SANS – SEC560: Enterprise Penetration Testing 2022-6

Updated August 10, 2026 64 MB

Download

About this item

Description

SEC560: Enterprise Penetration Testing. This course is a comprehensive, advanced training program that provides the skills needed to conduct enterprise-scale penetration testing. Focusing on on-premises, Azure, and Entra ID environments, this course teaches participants how to identify and exploit vulnerabilities at a macro level to assess real-world business risks. The audience for this course includes red and blue team members, auditors, and incident response professionals who want to gain a deep understanding of the offensive and defensive aspects of security in complex organizations. Through hands-on labs and real-world projects, participants will be introduced to the latest penetration testing tools and methodologies and learn how to conduct a complete assessment from planning to execution. The course concludes with a final simulated scenario in which learners apply all the knowledge and skills learned to conduct a full penetration test from start to finish in a real-world enterprise environment. The ultimate goal of this course is to equip professionals with the capabilities necessary to improve organizational security and reduce business risks through practical and tangible assessments.

What you will learn

Conducting penetration tests from start to finish: from initial detection to final reporting.
Hacker Strategies: You will learn about attacker strategies, access enhancements, and solutions to fix vulnerabilities.
Securing the Entire Attack Surface: You will learn how to secure the entire attack surface of complex organizations.
Operations and Risk Assessment: You operate systems and assess risks across networks, Active Directory, and Azure.
Lateral Movement and Kerberos Attacks: You will learn how to perform lateral movement and Kerberos attacks to uncover deeper risks.
Using C2 frameworks: You use C2 frameworks to remotely manage compromised systems.
Simulate real-world attacks: You simulate real-world attacks such as password cracking and phishing.

This course is suitable for people who:

Security personnel: Those whose job is to assess networks and systems to find and fix vulnerabilities.
Penetration testers
Ethical hackers
Defenders: Those who want to better understand offensive methods, tools, and techniques.
Auditors: Those who need to build deeper technical skills.
Red Team members
Blue Team members
Forensic professionals: Those who want to better understand offensive tactics.
Incident responders: Those who want to understand the mindset of an attacker.

SEC560: Enterprise Penetration Testing Course Details

Publisher: SANS
Instructor: Jon Gorenflo , Jeff McJunkin
Training level: Beginner to advanced
Training duration: 32 hours and 38 minutes
Number of lessons: 5

Course headings

SEC560: Enterprise Penetration Testing

SEC560: Enterprise Penetration Testing Course Prerequisites

The SEC560 course is the flagship penetration test course offered by the SANS Institute. Attendees are expected to have a working knowledge of networking basics and a basic knowledge of the Windows and Linux command lines before they come to class. While SEC560 has in-depth information, it is important to note that programming knowledge is NOT required for the course.
Courses that lead into SEC560:
SEC504: Hacker Tools, Techniques, Exploits, and Incident Handling
SEC542: Web App Penetration Testing and Ethical Hacking
Courses that are good follow-ups to SEC560:
SEC573: Automating Information Security with Python
SEC660: Advanced Penetration Testing, Exploit Writing, and Ethical Hacking
SEC565: Red Team Operations and Adversary Emulation
SEC542: Web App Penetration Testing and Ethical Hacking
SEC580: Metasploit for Enterprise Penetration Testing
SEC588: Cloud Penetration Testing
SEC575: Mobile Device Security and Ethical Hacking