Conference Description
Key Takeaways
- Six-day hybrid training event offering 15 hands-on courses aligned with GIAC certification exams
- Covers red team operations, ransomware response, digital forensics, cloud security and applied forensics
- Designed for security analysts, incident responders, penetration testers, engineers and cybersecurity managers
- Courses taught by practicing instructors with lab-based, immersive learning formats
- Available in-person in Chicago or via live online attendance
About the Event
SANS Chicago 2027 runs from April 26 to May 1, 2027, offering both in-person attendance at the Embassy Suites by Hilton Chicago Downtown Magnificent Mile and a live online option. The event features 15 courses spanning foundational security essentials through to advanced technical disciplines. Each course includes immersive labs and live case studies, with content aligned to GIAC certification exams for those pursuing formal credentials.
Technical Focus Areas
The curriculum addresses offensive operations including red team techniques, EDR evasion and covert infrastructure development. Defensive tracks cover cyber defense fundamentals, ransomware response and incident handling. Digital forensics courses incorporate applied forensic methodologies, while cloud security training addresses modern infrastructure protection. Kernel-level research is also included for practitioners working at lower system levels.
Who Should Attend
The event caters to cybersecurity professionals across experience levels, from those building foundational skills to practitioners seeking advanced specialisation. Relevant roles include security analysts, incident responders, penetration testers, red team operators, security engineers and cybersecurity managers. Attendees typically represent government agencies, large enterprises, consulting firms and organisations developing their security capabilities.
Networking and Community
Beyond formal training, the event includes SANS@Night talks, social events and community networking sessions. These provide opportunities for attendees to connect with peers and instructors outside the classroom environment.

