TechNow provides an array of courses to meet our customer's requirements. Courses that do not fit into our major course categories and custom or specialized courses appear here.
Here are courses about specilaized Software or Hardware:
Course Overview:
This hands-on training course builds your skills in the VMware ViewTM suite of products: VMware View Manager, VMware View Composer, and VMware® ThinAppTM. Based on customer specification, this course can be based on View 4.x or 5.x, and ThinApp 4.x or 5.x releases.
Attendees to VM-325: VMware View: Install, Configure and Manage will receive TechNow approved course materials and expert instruction.
At the end of this course, you should understand the features and operations of View and be able to:
- Install and configure View components
- Create and manage dedicated and floating desktop pools
- Deploy and manage linked-clone virtual desktops
- Configure and manage desktops that run in local mode
- Configure secure access to desktops through a public network
- Use ThinApp to package applications
Date/Locations:
No Events
Duration: 5 days
Course Objectives:
- Module 1: Course Introduction
- Module 2: Introduction to VMware View
- Module 3: View Connection Server
- Module 4: View Desktops
- Module 5: View Client Options
- Module 6: View Administratory
- Module 7: Configuring and Managing Linked Clones
- Module 8: Local-Mode Desktops
- Module 9: Command-Line Tools and Backup Options
- Module 10: Managing VMware View Security
- Module 11: View Manager Performance and Scalability
- Module 12: VMware® ThinAppTM
Prerequisites:
- VM-315: VMware Infrastructure: Install, Configure and Manage
- Experience in Microsoft Windows Active Directory Administration
- Experience with VMware vSphereTM
- Before attending the course, students must be able to perform the following tasks:
- Create a template in VMware vCenterTM Server and deploy a virtual machine from it
- Modify a template customization file
- Open a virtual machine console in vCenter Server and access the guest operating system
- Configure Active Directory services
Comments
Latest comments from students
Liked the class? Then let everyone know!
Course Overview:
TechNow’s TN-911: Cyber Threat Intelligence (CTI) Analysis and 800-172 Updates Seminar, is a one day seminar that covers the objectives of TechNow’s TN-905: Cyber Threat Intelligence Analysis five day course in a one day seminar format plus some other security enhancements of 800-172. Upon request, this seminar can be presented in multi-day format based upon the depth of knowledge required. The NIST PUB 800-172 security enhancement update to 800-171 regarding 03.11.1 Risk Assessment, introduces the security enhancements of a Threat Awareness Program, Threat Hunting, and Predictive Cyber Analytics. TN-911 distills the TN-905 CTI five day course and aligns it to assessing compliance with 800-172. For the seminar, selected course labs are converted to demos, and the important points and outcomes of topics are presented. The TN-911 CTI Seminar discusses the applicability of the 800-172 security enhancements to the organization being assessed, and how to think about the the appropriate strength of the controls related to the organizations criticality of the information and the risk involved for contracted work with the DoD.
TechNow’s TN-911: Cyber Threat Intelligence Analysis Seminar addresses significant changes that have been made to SP 800-172 in transitioning to Revision 3, regarding new enhanced security requirements based on (1) the latest threat intelligence and (2) empirical data from cyber-attacks. With the intent of addressing CUI that may be associated with a critical program or a high value asset.
Those programs and assets are potential targets for advanced persistent threat (APT). Cyber Threat Intelligence supports the required functions of NIST 800-172 of Penetration Resistant Architecture (PRA), Damage Limiting Operations (DLO) and Cyber Resiliency (CRS).
Regarding 800-172 This seminar includes:
- 3.2.1E Awareness Training (rev 3 – Advanced Literacy and Awareness Training)
- 3.11.6E Supply Chain Risk Management SCRM (rev 3 withdrawn, moved to other controls)
- 3.11.7E SCRM Planning (rev 3 withdrawn, moved to other controls)
- 3.12.1E Penetration Testing
- 800-172, 3.11 Risk Assessment
- 03.11.01E Threat Awareness Program
- 03.11.02E Threat Hunting
- 03.11.03E Predictive Cyber Analytics.
TN-911 CTI Seminar directly discusses 3.11 topics:
03.11.01E Threat Awareness Program:
Share threat information, including threat events of 03.11.01E is specifically covered as:
- Create Indicators of Compromise (IOCs) using STIX
- Understand a solution for collecting, storing, distributing and sharing cyber security indicators and threats about cyber security incidents analysis and malware analysis.
- How to assess an environment to validate:
- Support for day-to-day operations to share structured threat information efficiently.
- Confirming the presence of curated, frequently updated feeds, and the automation of enrichment workflow
- Contextualization of intelligence with internal data to prioritize alerts and improve detection
- Updated threat hunting based upon inbound Threat Intelligence
03.11.02E Threat Hunting:
Introduction to Threat Hunting practices to effectively search for indicators of compromise and to detect, track, and disrupt threats that evade existing controls.
- How to assess an environment to validate:
- A formalized process is being followed for Threat Hunting
- Phases of trigger (incident or CTI), SIEM utilization, and response
- Integration of machine learning to provide proactive, automated, and scalable Threat Hunting
- Leveraging threat intelligence for proactive threat hunting by querying historical logs for indicators of compromise (IOCs) from feeds to identify:
- Dormant threats
- Advance Persistent Threats (APT)
03.11.03E Predictive Cyber Analytics
Introduction leveraging data, machine learning, and real-time analysis with automation to anticipate threats before they occur.
- How to assess an environment to validate:
- Data aggregation from network logs, user activities, system logs, and external threat intelligence feeds into a centralized platform like a SIEM
- Use of machine learning algorithms to identify patterns, uncover correlations, and spot anomalies in real-time
- Integration with incident response workflows
- Staff skill competency level and integration into Predictive Cyber Analytics to mitigate advanced adversarial techniques against machine learning such as:
- Attacks of Evasion, Poisoning, and Model Tampering
- Utilization of exercises or Red Teaming to validate practices and effectiveness of Predictive Cyber Analytics.
3.2.1E Awareness Training (rev 3 – Advanced Literacy and Awareness Training)
- Validate that training addresses APT
3.11.6E Supply Chain Risk Management SCRM (rev 3 withdrawn, moved to other controls)
Validate cybersecurity supply chain risk management C-SCRM:
- Cross-functional team responsible for supply chain risk management (SCRM) and C-SCRM
- Validating standard risk management with respect to supply chain
- FARM (Frame, Assess, Respond, and Monitor)
- Tasks outlined in NIST Pub 800-161
3.11.7E SCRM Planning (rev 3 withdrawn, moved to other controls)
- This is discussed in topic 3.11.6E
3.12.1E Penetration Testing
Validate the organization is progressing through standardized Penetration Testing Protocols.
- Evaluate Penetration Test reports for completeness and scope.
Attendees to TN-911: Cyber Threat Intelligence (CTI) Analysis and 800-172 Seminar will receive TechNow approved course materials and expert instruction.
Seminar Duration: 1 day (more upon request)
Seminar Objectives:
- Learn to comprehend and develop complex scenarios
- Identify and create intelligence requirements through practices such as threat modeling
- Utilize threat modeling to drive intelligence handling and practices
- Breakdown tactical, operational, and strategic-level threat intelligence
- Generate threat intelligence to detect, respond to, and defeat focused and targeted threats
- How to collect adversary information creating better value CTI
- How to filter and qualify external sources, mitigating low integrity intelligence
- Create Indicators of Compromise (IOCs) in STIX
- Move security maturity past IOCs into understanding and countering the behavioral tradecraft of threats
- Breaking down threats mapped against their tradecraft to tweak IOCs
- Establish structured analytical techniques to be successful in any security role
- Learn and apply structured principles in support of CTI and how to communicate that to any security role.
Seminar Prerequisites:
- Security+, or equivalent experience
Course Overview:
This course is very hands-on with respect to SP 800-53 controls as related to ICD-503, leveraging experience with DCD 6/3, and incorporating a broad array of technologies found in the field. Assessors and Auditors have to face many technologies that are not part of the main stream. TechNow has gone to great efforts to build a very broad, comprehensive, and complex lab to simulate many scenarios and architectures. Technologies such as a network appliance that is not a typical infrastructure product, a radio/satellite communications device, or many other technologies that build up a weapon system. Students learn how controls are integrated into many different devices and how they fit in the overall security architecture of monitoring, reporting, and compliance testing.
Directly discussed are overlays for different requirements i.e.: tactical, medical, network type: JWICS, SIPR; IC or AF. TechNow has developed a funnel concept to overlays to exemplify the encapsulation of a control within different requirements. TechNow has over 15 years experience in Trusted Solaris/Trusted Extensions and labeled security. Cross Domain overlays are presented that fits the work flow of an assesor. PII overlays and any overlays that an organization uses and can be made available are also presented.
This course allows the student to leverage years of experience in DoD DCD 6/34 for transition to the Risk Management Framework (RMF) applied to the Intelligence Community as mandated by ICD 503. Utilizing NIST SP 800-37 to establish a baseline of RMF knowledge, the student learns how to integrate the NIST pubs to provide cohesive information assurance architectures and compliance. ICD 503 scorecard evaluations are integral in demonstrating a successful ICD 503 compliance program. TechNow's ICD 503 course provides students with the skill to assess security programs and evaluate ICD 503 compliance to build an improvement and sustainable program for score consistency. TechNow's instructors have unparralleled expertise in federal compliance initiatives, and we bring this expertise instructing students on the complete life cycle of RMF.
More than a simple checklist, we instruct students not only how to validate essential security controls, programs, and metrics, but that they are operating effectively. The student leaves the course knowing how to: identify gaps where controls, programs, or metrics are incomplete, missing or ineffective, and provide actionable findings and recommend remediation strategies. Students learn to internalize NIST pubs to meaningul and effective IA guidelines and work with the Body of Evidence templates which include: Risk Assessment Report (RAR), Systems Security Plan (SSP), Security Assessment Report (SAR), and Plans of Action and Milestone (POAM).
TechNow training materials are aligned with the most recent set of National Institute of Standards and Technology (NIST), Committee on National Security Systems (CNSS), and Office of the Director of National Intelligence (ODNI) policies standards, processes, policies and instructions to be addressed/explained include ICD 503, ICS 503-1, ICS 500-16, ICS 500-18, ICS 500-27, ICD 502, NIST SP 800-37, NIST SP 800-30, NIST SP 800-53, NIST SP 800-53A, NIST SP 800-137, NIST SP 800-47, CNSSP 22, CNSSI 1253, and CNSSI 4009.
A majority of time is spent on in-depth compliance review of NIST SP 800-53 controls. Instruction discusses which method should be used to test and validate each security control and what evidence should be gathered. This course is not theory or death by power point. Real scenarios are presented as exercises. A complete live cyber range simulating the IC is utilized for hands-on labs for techniques of validating and documenting compliance of NIST SP 800-53 controls as related to ICD 503.
Date/Locations:
No Events
Duration: 5 days
Course Objectives:
- Establish a baseline of RMF knowledge
- Validate essential security controls, programs, and metrics
- DoD DCD 6/3 to ICD 503 Transition
- Lab Environtment and the Cyber Range
- Overlays: Tactical, Medical, Network type(JWICS, SIPR; IC or AF), Cross Domain, PII
- Risk Assessment Report (RAR)
- Systems Security Plan (SSP)
- Security Assessment Report (SAR)
- Plans of Action and Milestone (POAM)
Prerequisites:
Experience in the field of auditing and assesments.
Comments
Latest comments from students
Liked the class? Then let everyone know!
Here are the CompTIA Security course offerings: