TN-909: Windows Forensic Analysis

Course Overview:

Windows Forensic Analysis is a hands-on course that covers digital forensics of the Microsoft Windows operating system. The collection and analysis of data tracking user based activity that can be used for internal purposes or legal litigation. TechNow has the student analyze many data images for various Windows operating systems, as current as Windows 8.1, Windows 10 in an environment that uses many Cloud technologies such as Office365, Skydrive, Sharepoint, Exchange Online, and Windows Phone.

This is not death by power point. The course is aligned with digital forensic investigators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics of Windows Forensic Analysis.

Attendees to TN-909: Windows Forensic Analysis will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

Windows Operating System Components
Core Forensic Principles
Live Response and Triage-Based Acquisition Techniques
Windows Image Mounting and Examination
Memory, Pagefile, Filesystems
Data and Metadata
Profiling systems and users
Tracking USB and BYOD
Log and Registry Analysis
User Communications
Email Forensics
Browser Forensics
Reporting and Presentation

Course Prerequisites:

Windows and Security Experience

Comments

Latest comments from students

Liked the class? Then let everyone know!

TN-999: Reverse Engineering Malware Course

Course Overview:

This course is designed for professionals that are expected to do malware analysis. A skills focus enables the student to better absorb the subject matter and perform successfully on the job. This is not death by power point. The course is aligned with information assurance operators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics Reverse Engineering Malware.

Attendees to TN-999: Reverse Engineering Malware will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

Toolkit and Lab Assembly
Malware Code and Behavioral Analysis Fundamentals
Malicious Static and Dynamic Code Analysis
Collecting/Probing System and Network Activities
Analysis of Malicious Document Files
Analyzing Protected Executables
Analyzing Web-Based Malware
DLL Construction and API Hooking
Common Windows Malware Characteristics in x86 Assembly
Unpacking Protected Malware
In-Depth Analysis of Malicious Browser Scripts, Flash Programs and Office
In-Depth Analysis of Malicious Executables
Windows x86 Assembly Code Concepts for Revers-Engineering Memory Forensics for Rootkit Analysis

Prerequisites:

Strong understanding of core systems and network concepts
Exposure to programming and assembly concepts
Comfortable with command line access

Comments

Latest comments from students

User: marcus.osullivan

Instructor comments: Good stuff. I like the beginning half where there was help from an additional instructor to facilitate fixing computer errors that inevitably popped up.

Facilities comments: The baby deer were neat! I like the resort.

Liked the class? Then let everyone know!

PA-242: Palo Alto Networks Firewall Manage Cyberthreats (EDU-231)

Course Overview: PA-242: Palo Alto Networks Firewall Manage Cyberthreats (EDU-231) Training Class is a two-day course that teaches students strategies in defense against cyberthreats. Successful completion of this course enables administrators to better understand the threat landscape. This is not a virtualized theoretical course. This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.

Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk. Real hardware per student for real experience and real skill development. TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents.

The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies. Additionally, the instructor has taught several security appliance products and carries several SANS, ISC2, ISACA, Cisco, Unix, and Windows certifications.

Attendees to the PA-242: Palo Alto Networks Firewall Manaage Cyberthreats (EDU-231) Training Course will receive TechNow approved course materials and expert instruction.

Dates/Locations: No Events

Duration: 2 days

Course Objectives: Students attending this training course will gain an understanding of cyberthreats and their characteristics. Students will learn how to manage cyberthreats using security policies, profiles, and signatures to protect their network against emerging threats.

Day 1

Mod 1: Threat Landscape
- Advanced Persistent
- Threats
- Data Breaches and Tactics
- Threat Management
- Strategies
Mod 2: Integrated
- Approach to Threat
- Protection
- Integrated Approach to
- Protection
- Next-Generation Firewall
- Advanced Endpoint
- Protection
Mod 3: Network Visibility
- Zero Trust Model
- SSL Decryption
- Decryption Policy
Mod 4: Reducing the Attack
- Surf
- ection

Day 2

Mod 5: Handling Known
- Threats
- WildFire Analysis
- Security Profiles
Mod 6: Handling Unknown
- Traffic and Zero-Day Exploits
- WildFire
- Researching Threat Events
- Identifying Unknown
- Applications
Mod 7: Investigating
- Breaches
- Identify IOCs Using
- App-Scope
- Log Correlation
- Finding Infected Host
Mod 8: Using Custom
- Signatures
- Creating Custom App-IDs
- Threat Signatures

A

Prerequisites:

Students must complete the PA-213: Install, Configure, and Manage course
Understanding of network concepts, including routing, switching, and IP addressing
In-depth knowledge of port-based security and security technologies such as IPS, proxy, and content filtering

This course is in no way associated with Palo Alto Networks, Inc.

Comments

Latest comments from students

Like the class? Then let everyone know!

TN-979: Intrusion Analyst Course

Course Overview:

Intrusion Analyst is a hands-on course that covers intrusion detection in-depth. This includes concepts such as the use of Snort, network traffic analysis, and IDS signatures.

A skills focus enables the student to better absorb the subject matter and perform successfully on the job. This is not death by power point. The course is aligned with information assurance operators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics of packet and intrusion analysis.

Attendees to TN-979: Intrusion Analyst will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

Advanced Snort Concepts
Analyst Toolkit
Domain Name System (DNS)
Examining Packet Crafting
Examining Packet Header Fields
Fragmentation
ICMP Theory
IDS Interoperability
IDS Patterns
IDS/IPS Management & Architecture Issues
Indications, Warnings & Traffic Correlation
IPv6
Microsoft Protocols
Network Traffic Analysis
NIDS Evasion, Instertion & Checksums
Snort Fundamentals & Configuration
Snort GUIs & Sensor Management
Snort Performance, Active Response & Tagging
Snort Rules
Stimulus Response
TCPdump Fundamentals
TCP/IP Fundamentals
Wireshark Fundamentals
Writing TCPdump Filters

Course Prerequisites:

GSEC or equivalent experience
UNIX, Windows, Networking, and Security Experience
This is a hands-on skill course requiring comfort with command line interaction and network communications

Comments

Latest comments from students

User: Tosha

Instructor comments: Dave was an excellent instructor. He is very informative and knowledgeable in the course and the material. I have enjoyed the class and I would take another course with him as the instructor.

Facilities comments: Very nice and clean hotel.

User: buckey26

Instructor comments: Dave was one of the best instructors I have ever had for a tech course. He broke down everything to the point where you can understand it internally.

Liked the class? Then let everyone know!

PL-115: Fundamentals of Computer Programming

Course Overview:

This hands-on course provides a comprehensive introduction to programming logic, and builds a solid foundation of programming skills that can be used to master additional programming languages like C, C++, PERL, Java or Python. To learn programming you must focus on a particular language, and we have chosen Java. In this course you will write and debug programs in Python. If you would like this course to use a different computer language, that can be arranged.

Attendees to PL-115: Fundamentals of Computer Programming will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 5 Days

Course Objectives:

Writing Simple Programs Data Types, Constants, & Variables
Screen Output & Keyboard Input
Expressions
Decision Making
Looping
Subroutines
Debugging
Data Collections – Arrays
Data Collections – Classes Working with Files

Prerequisites:

This course is for students starting out in programming. No programming experience is required.

Comments

Latest comments from students

User: tsonger

Instructor comments: While I could tell the instructor was very knowledgeable, his instructions were not very clear. He could've done a better job preparing for the class.

Facilities comments: Room was fine. The location of the room could have been better as the dings from the elevator were a bit distractive.

User: TracyPaul

Instructor comments: Very knowledgeable. Diagnosed our programming problems in short order. Could go into the details of 'why', versus only the 'how'.

Facilities comments: Outstanding. The hotel staff did a great job supporting our class.