Sold by: SANS Institute
Deployed on AWS
Master network monitoring and threat detection at the packet level. Learn TCP/IP protocol analysis, zero-day threat detection, and network forensics using tcpdump, Wireshark, Snort, Suricata, and Zeek. Find malicious activity that automated tools miss.
Overview
Master network monitoring and threat detection at a depth unmatched in the industry. Find zero-day activity that tools miss through deep protocol understanding.
SEC503 takes a bottom-up approach that teaches you to understand what is happening on your network - not just interpret tool alerts.
Develop packet-level expertise:
Protocol Mastery
- Understand TCP/IP at the packet level
- Analyze application protocols deeply
- Research and understand new protocols
- Identify anomalies in network traffic
Threat Detection
- Find zero-day threats before disclosure
- Build effective detection rules
- Configure and tune detection tools
- Hunt for threats in network data
Tools and Techniques
- Master tcpdump, Wireshark, and tshark
- Configure Snort and Suricata
- Analyze traffic with Zeek
- Perform flow analysis with SiLK
37 hands-on labs with exercises for all experience levels. Red team members report this course also ups their game.
Earn GIAC GCIA certification (exam sold separately). 46 CPE credits across 6 intensive days.
Highlights
- Develop packet-level expertise: Analyze TCP/IP and application protocols deeply, detect zero-day threats before disclosure, identify anomalies in network traffic, and perform network forensics to reconstruct events.
- 37 hands-on labs: Wireshark and BPF filters, Snort and Suricata configuration, Zeek traffic analysis, Scapy packet crafting, evasion technique analysis, and a real-world bootcamp scenario.
- Prepares for GIAC GCIA certification. Built for SOC analysts, incident responders, and security engineers defending enterprise networks. 6 days, 46 CPEs.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
SEC503 - Single User | Single user license for Defense - SEC503: Network Monitoring & Threat Detection In-Depth | $8,780.00 |
Dimensions summary
This listing has one pricing dimension: a single-user license billed per unit under a contract model. You buy one license for one person to take the SEC503: Network Monitoring & Threat Detection In-Depth course. Pricing scales by quantity of units, so buying more licenses means more individual seats. There are no tiers or size options to choose between. Each unit covers one learner's access to the same course content.
Top-of-mind questions for buyers
One license gives one named individual access to the SEC503: Network Monitoring & Threat Detection In-Depth course. The material is for that person's individual use only. You cannot share course materials, test questions, or other courseware with others without written permission from the vendor.
The license covers the course itself, not the associated GIAC certification exam. You are not required to buy them together. You can add a certification exam attempt to your purchase during registration or later through your account dashboard within set time windows.
Cost scales by quantity of single-user units. Each additional license adds one more individual seat at the per-unit price. There are no tiers or bundled discounts built into this dimension. Buying more units simply multiplies the per-unit charge by the number of seats.
www.sans.org
Helpful?
Vendor refund policy
Refunds available within 30 days if course not accessed.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Threater is the only active defense solution that blocks every threat from every path in your network at any scale in real time. Your security stack is better with Threater.
Aspire Managed Detection & Response (MDR) services provide 24x7 threat monitoring, detection, and response capabilities across cloud, network, and endpoints. Delivered from Aspire’s Network & Security Operations Center (NSOC), Aspire MDR leverages an integrated security architecture to advance security operations capabilities by delivering 24x7x365 threat detection and response. An expert team of security analysts and incident responders combine integrated threat intelligence, automation, and defined response playbooks to identify and contain threats faster.
Protects against incoming attacks (scanning, SSH, cracking, brute force attempts, and others).
Collaborative assessment designed to improve detection, response, and tuning across your security operations inside AWS.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.