cheddarcon-powershell-threat-hunting-registration

    After you press "Request Registration" near the bottom of this form, within 30 seconds, status will be provided at the bottom of the form, you will also be contacted by phone for credit card information.

    Tech Now is pleased to have the opportunity to provide you training for "Windows Security Automation and Threat Hunting with PowerShell” at CheddarCon 2018!

    Scroll down to see the course description.

    First Name*

    Last Name*

    Your Email*

    Your Organization*

    Phone*

    Questions:

    After you press "Request Registration" on this form, within 30 seconds, status will be provided at the bottom of the form, you will also be contacted by phone for credit card information.

    Windows Security Automation and Threat Hunting with PowerShell Seminar

    Location: 400 W Wisconsin Ave, Milwaukee, WI 53203, USA

    Date: October 10, 2018 8:00am – 4:00pm

    Duration: 8 hours

    Audience: Cyber Security professionals and Windows administrators

    Attendees Environment: Laptops not required, but suggested to have better hands-on absorption of subject matter.

    Description:
    PowerShell is both a command-line shell and scripting language. Fight fires quickly using existing or custom PowerShell commands or scripts at the shell. PowerShell is made for Security Operations (SecOps) automation on Windows. This seminar does not require prior programming skills. The seminar focuses on PowerShell programming, giving a beginner skills to be productive in windows scripting to automate tasks and also remediate problems.

    Cyber Security is the objective of this seminar, and the PowerShell examples will demonstrate PowerShell capabilities that help lock down a Windows system and also report security status.

    Objectives:

    PowerShell Overview

    • Getting started running commands
    • Security cmdlets
    • Using and updating the built-in help
    • Execution policies
    • Fun tricks with the ISE graphical editor
    • Piping .NET and COM objects, not text
    • Using properties and methods of objects
    • Helping Linux admins feel more at home
    • Aliases, cmdlets, functions, modules, etc.

    PowerShell Utilities and Tips

    • Customizing your profile script
    • PowerShell remote command execution
    • Security setting across the network
    • File copy via PowerShell remoting
    • Capturing the output of commands
    • Parsing text files and logs with regex patterns
    • Parsing Security Logs
    • Searching remote event logs
    • Mounting the registry as a drive
    • Security settings in the Registry
    • Exporting data to CSV, HTML and JSON files
    • Running scripts as scheduled jobs
    • Continued Security Compliance
    • Pushing out scripts through Group Policy
    • Importing modules and dot-sourcing functions
    • http://www.PowerShellGallery.com

    PowerShell Scripting

    • PowerShell Scripting to implement Security Practices
    • Writing your own functions to automate security status and settings
    • Passing arguments into your scripts
    • Function parameters and returning output
    • Flow control: if-then, foreach, that make security decisions
    • How to pipe data in/out of your scripts for security compliance and reporting

    Attendees to this seminar, Windows Security Automation and Threat Hunting with PowerShell, will receive TechNow approved course materials and expert instruction.[/wr_text][/wr_column][/wr_row]

    TN-913: Cloud Security Fundamentals

     

    Course Overview:

    TechNow Cloud Security Fundamentals addresses the loss of hands-on control of system, application, and data security in the Cloud computing environment.  Security teams wrestle with the impact and liability of Cloud computing on an organization.  This course enables the security team to assist in contract language and Service Level Agreements (SLAs) when utilizing Cloud Service Providers (CSPs).

    Compliance and auditing are introduced with strategies for control verification and audit analysis in the CSP environment.  Software as a Service (SaaS) to Infrastructure as a Service (IaaS) and everything in between require a compliance strategy.  Students will go in-depth into the architecture and infrastructure fundamentals for private, public, and hybrid clouds.   Topics covered include: patch and configuration management, virtualization security, application security, and change management. Policy, risk assessment, and governance within cloud environments will be covered with recommendations for both internal policies and contract provisions to consider.

    TechNow has worked worldwide enterprise infrastructures for over 20 years and has developed demos and labs to exemplify the techniques required to effectively manage security in the cloud environment.

    Attendees to TN-913: Cloud Security Fundamentals will receive TechNow approved course materials and expert instruction.

    Date/Locations:

    No Events

    Course Duration: 3 days

    Course Objectives:

    • Cloud computing introduction
    • Security challenges in the cloud
    • Infrastructure security in the cloud
    • Policy, risk, and governance for cloud computing
    • Compliance and legal considerations
    • Audit and assessment for the cloud
    • Data security in the cloud
    • Identity and Access Management (IAM)
    • Disaster Recovery and Business Continuity Planning (DR/BCP) in the cloud
    • Intrusion detection and incident response

    Course Prerequisites:

    • GSEC, CISSP, CASP or equivalent experience in managing enterprise infrastructures
    • Managing or administering at least one of UNIX, Windows, Databases, networking, or security

    Comments

    Latest comments from students

    User: reedrobt

    Instructor comments: Dave is like an encyclopedia of technical topics...what "doesn't" he have expertise in?

    Facilities comments: Home2 location was well-kept and convenient to other services.

     

    Liked the class?  Then let everyone know!

    TN-765: Automating Administration with Windows Powershell

     

    Course Overview:

    This course provides students with the fundamental knowledge and skills to use PowerShell for administering and automating administration of Windows servers. This course provides students the skills to identify and build the command they require to perform a specific task. In addition, students learn how to build scripts to accomplish advanced tasks such as automating repetitive tasks and generating reports. This course provides prerequisite skills supporting a broad range of Microsoft products, including Windows Server, Windows Client, Microsoft Azure, and Microsoft 365. In keeping with that goal, this course will not focus on any one of those products, although Windows Server, which is the common platform for all of those products, will serve as the example for the techniques this course teaches.

    Attendees to TN-765: Automating Administration with Windows Powershell will receive TechNow approved course materials and expert instruction.

    Date/Locations:

    No Events

    Course Duration: 5 days

    Course Objectives:

     

    • Describe the functionality of Windows PowerShell and use it to run and find basic commands
    • Identify and run cmdlets for server administration
    • Work with Windows PowerShell pipeline
    • Describe the techniques Windows PowerShell pipeline uses
    • Use PSProviders and PSDrives to work with other forms of storage
    • Query system information by using WMI and CIM
    • Work with variables, arrays, and hash tables
    • Write basic scripts in Windows PowerShell
    • Write advanced scripts in Windows PowerShell
    • Administer remote computers
    • Use background jobs and scheduled jobs
    • Use advanced Windows PowerShell techniques

     

    Course Prerequisites:

     

    • Experience with Windows networking technologies and implementation.
    • Experience with Windows Server administration, maintenance, and troubleshooting.

     

    Comments

    Latest comments from students

     

    Liked the class?  Then let everyone know!

    RH-355: RHCSA Rapid Track Course

    Course Overview:

    The RHCSA Rapid Track Course  is designed for experienced Linux® system administrators who want to expand their technical skill sets and become accredited with the Red Hat® Certified System Administration (RHCSA) certification. To successfully navigate this course, students should have experience with the Linux command line—including the necessary skills to execute common commands, such as cp, grep, sort, mkdir, tar, mkfs, ssh, and dnf—and be familiar with accessing man pages for help. At the completion of the course, students will be adequately prepared to take the RHCSA exam (EX200) .

    Date/Locations:

    No Events

    Duration: 5 days

    Course Objectives:

    • Introduce Linux and the Red Hat Enterprise Linux ecosystem.
    • Run commands and view shell environments.
    • Manage, organize, and secure files.
    • Manage users, groups and user security policies.
    • Control and monitor systemd services.
    • Configure remote access using the web console and SSH.
    • Configure network interfaces and settings.
    • Manage software using DNF
    • Access security files, file systems, and networks
    • Execute shell scripting and automation techniques
    • Manage storage devices, logical volumes, and file systems
    • Manage security and system access
    • Control the boot process and system services
    • Running containers

    Prerequisites:

    Experience in the field system administration.

    Comments

    Latest comments from students

    Liked the class?  Then let everyone know!

    PA-213: Palo Alto Networks Firewall Install, Configure, and Manage (EDU-201)

      

     

    Course Overview: PA-213: Palo Alto Networks Firewall Install, Configure, and Manage (EDU-201) Training Class is a three-day course that teaches students to configure and manage the entire line of Palo Alto Networks next-generation firewalls. This course prepares the student for the Palo Alto Networks Accredited Configuration Engineer (ACE) and progress to the Palo Alto Networks Certified Network Security Engineer (PCNSE).  Through hands-on training, students learn high end skills of how to integrate Palo Alto next-generation firewalls into their network infrastructure.  This is not a virtualized theoretical course.  This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.

    Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk.  Real hardware per student for real experience and real skill development.  TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents.

    This course sets up the foundation for the two day course PA-212: Palo Alto Networks Firewall Configure Extended Features. The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies.  Additionally, the instructor has taught several security appliance products and carries several SANS, ISC2, ISACA, Cisco, Unix, and Windows certifications.

    Attendees to the PA-213: Palo Alto Networks Firewall Install, Configure, and Manage (EDU-201) Training Course will receive TechNow approved course materials and expert instruction.

    TechNow PA-212: Palo Alto Networks Firewall Configure Extended Features (EDU-205) immediately follows this course in the schedule so that you can take both courses in the same week.  We also offer a discount for attending both classes in the same week!!

    Dates/Locations:

    No Events

    Duration: 3 days

    Course Objectives:   Students attending this foundational-level training course will gain an in-depth knowledge of how to configure and manage their Palo Alto Networks firewall, including hands-on experience in configuring the security, networking, threat prevention, logging, and reporting features of the Palo Alto Networks Operating System (PAN-OS).

    Day 1

    • Module 0 – Introduction & Overview
    • Module 1 – Platforms and Architecture
      • Single-Pass Architecture
      • Flow Logic
    • Module 2 – Initial Configuration
      • Initial Access to the System
      • Configuration Management
      • Licensing and Software Updates
      • Account Administration
    • Mod 3: Basic Interface Configuration
      • Security Zones
        Layer 2, Layer 3, Virtual Wire, and Tap
      • Subinterfaces
      • DHCP
      • Virtual Routers
    • Mod 4: Security and NAT Policies
      • Security Policy Configuration
      • Policy Administration
      • NAT (source and destination)

    Day 2

    • Mod 5: Basic App-ID™
      • App-ID Overview
      • Application Groups and Filters
    • Mod 6: Basic Content-ID™
      • Antivirus
      • Anti-spyware
      • Vulnerability
      • URL Filtering
    • Mod 7: File Blocking and WildFire™
      • File Blocking
      • WildFire
    • Mod 8: Decryption
      • Certificate Management
      • Outbound SSL Decryption
      • Inbound SSL Decryption

         

         
    Day 3

    • Mod 9: Basic User-ID™
      • Enumerating Users
      • Mapping Users to IP Addresses
      • User-ID Agent
    • Mod 10: Site-to-Site VPNs
      • IPSec Tunnels
    • Mod 11: Management and Reporting
      • Dashboard
      • Basic Logging
      • Basic Reports
      • Panorama
    • Mod 12: Active/Passive High
      • Availability
      • Configuring Active/Passive HA

     

    Prerequisites:

    This course is in no way associated with Palo Alto Networks, Inc.

    Comments

    Latest comments from students

    Like the class?  Then let everyone know!