Choose a first or next SANS / GIAC path based on your current role, experience level, and the kind of work you actually want to do.
Independent guide. Verify course and certification details on the official provider pages before enrolling.
Interactive roadmap
Filter the graph, inspect a node, and follow the highlighted route.
CertificationPracticeCapability
Showing the full roadmap. Apply filters to highlight a recommended path.
Use the graph like a skill tree: filters narrow the route, node clicks inspect the step, and the navigation buttons pan the canvas.
1. FoundationalBaseline coverage and first-principles depth.
2. Core operationsCore analyst and handler capability.
3. Applied practiceRole-aligned specialisation and branch points.
4. AdvancedDeeper investigative and leadership depth.
5. SpecialistSpecialist tracks and senior capability.
6. ExpertHighest-depth or function-wide outcomes.
Foundations
SOC
DFIR
Threat hunting
Leadership
ICS/OT
Digital Forensics & Incident Response (DFIR)Detection and monitoringEndpoint, mobile, and cloud forensicsAdvanced response and malwareIndustrial and OTLeadership and readinessFoundations