TN-939: Hacker Techniques, Exploits, and Incident Handling Course

Course Overview:

A skills focus enables the student to better absorb the subject matter and perform successfully on the exam. This is not death by power point. The course is aligned with information assurance operators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics of the attacks and the effectiveness. Students then gain network experience and use sniffing to help exemplify the benefit of learning wired and wireless security configurations. The course concludes with exercising real attack strategies to demonstrate the techniques acquired throughout the course.

Attendees to TN-939: Hacker Techniques, Exploits, and Incident Handling will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 9 days

Course Objectives:

Backdoors & Trojan Horses
Buffer Overflows
Covering Tracks: Networks
Covering Tracks: Systems
Denial of Service Attacks
Exploiting Systems Using Netcat
Format String Attacks
Incident Handling Overview and Preparation
Incident Handling Phase 2: Identification
Incident Handling Phase 3: Containment
Incident Handling: Recovering and Improving Capabilities
IP Address Spoofing
Network Sniffing
Password Attacks
Reconnaissance
Rootkits
Scanning: Host Discovery
Scanning: Network and Application Vulnerability scanning and tools
Scanning: Network Devices (Firewall rules determination, fragmentation, and IDS/IPS evasion)
Scanning: Service Discovery
Session Hijacking, Tools and Defenses
Types of Incidents
Virtual Machine Attacks
Web Application Attacks
Worms, Bots & Bot-Nets

Prerequisites:

GSEC or equivalent experience
UNIX, Windows, Networking, and Security Experience
This is a hands-on skill course requiring comfort with command line interaction and network communications

Comments

Latest comments from students

User: m_jurrens

Instructor comments: Both instructors Mr. Askey and Mr. Hackney, were very good. the open learning environment was extremely productive and I felt we all learned far more that we ever would out of a structured rote memorization course.

User: natebonds

Instructor comments: Both Mr. Askey and Hackney were extremely knowledgeable. They were also extremely interested in helping each student learn. I was particularly impressed with the way they tailored the course to optimize our time since we weren't testing. I feel like I know much much more than I did when the class started.

Facilities comments: The facilities were fine. I would have preferred it be closer to Lackland.

Liked the class? Then let everyone know!

VM-345: VMware Infrastructure Security: VMware Install, Configure, and Manage with Security Objectives

Course Overview:

This course explores the VMware Infrastructure and related security, which consists of VMware ESX Server & VMware Virtual Center Server. We will look at both the design environments and operational processes of the VMware Infrastructure including security. This course provides IT architects with the insight needed to tackle tough issues in server virtualization such as virtual machine technologies, storage infrastructure, and designing clustered environments with security practices included. Extensive hands-on labs provide for a rich student experience.

Hypervisors and their supporting environment require attention to security due to the aggregated risk of hosting multiple virtual servers. This course explores the security of virtualized environments. Student configure ESXi by learning to manage the security and risk between ESXi, virtual servers and security integration of ESXi to the physical network infrastructure including appropriate segregation from other sensitive networks and management networks. How to configure virtual networks when some hosts are dual or multi homed, but internally segregate between the two or more connected networks with different security levels. Appropriate integration of zero-clients and thin clients. Configuration of defensive measures on hosts, servers, hypervisors within the virtual environment and practices for those guarding it externally. Integration of Active Directory and other AAA/CIA related services relative to a virtualized environment.

Students are also walked through DoD ESXi Security Technical Implementation Guide (STIG). Introduction to the impact of Intel Trusted Execution Technology integrated with ESXi to create a trusted platform for virtual machines. Additionally the instructor walks the students through NIST Special Publication 800-125A: Security Recommendations for Hypervisor Deployment on Servers, and NIST Special Publication 800-125B: Secure Virtual Network Configuration for Virtual Machine (VM) Protection.

Attendees to “VM-345: VMware Infrastructure Security: VMware Install, Configure, and Manage with Security Objectives” will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 5 Days

Course Objectives:

• Virtual Infrastructure Overview
• ESX and ESXi Server Installation
• Configuration of Networking, Scalability and Security
• Storage
• Install and Configure vCenter Server and Components
• Creation, Deployment, Management, and Migration of Virtual Machines
• Utilize vCenter Server for Resource Management
• Utilize vCenter Server for Virtual Machine Access Control and User Managment
• Use vCenter Server to increase scalability
• Monitoring Your Environment
• Data & Availability Protection Troubleshooting
• Use VMware vCenter Update Manager to apply ESXi patches
• Use vCenter Server to manage vMotion, HA, DRS and data protection.

P-315: Intermediate PERL Programming

Course Overview:

PERL programmers need a clear roadmap for improving their skills. Intermediate PERL teaches a working knowledge of PERL's objects, references, and modules — all of which makes the language so versatile and effective. This class offers a thorough introduction to intermediate programming in PERL. Topics include packages and namespaces, references and scoping, manipulating complex data structures, writing and using modules, package implementation, and using CPAN.

