TN-909: Windows Forensic Analysis

Course Overview:

Windows Forensic Analysis is a hands-on course that covers digital forensics of the Microsoft Windows operating system. The collection and analysis of data tracking user based activity that can be used for internal purposes or legal litigation. TechNow has the student analyze many data images for various Windows operating systems, as current as Windows 8.1, Windows 10 in an environment that uses many Cloud technologies such as Office365, Skydrive, Sharepoint, Exchange Online, and Windows Phone.

This is not death by power point. The course is aligned with digital forensic investigators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics of Windows Forensic Analysis.

Attendees to TN-909: Windows Forensic Analysis will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

Windows Operating System Components
Core Forensic Principles
Live Response and Triage-Based Acquisition Techniques
Windows Image Mounting and Examination
Memory, Pagefile, Filesystems
Data and Metadata
Profiling systems and users
Tracking USB and BYOD
Log and Registry Analysis
User Communications
Email Forensics
Browser Forensics
Reporting and Presentation

Course Prerequisites:

Windows and Security Experience

Comments

Latest comments from students

Liked the class? Then let everyone know!

TN-765: Automating Administration with Windows Powershell

Course Overview:

This course provides students with the fundamental knowledge and skills to use PowerShell for administering and automating administration of Windows servers. This course provides students the skills to identify and build the command they require to perform a specific task. In addition, students learn how to build scripts to accomplish advanced tasks such as automating repetitive tasks and generating reports. This course provides prerequisite skills supporting a broad range of Microsoft products, including Windows Server, Windows Client, Microsoft Azure, and Microsoft 365. In keeping with that goal, this course will not focus on any one of those products, although Windows Server, which is the common platform for all of those products, will serve as the example for the techniques this course teaches.

Attendees to TN-765: Automating Administration with Windows Powershell will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Course Duration: 5 days

Course Objectives:

Describe the functionality of Windows PowerShell and use it to run and find basic commands
Identify and run cmdlets for server administration
Work with Windows PowerShell pipeline
Describe the techniques Windows PowerShell pipeline uses
Use PSProviders and PSDrives to work with other forms of storage
Query system information by using WMI and CIM
Work with variables, arrays, and hash tables
Write basic scripts in Windows PowerShell
Write advanced scripts in Windows PowerShell
Administer remote computers
Use background jobs and scheduled jobs
Use advanced Windows PowerShell techniques

Course Prerequisites:

Experience with Windows networking technologies and implementation.
Experience with Windows Server administration, maintenance, and troubleshooting.

Comments

Latest comments from students

Liked the class? Then let everyone know!

TN-345: Python for Penetration Testers

Course Overview:

This Python for Penetration Testing course is designed to give you the skills you need for maintaining or developing Python Penetration Testing tools oriented towards offensive operations. We have a suite of courses and certifications that help understand a problem, this course prepares the student to rapidly develop prototype code to attack or defend against it.

The course concludes with a Capture the Flag event that will test both your ability to apply your new tools and coding skills in a Python Penetration Testing challenge.

This course is not intended to be an Advanced Python course, but to exemplify penetration techniques utilizing Python. The course covers Threading, Sockets, OOP, and third party modules that facilitate the offensive operator’s objective.

This course utilizes the “Violent Python” text book.

Attendees to TN-345: Python for Penetration Testers Class will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 3 Days

Course Objectives:

Python Lanuage Refress
Network Sockets
Exception Handling
Hashes and Cracking Passwords
Threading
- Concepts and Python Implementation
- Queues and Synchronization
- urlparse and httplib to probe URLs
- Crack a password protected zip file
Port Scanner
- Threading a Port Scanner
nmap integration
Deploying shellcode
Mechanize, BeautifulSoup
- HTTP Form Password Guessing
- HTTP Proxies (Burp Suite)
- HTTP Cookies Session Hijacking
  - CookieMonster
Images and Metadata
Justniffer
SQL Injection
- sqlmap
- SQLBrute
Antivirus and IDS evasion
- PyInstaller
- Metasploit
Scapy
- Deploy shellcode
- DNS Cache Poisoning
- Packety Violence

Prerequisites:

Python Programming Skills or P-325: Python Programming

Comments

Latest comments from students

Liked the class? Then let everyone know!

Virtualization/Cloud

TechNow has been involved in enterprise client server architectures since 1990. TechNow has delivered national and international implementations for Valero, Wholefoods, Quest, USAA, Golfsmith, AMD, Motorola, and many other fortune 1000 corporations,

TechNow's training program has followed the evolution of enterprise computing into virtualization and cloud computing. With a focus on security, TechNow can present the ramifications of many centralized strategies. All courses utilize enterprise instructors with experience and can discuss the detail of implementation and the integration into an existing infrastructure.