TN-999: Reverse Engineering Malware Course

Course Overview:

This course is designed for professionals that are expected to do malware analysis. A skills focus enables the student to better absorb the subject matter and perform successfully on the job. This is not death by power point. The course is aligned with information assurance operators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics Reverse Engineering Malware.

Attendees to TN-999: Reverse Engineering Malware will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

Toolkit and Lab Assembly
Malware Code and Behavioral Analysis Fundamentals
Malicious Static and Dynamic Code Analysis
Collecting/Probing System and Network Activities
Analysis of Malicious Document Files
Analyzing Protected Executables
Analyzing Web-Based Malware
DLL Construction and API Hooking
Common Windows Malware Characteristics in x86 Assembly
Unpacking Protected Malware
In-Depth Analysis of Malicious Browser Scripts, Flash Programs and Office
In-Depth Analysis of Malicious Executables
Windows x86 Assembly Code Concepts for Revers-Engineering Memory Forensics for Rootkit Analysis

Prerequisites:

Strong understanding of core systems and network concepts
Exposure to programming and assembly concepts
Comfortable with command line access

Comments

Latest comments from students

User: marcus.osullivan

Instructor comments: Good stuff. I like the beginning half where there was help from an additional instructor to facilitate fixing computer errors that inevitably popped up.

Facilities comments: The baby deer were neat! I like the resort.

Liked the class? Then let everyone know!

PA-222: Palo Alto Networks Panorama Essentials

Course Overview:

PA-222: Palo Alto Networks Panorama Essentials Training Class is a two-day course that teaches students to configure and manage the Palo Alto Networks Panorama management server. Through hands-on training, students learn high end skills of how to integrate Palo Alto Networks next-generation firewalls into their network infrastructure and manage them with Palo Alto Networks Panorama management server.This is not a virtualized theoretical course. This is hands-on, real world in the classroom instructor led with lab assistance, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls and their enterprise management.

Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk. Real hardware per student for real experience and real skill development. TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents.

The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies. Additionally, the instructor has taught several security appliance products and carries several SANS, Cisco, Unix, and Windows certifications.

Attendees to the Palo Alto Networks Panorama Essentials Training Course will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration 2 days

Course Objectives:

Students attending this foundational-level training course will gain an in-depth knowledge of how to configure and manage their Palo Alto Networks Panorama management server, including hands-on experience in configuring the security, networking, threat prevention, logging, and reporting features of the Palo Alto Networks Operating System (PAN-OS) through Panorama.

Day 1
- Module 0 – Introduction & Overview
- Module 1 – Deployment Overview
  - Panorama Solution
  - Functional Overview
  - Architecture Design
- Module 2 – Interface Configuration
  - Installation
  - Design and Planning
  - Administration Roles
  - Access Control
  - Commit Options
- Module 3 – Device Groups
  - Device Groups
  - Policies
  - Objects
  - Device Group Commits
- Module 4 – Templates
  - Template Overview
  - Configure Templates
  - Commits
  - Overrides Commits

Day 2
- Module 5 – Administrative Tools
  - Logging
  - Reporting
  - Managing Devices
- Module 6 – Log Collection
  - Log Collector
  - Collector Groups
  - Distributed Data Collection
  - Installation and Configuration
- Module 7 – Deployment Recommendation
  - High Availability
  - Export Configuration
  - Tips and Tricks
  - Best Practices

Prerequisites:

Security+, Network+, Palo Alto Networks Firewall Essentials FastTrack and networking experience is recommended.

This course is in no way associated with Palo Alto Networks, Inc.

Comments

Latest comments from students

Like the class? Then let everyone know!

P-325: Python Programming

Course Overview:

This is an introductory course into the Python scripting language. This class uses a hands-on approach in teaching the Python language. This course builds the prerequisite skills for TechNow's P-345: Python for Pentration Testers course. Getting comfortable with Python is important to understanding how Python can be utilitized for offensive measures.

This course is hands-on with the instructor walking the students through many short examples to exemplify an objective. Dexterity with the language comes through many small code examples to produce the desired result. Students have fun acquiring points for all the code examples they get correct. We must be having fun because TechNow is always amazed at how competitive students are in trying to acquire the most points!

The instructor will focus on the level that each student is currently at, and ensure the student absorbs the subject matter. Programming is not a daily tasking of administrators or offensive operators and TechNow understands that. As an instructor led course TechNow is very successful in making Python accessible to those who do not live eat and breath programming. If a student's ultimate goal is to attend a course like TechNow's P-345: Python for Pentration Testers course, then not being bogged down in the Python language is critical, and this course (P-325: Python Programming) meets that objective.

Recently we have introduced Raspberry Pi's and multiple sensors to the P-325: Python Programming course. This enables the student to actually see productive results from their coding skills in the physical world! Some examples that students create programs for are: Motion detectors, distance, temperature, cameras and keypads.

Attendees to P-325: Python Programming will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 5 Days

Course Objectives:

How Python Runs Programs
Introducing Python Object Types
- Numeric Types
- Dynamic Typing
Variables
Regular Expressions
Strings
Conditionals
- if Tests and Syntax Rules
Lists and Dictionaries
Tuples and Files
Introducing Python Statements
Assignments, Expressions, and Prints
while and for Loops
Iterations and Comprehensions
Documentation
Function Basics
Built-In Functions
Scopes
Arguments
Modules
Module Packages and Importing
Classes and OOP
Operator Overloading
Recursion
Exception Coding Details
Exception Objects
Unicode and Byte Strings
Working with Raspberry Pi
- Writing code for sensors

Prerequisites:

Experience with some form of programming is preferred

Comments

Latest comments from students

User: slewis8435

Instructor comments: Very good instructor - he was excited about the material, very knowledgeable, and explained things clearly.

Facilities comments: The facilities were fine - plenty of room for each student to set up an extra computer and have room for note taking

User: nathan.karras

Instructor comments: Instructor was extremely knowledgeable in programming and scripting. He encouraged students to explore and ask questions. He would work with individuals to troubleshoot lab problems sets. Would highly recommend as an instructor.

Facilities comments: Room got a little warn. Instructor purchased fans to cool things off for the class. Projector had over scan.

Liked the class? Then let everyone know!

CompTIA

Increase your credibility, job security, and career opportunities by reaching your goal and getting certified! TechNow offers many CompTIA bootcamp style courses in which we administer an exam on the last day of class. We have a proven testing program that will get you the results you want!

TN-801: Windows for Security Professionals

Course Overview:

This course will be fast paced with in-depth and live demonstrations.

Date/Locations:

No Events

Duration: 1 day

Course Objectives:

UEFI, SecureBoot, TPM, and Enterprise BitLocker
Windows VPN in the Enterprise
Windows Advanced Firewall
Utilizing Windows WMI
Administering Windows with Powershell
Using Autopsy for Forensics

Prerequisites:

Comments

Latest comments from students