cheddarcon-powershell-threat-hunting-registration

    After you press "Request Registration" near the bottom of this form, within 30 seconds, status will be provided at the bottom of the form, you will also be contacted by phone for credit card information.

    Tech Now is pleased to have the opportunity to provide you training for "Windows Security Automation and Threat Hunting with PowerShell” at CheddarCon 2018!

    Scroll down to see the course description.

    First Name*

    Last Name*

    Your Email*

    Your Organization*

    Phone*

    Questions:

    After you press "Request Registration" on this form, within 30 seconds, status will be provided at the bottom of the form, you will also be contacted by phone for credit card information.

    Windows Security Automation and Threat Hunting with PowerShell Seminar

    Location: 400 W Wisconsin Ave, Milwaukee, WI 53203, USA

    Date: October 10, 2018 8:00am – 4:00pm

    Duration: 8 hours

    Audience: Cyber Security professionals and Windows administrators

    Attendees Environment: Laptops not required, but suggested to have better hands-on absorption of subject matter.

    Description:
    PowerShell is both a command-line shell and scripting language. Fight fires quickly using existing or custom PowerShell commands or scripts at the shell. PowerShell is made for Security Operations (SecOps) automation on Windows. This seminar does not require prior programming skills. The seminar focuses on PowerShell programming, giving a beginner skills to be productive in windows scripting to automate tasks and also remediate problems.

    Cyber Security is the objective of this seminar, and the PowerShell examples will demonstrate PowerShell capabilities that help lock down a Windows system and also report security status.

    Objectives:

    PowerShell Overview

    • Getting started running commands
    • Security cmdlets
    • Using and updating the built-in help
    • Execution policies
    • Fun tricks with the ISE graphical editor
    • Piping .NET and COM objects, not text
    • Using properties and methods of objects
    • Helping Linux admins feel more at home
    • Aliases, cmdlets, functions, modules, etc.

    PowerShell Utilities and Tips

    • Customizing your profile script
    • PowerShell remote command execution
    • Security setting across the network
    • File copy via PowerShell remoting
    • Capturing the output of commands
    • Parsing text files and logs with regex patterns
    • Parsing Security Logs
    • Searching remote event logs
    • Mounting the registry as a drive
    • Security settings in the Registry
    • Exporting data to CSV, HTML and JSON files
    • Running scripts as scheduled jobs
    • Continued Security Compliance
    • Pushing out scripts through Group Policy
    • Importing modules and dot-sourcing functions
    • http://www.PowerShellGallery.com

    PowerShell Scripting

    • PowerShell Scripting to implement Security Practices
    • Writing your own functions to automate security status and settings
    • Passing arguments into your scripts
    • Function parameters and returning output
    • Flow control: if-then, foreach, that make security decisions
    • How to pipe data in/out of your scripts for security compliance and reporting

    Attendees to this seminar, Windows Security Automation and Threat Hunting with PowerShell, will receive TechNow approved course materials and expert instruction.[/wr_text][/wr_column][/wr_row]

    TN-415: Computer Hacking Forensics Investigator (CHFI)

     

     

     

     

     

     

     

    Course Overview:

    The Computer Hacking Forensic Investigator (CHFI) course delivers the security discipline of digital forensics from a vendor-neutral perspective. CHFI is a comprehensive course covering major forensic investigation scenarios and enabling students to acquire necessary hands-on experience with various forensic investigation techniques and standard forensic tools necessary to successfully carry out a computer forensic investigation leading to the prosecution of perpetrators.

    The CHFI certification gives participants the necessary skills to perform an effective digital forensics investigation. CHRI presents a methodological approach to computer forensics including searching and seizing, chain-of-custody, acquisition, preservation, analysis and reporting of digital evidence

    What’s Included:

    • 5 days of instructor-led in classroom training
    • Detailed Labs for hands-on learning experience; approximately 50% of training is dedicated to labs
    • Hundreds of investigation tools including EnCase, Access Data FTL, & ProDiscover
    • Huge cache of evidence files for analysis including RAW, .dd images, video & audio files, MS Office files, systems files, etc.
    • CHFI Courseware
    • Exam Voucher
    • CHFI onsite exam scheduling

    Course Objectives:

    • Establish threat intelligence and key learning points to support pro-active profiling and scenario modeling
    • Perform anti-forensic methods detection
    • Perform post-intrusion analysis of electronic and digital media to determine the who, where, what, when, and how the intrusion occurred
    • Extract and analyze of logs from various devices like proxy, firewall, IPS, IDS, Desktop, laptop, servers, SIM tool, router firewall, switches AD server, DHCP logs, Access Control Logs & conclude as part of investigation process
    • Identify & check the possible source/ incident origin
    • Recover deleted files and partitions in Windows, MAC OS X, and Linux
    • Conduct reverse engineering for known and suspected malware files
    • Collect data using forensic technology methods in accordance with evidence handling procedures, including collection of hard copy and electronic documents

    Dates/Locations:

    No Events

    Duration: 5 Days

    Course Content:

      • Module 01. Computer Forensics in Today’s World
      • Module 02. Computer Forensics Investigation Process
      • Module 03. Understanding Hard Disks and File Systems
      • Module 04. Data Acquisition and Duplication
      • Module 05. Defeating Anti-forensics Techniques
      • Module 06. Operating System Forensics (Windows, Mac, Linux)
      • Module 07. Network Forensics
      • Module 08. Investigating Web Attacks
      • Module 09. Database Forensics
      • Module 10. Cloud Forensics
      • Module 10. Malware Forensics
      • Module 11. Investigating Email Crimes
      • Module 12. Investigating Email Crimes
      • Module 13. Mobile Forensics
      • Module 14. Forensics Report Writing and Presentation

     

    Prerequisites:

        • 2+ years of proven information security work experience
        • Educational background with digital security specialization

      Target Audience:

        • Law Enforcement
        • Defense & Military
        • E-Business Security
        • Systems Administrators
        • Legal Professionals
        • Banking & Insurance professionals
        • Government Agencies
        • IT Managers

    • Comments

      Latest comments from students

      Liked the class?  Then let everyone know!

    CL-425: AWS Security Operations and Architecture

    Course Overview:

    This course begins by introducing you to fundamental cloud computing and AWS security concepts including AWS access control and management, governance, logging, and encryption methods. It also covers security-related compliance protocols and risk management strategies, as well as procedures related to auditing your AWS security infrastructure.

    The course continues to teach students how to efficiently use AWS security services to stay secure and compliant in the AWS cloud. The course focuses on the AWS-recommended security best practices that you can implement to enhance the security of your data and systems in the cloud. The course highlights the security features of AWS key services including compute, storage, networking, and database services. This course also refers to the common security control objectives and regulatory compliance standards and examines use cases for running regulated workloads on AWS across different verticals, globally. You will also learn how to leverage AWS services and tools for automation and continuous monitoring—taking your security operations to the next level.

    Attendees to CL-425: AWS Security Operations and Architecture will receive TechNow approved course materials and expert instruction.

    Duration: 5 Days

    Audience:
    • Security engineers
    • Security architects
    • Security analysts
    • Security auditors
    • Individuals who are responsible for governing, auditing, and testing an organization’s IT infrastructure, and ensuring conformity of the infrastructure to security, risk, and compliance guidelines

    DoD 8140: Not Mandated

    Course Prerequisites:

    We recommend that attendees of this course have the following prerequisites:
    This course assumes you have the equivalent experience or have taken the AWS operational courses that are in the TechNow AWS track.
    • CL-415: AWS Security Operations

    The above courses encapsulate prerequisite knowledge:
    • Experience with governance, risk, and compliance regulations and control objectives
    • Working knowledge of IT security practices
    • Working knowledge of IT infrastructure concepts
    • Familiarity with cloud computing concepts

    Course Objectives:

    This course teaches you how to:
    • Identify the security and compliance benefits of using the AWS cloud.
    • Discuss the AWS Shared Responsibility Model.
    • Describe the access control and access management features of AWS.
    • Use AWS services for security logging and monitoring.
    • Describe data encryption methods to secure sensitive data.
    • Describe AWS services used to protect network security.
    • Describe the basic steps to ensure strong governance of your AWS resources.
    • Identify AWS services used to maintain governance of control environments.
    • Use the AWS audit features.
    • Explain how to audit an AWS environment.
    • Explain the AWS compliance and assurance programs.
    • Describe how AWS audits and attestations validate that security controls are implemented and operating effectively.
    • Assimilate and leverage the AWS shared security responsibility model.
    • Mange user identity and access management in the AWS cloud.
    • Use AWS security services such as AWS Identity and Access Management, Amazon Virtual Private Cloud, AWS Config, AWS CloudTrail, AWS Key Management Service, AWS CloudHSM, and AWS Trusted Advisor.
    • Implement better security controls for your resources in the AWS cloud.
    • Manage and audit your AWS resources from a security perspective.
    • Monitor and log access and usage of AWS compute, storage, networking, and database services.
    • Analyze events by capturing, monitoring, processing, and analyzing logs.
    • Identify AWS services and tools to help automate, monitor, and manage security operations on AWS.
    • Perform security incident management in the AWS cloud.
    • Perform security assessments to ensure that common vulnerabilities are patched and security best practices are applied. The assessment outline deals both with AWS specifics and also lays down the workflow of NIST, FedRAMP, and Cloud Security Alliance STAR compliance for a deployed AWS solution.

