download after the webcast. Check back here.
Matt Bromiley is a Lead Solutions Engineer at LimaCharlie and SANS Certified Instructor. He serves as a GIAC Advisory Board member, a SME for the SANS Security Awareness, and a technical writer for the SANS Analyst Program.
Read more about Matt Bromiley