Attendees to P-315: Intermediate PERL Programming will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration: 5 Days

Course Objectives:

Packages and namespaces
References and scoping
Manipulating complex data structures
Object-oriented programming
Writing and using modules
Testing PERL code
Contributing to CPAN

Prerequisites:

P-245: Programming with PERL or equivalent knowledge and skills

Comments

Latest comments from students

User: J Masters

Instructor comments: Instructor kept it interesting and brought a wealth of knowledge to the classroom environment. Kept a good pace and provided relevant examples.

Liked the class? Then let everyone know!

TN-535: Certified Forensic Computer Examiner (CFCE)

CCFE Core Competencies

Procedures and Legal Issues
Computer Fundamentals
Partitioning Schemes
Data Recovery
Windows File Systems
Windows Artifacts
Report writing (Presentation of Finding)

Procedures and Legal issues

Knowledge of search and subjection and rules for evidence as applicable to computer forensics.
Ability to explain the on-scene action taken for evidence preservation.
Ability to maintain and document an environment consolidating the computer forensics.

Computer Fundamentals

Understand BIOS
Computer hardware
Understanding of numbering system (Binary, hexadecimal, bits, bytes).
Knowledge of sectors, clusters, files.
Understanding of logical and physical files.
Understanding of logical and physical drives.

Partitioning schemes

Identification of current partitioning schemes.
Understanding of primary and extended partition.
Knowledge of partitioning schemes and structures and system used by it.
Knowledge of GUID and its application.

Windows file system

Understanding of concepts of files.
Understanding of FAT tables, root directory, subdirectory along with how they store data.
Identification, examination, analyzation of NTFS master file table.
Understanding of $MFT structure and how they store data.
Understanding of Standard information, Filename, and data attributes.

Data Recovery

Ability to validate forensic hardware, software, examination procedures.
Email headers understanding.
Ability to generate and validate forensically sterile media.
Ability to generate and validate a forensic image of media.
Understand hashing and hash sets.
Understand file headers.
Ability to extract file metadata from common file types.
Understanding of file fragmentation.
Ability to extract component files from compound files.
Knowledge of encrypted files and strategies for recovery.
Knowledge of Internet browser artifacts.
Knowledge of search strategies for examining electronic

Windows Artifacts

Understanding the purpose and structure of component files that create the windows registry.
Identify and capability to extract the relevant data from the dead registry.
Understand the importance of restore points and volume shadow copy services.
Knowledge of the locations of common Windows artifacts.
Ability to analyze recycle bin.
Ability to analyze link files.
Analyzing of logs
Extract and view windows logs
Ability to locate, mount and examine VHD files.
Understand the Windows swap and hibernation files.

Report Writing (Presentation of findings)

Ability to conclude things strongly based on examination observations.
Able to report findings using industry standard technically accurate terminologies.
Ability to explain the complex things in simple and easy terms so that non-technical people can understand clearly.
Be able to consider legal boundaries when undertaking a forensic examination

MS-10175: Developing & Customizing Applications for Microsoft SharePoint 2010 & 2013

Course Overview:

TechNow’s Course provides existing .NET developers with practical information and labs that enables them to build solutions on the Microsoft SharePoint 2010/2013 platform.

Attendees to MS-10175: Developing & Customizing Applications for Microsoft SharePoint 2010/2013 will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

Introduction to SharePoint 2010/2013 Development Platform
Using SharePoint 2010/2013 Developer Tools
Developing SharePoint 2010/2013 Web Parts
Working with SharePoint Objects on the Server
Creating Event Receivers and Application Settings
Developing Solutions by Using Business Connectivity Services
Developing SharePoint 2010/2013 Workflows
Working with Client-based APIs for SharePoint 2010/2013
Developing Interactive User Interfaces
Developing Silverlight Applications for SharePoint
Developing Sandboxed Solutions
Working with SharePoint Server Profiles and Taxonomy APIs
Developing Content Management Solutions

Prerequisites:

An understanding of the problem-solving techniques that apply to software development
Approximately 12 months experience with ASP .NET 3.5 with Visual Studio 2008 (or later)
Approximately 1 month development experience with SharePoint 2007 or SharePoint 2010/2013 and VS2010/2013 (includes beta releases) creating code that interacts with the SharePoint Sever-side APIs
Experience performing end user tasks with SharePoint 2007 or SharePoint 2010/2013 and an understanding of the purpose and use of the following:
- Lists
- Documents and Libraries
- Personalizing an SP Page/Site
- Using MySites
- Using SharePoint Designer

Comments

Latest comments from students

User: kelleyd10

Instructor comments: Clay was / is an outstanding instructor. He was very flexible in what the class needed. He was very accommodating and resourceful in answering the class questions. Clay's teaching style is greatly appreciated.

Facilities comments: Were good

User: dennij

Instructor comments: Very professional and knowledgeable. Available before and after class.

Facilities comments: Location was nice but too far from Lackland.