Sold by: SANS Institute
Deployed on AWS
Master network monitoring and threat detection at the packet level. Learn TCP/IP protocol analysis, zero-day threat detection, and network forensics using tcpdump, Wireshark, Snort, Suricata, and Zeek. Find malicious activity that automated tools miss.
Overview
Master network monitoring and threat detection at a depth unmatched in the industry. Find zero-day activity that tools miss through deep protocol understanding.
SEC503 takes a bottom-up approach that teaches you to understand what is happening on your network - not just interpret tool alerts.
Develop packet-level expertise:
Protocol Mastery
- Understand TCP/IP at the packet level
- Analyze application protocols deeply
- Research and understand new protocols
- Identify anomalies in network traffic
Threat Detection
- Find zero-day threats before disclosure
- Build effective detection rules
- Configure and tune detection tools
- Hunt for threats in network data
Tools and Techniques
- Master tcpdump, Wireshark, and tshark
- Configure Snort and Suricata
- Analyze traffic with Zeek
- Perform flow analysis with SiLK
37 hands-on labs with exercises for all experience levels. Red team members report this course also ups their game.
Earn GIAC GCIA certification (exam sold separately). 46 CPE credits across 6 intensive days.
Highlights
- Develop packet-level expertise: Analyze TCP/IP and application protocols deeply, detect zero-day threats before disclosure, identify anomalies in network traffic, and perform network forensics to reconstruct events.
- 37 hands-on labs: Wireshark and BPF filters, Snort and Suricata configuration, Zeek traffic analysis, Scapy packet crafting, evasion technique analysis, and a real-world bootcamp scenario.
- Prepares for GIAC GCIA certification. Built for SOC analysts, incident responders, and security engineers defending enterprise networks. 6 days, 46 CPEs.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
SEC503 - Single User | Single user license for Defense - SEC503: Network Monitoring & Threat Detection In-Depth | $8,780.00 |
Vendor refund policy
Refunds available within 30 days if course not accessed.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Centralize and simplify your firewall administration and intrusion prevention. Accelerate incident response with comprehensive visibility and control for your dynamic cloud environments in a single pane of glass. Gain additional context with instant access to Cisco SecureX through our built-in ribbon.
Protection against ransomware, advanced threats, and more across endpoints, cloud workloads, servers, mobile devices, networks, and email. Extend on premise security and build secure and scalable cloud transformations with a complete cybersecurity platform for all Sophos next-gen technologies.
OneData Software secures IoT ecosystems with AWS IoT Device Defender, delivering continuous audits, behavioral monitoring, and intelligent threat mitigation for large-scale deployments. Their solution blends rule-based and ML-driven anomaly detection, automated incident response, and secure device governance—ensuring a resilient, compliant, and scalable security posture from edge to cloud.
Presidio Managed Detection & Response takes risk management to the next level with alert consolidation, prioritization, and now, with Active Response automating playbooks for immediate response to threats. This translates hours of analysis into seconds to resolve imminent threats. Organizations face an ever-evolving set of cybersecurity challenges leading to financial and intellectual property risks and business disruption. These might come in the form of ransomware, data exfiltration, or a range of other exploits that challenge their reputation or ability to operate. For enterprises that are struggling with retaining highly skilled cybersecurity talent, or staying on top of the latest threat vectors, working with Presidio MDR as a managed service can deliver 24x7x365 peace of mind.
Enhance your Kubernetes security and resilience with a consulting solution designed for financial services industry. This offering delivers high availability, secure-by-default configurations, and compliance-ready infrastructure to protect EKS workloads in AWS.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.