SANS 2018: Automating Information Security with Python - March 5 - 10, 2018 - Virginia Tech Campus - Blacksburg, VA
SANS 2018: Automating Information Security with Python - March 5 - 10, 2018 - Virginia Tech Campus - Blacksburg, VA


The Automating Information Security with Python class is being offered as a live and virtual class at Virginia Tech. You must choose a format when registering and we cannot accept changes after February 26, 2018.

For those seeking to register for Simulcast course:

Info for Attendees

  1. On-site check in will be held at the below times. Parking passes for non-VT will be available at check-in.
    • Sunday, March 4 - 6:00pm-8:00pm (Goodwin 190)
    • Monday, March 5 - 7:30am-9:00am (Goodwin 190)

  2. If your home institution uses eduroam, you've already got wireless access at Virginia Tech. When you arrive, connect to the eduroam wireless network and use your school's wi-fi authentication credentials. Otherwise indicate in your registration form that you need guest wireless access so we can email you login account credentials prior to your arrival.
  3. Laptop Requirements

    Students are required to bring their own laptop so that they can connect directly to the workshop network we will create, and thus get the most value out of the course. It is the students' responsibility to make sure that the system is properly configured with all drivers necessary to connect to an Ethernet network.

    Some of the course exercises are based on Windows, while others focus on Linux. VMware Player or VMware Workstation is required for the class. If you plan to use a Macintosh, please make sure you bring VMware Fusion, along with a Windows guest virtual machine. All of the VMWare products are available at


    You are required to bring Windows 10 (Professional), Windows 8.1 (Professional), Windows 8 (Professional), Windows 7 (Professional, Enterprise, or Ultimate) or Windows Vista (Business, Enterprise, or Ultimate) either on a real system or a virtual machine. You will need administrative access to your Windows computer and the ability to install various software packages, including Python, on that computer.

    IMPORTANT NOTE: You may also be required to disable your anti-virus tools temporarily for some exercises, so make sure you have the anti-virus administrator permissions to do so. DO NOT plan on just killing your anti-virus service or processes, because most anti-virus tools still function even when their associated services and processes have been terminated. For many enterprise-managed clients, disabling your anti-virus tool may require a different password than the Administrator account password. Please bring that Administrator password for your anti-virus tool.

    The course includes a VMware image file of a guest Linux system that is larger than 15 GB. Therefore, you need a file system with the ability to read and write files that are larger than 15 GB, such as NTFS on a Windows machine.

    Enterprise VPN clients may interfere with the network configuration required to participate in the class. If your system has an enterprise VPN client installed, you may need to uninstall it for the exercises in class.


    You will use VMware to run Windows and Linux operating systems simultaneously when performing exercises in class. You must have either the free VMware Player or later or the commercial VMware Workstation 8 or later installed on your system prior to coming to class. You can download VMware Workstation Player for free:

    Alternatively, if you want a more flexible and configurable tool, you can download a free 30-day trial copy of VMware Workstation. VMware will send you a time- limited license number for VMware Workstation if you register for the trial on its website. No license number is required for VMware Player.

    We will give you a DVD full of tools to use during the class (which is yours to keep). You will need a DVD drive to read the tools on that DVD for the course. We will also provide a Linux image with all of our tools pre-installed that runs within VMware Player or VMware Workstation.


    You do not need to bring a Linux system if you plan to use our Linux image in VMware. However, you are required to bring VMware Workstation or VMware Player. The class does not support VirtualPC or other non-VMware virtualization products.

    Mandatory Laptop Hardware Requirements

    • x86- or x64-compatible 2.0 GHz CPU minimum or higher.
    • An available USB port.
    • 4 GB or higher recommended.
    • Ethernet adapter: A wired connection is required in class. If your laptop supports only wireless, please make sure to bring a USB Ethernet adapter with you.
    • 15 GB available hard drive space.

    During the workshop, you will be connecting to one of the most hostile networks on planet earth! Your laptop might be attacked. Do not have any sensitive data stored on the system. SANS is not responsible for your system if someone in the class attacks it in the workshop.

    By bringing the right equipment and preparing in advance, you can maximize what you will see and learn - and have a lot of fun doing it!

    If you have additional questions about the laptop specifications, please contact

Registration Fees

Registration includes all course material and refreshment breaks each day.

Education/State Government Participants:
(k-12, community college, state government, or higher education site, and law enforcement)

With GIAC Certification

Early Bird Rate (Through February 16): $3,120
After February 16: $3,520

Without GIAC Certification

Early Bird Rate (Through February 16): $2,390
After February 16: $2,790

Other Participant:
(Corporate, Federal Govt., etc.)

With GIAC Certification

Early Bird Rate (Through February 16): $7,145
After February 16: $7,545

Without GIAC Certification

Early Bird Rate (Through February 16): $6,415
After February 16: $6,815


Registration includes all course material and refreshment breaks each day.

The deadline to register is February 26, 2018.

credit card Icons
* We accept MasterCard, Visa, American Express and Discover. Please note: charges will appear on your statement as "VT CONTINUING AND PROF EDUCATION".

To register using our on-line system, your browser must accept cookies. For more about cookies, see

View our Privacy Policy.

The information you provide is subject to the Freedom of Information Act guidelines.

Refund and Cancellation Policy: Requests for refunds will be honored when received fourteen calendar days prior to the program. However, another person may be substituted at any time for this program. A $250 administrative fee will be deducted for cancellations. In the unlikely event that this program is cancelled or postponed due to insufficient enrollments or unforeseen circumstances, the university will fully refund registration fees but cannot be held responsible for any other expenses, including cancellation or change charges assessed by airlines, hotels, travel agencies, or other organizations.

For weather or disaster-related program cancellation or postponement information, please call (540) 231-9489.

If you need assistance, please call
Virginia Tech Continuing and Professional Education at (540) 231-5182.

If you are an individual with a disability and desire an accommodation, please contact Meghan Gaskill at 540-231-9617 or email or TDD 1-800-828-1120 during regular business hours at least 10 business days prior to the first day of the program.‚Äč Requests received less than 10 business days prior to the start date of the program may not be able to be accommodated.

Virginia Tech's Equal Opportunity/Affirmative Action Statement:

Share this site.


Virginia Tech - Invent the Future  Continuing & Professional Education @ Virginia Tech  
Virginia Tech's Equal Opportunity/Affirmative Action Statement: