Sans For508 Index -

SANS expects you to know how attackers hide. Specifically: