We ask that you come prepared to work. To get the most out of your class, we ask you to invest about four hours before coming to SANS to take getting familiar with TCPdump or Windump or any other network analyzer if you are not familar with network traces. This will help as we present the more advanced material during class time. In addition to the prerequisites, we recommend that the student spend some time getting familiar with TCPdump, Windump or other network analyzer output before you come to class. That way, you will be ready for rapid mastery of intrusion detection analysis.
SNAP is the most comprehensive hands-on information security training program ever developed.
Use it to learn how to identify and repair the common vulnerabilities attackers use to successfully attack systems. Simulation Quiz Open to attendees who take all five courses in the series. This is the qualifying exam for students who have taken the full IDS track. A variety of network traces will be provided for the student. For each trace, the student is asked to complete the analysis section of the report, explaining the trace.