    Dates/Locations:

    No Events

    Course Outline:

    Day 1
    • Introduction to Cloud Computing and AWS Security
    • Access Control and Management
    • AWS Security: Governance, Logging, and Encryption
    • Compliance and Risk Management

    Day 2
    • Introduction to Cloud Security Course Objectives
    • Security of the AWS Cloud: Entry Points, Web Application, Communications, and Incident Response.
    • Cloud Aware Governance and Compliance and related control frameworks.
    • Identity and Access Management
    Day 3
    • Securing AWS Infrastructure Services
    • Securing AWS Container Services
    • Securing AWS Abstracted Services
    • Using AWS Security Services
    Day 4
    • Data Protection in the AWS Cloud
    • Managing security in a hybrid environment
    • Deep dive into AWS monitoring and log analysis
    • Protecting against outside threats to AWS VPC
    Day 5
    • How to carry out a Pentest on an AWS solution
    • Security Incident Management and Automating security and incident response
    • Threat detection and monitoring sensitive data
    • Lets Do it! Building Compliant Workloads on AWS—Case Study

     

    TN-919: Penetration Tester Course

    Course Overview:

    This course engages students by providing in-depth knowledge of the most prominent and powerful attack vectors and an environment to perform these attacks in numerous hands-on scenarios. This course goes far beyond simple scanning for low-hanging fruit, and shows penetration testers how to model the abilities of an advanced attacker to find significant flaws in a target environment and demonstrate the business risk associated with these flaws.

    Attendees to TN-919:Penetration Tester course will receive TechNow approved course materials and expert instruction.

    Date/Locations:

    No Events

    Course Duration: 5 days

    Course Objectives:

    • Advanced Hash Manipulation
    • Command Shell vs. Terminal Access
    • Enumerating Users
    • Exploitation Fundamentals
    • Injection Attacks
    • Legal Issues
    • Metasploit
    • Moving Files with Exploits
    • Obtaining and Passing Password Representations
    • Overview of Passwords
    • Penetration Testing Foundations
    • Penetration Testing Process
    • Penetration Testing via the Command Line
    • Profiling the Target
    • Reconnaissance
    • Scanning for Targets
    • Using a Proxy to Attack a Web Application
    • Vulnerability Scanning
    • Wireless Crypto and Client Attacks
    • Wireless Fundamentals

    Course Prerequisites:

    • GSEC or equivalent experience
    • UNIX, Windows, networking, and security experience
    • This is a hands-on skill course requiring comfort with command line interaction and network communications

    Comments

    Latest comments from students

    User: kdwagoner

    Instructor comments: Very knowledgeable. Kept class focused and on task

    Facilities comments: Good

    Liked the class?  Then let everyone know!

    TN-813: Certified in Governance, Risk and Compliance (CGRC)

     

    Course Overview:

    TN-813: Certified in Governance, Risk, and Compliance (CGRC) course is for the (ISC)²® Certified in Governance, Risk, and Compliance (CGRC) credential previously known as Certified Authorization Professional (CAP). This course walks the student through the Risk Management Framework following practices the NIST pubs. CGRC is an objective measure of the knowledge, skills and abilities required for personnel involved in the process of certifying and accrediting security of information systems. Specifically, this credential applies to those responsible for formalizing processes used to assess risk and establish security requirements. Their decisions will ensure that information systems possess security commensurate with the level of exposure to potential risk, as well as damage to assets or individuals.The CGRC credential is appropriate for civilian, state and local governments in the U.S., as well as commercial markets. CGRC certification applies to job functions such as authorization officials, system owners, information owners, information system security officers, and certifiers.  CGRC is crucial to the Management staff.

    This course is the “why” of the entire security field. It provides a logical way of allocating resources where there is greatest risk and why we make the decisions we make in the field of security. It is TechNow’s view that of all the security courses we have seen, this course genuinely puts the “big picture” of security in front of the students. Students actually come to an understanding of truly what is critical to security of an enterprise versus a bunch of nuts and bolts of security.

    TechNow’s CGRC course covers all of the (ISC)²® CGRC 7 Knowledge domains:

    • Security and Privacy Governance, Risk Management, and Compliance Program
    • Scope of the System
    • Selection and Approval of Framework, Security, and Privacy Controls
    • Implementation of Security and Privacy Controls
    • Assessment/ Audit of Security and Privacy Controls
    • System Compliance
    • Compliance Maintenance

    RMF Related Steps

    • Prepare – Process Initiation
    • Categorize Information Systems
    • Establish the Security Control Baseline
    • Apply Security Controls
    • Assess Security Controls
    • Authorize Information System
    • Monitor Security Controls

    TechNow’s CGRC Instructors have extensive knowledge and experience in the field, and have been working with organizations to build assessor teams for over 20 years.

    Attendees to TN-813: Certified in Governance, Risk, and Compliance (CGRC) will receive TechNow authorized training materials, including access to the documentation of the CGRC Exam domains, and expert instruction.

    Dates/Locations:

    Date/Time Event
    09/08/2025 - 09/11/2025
    08:00 -16:00     		TN-813: Certified in Governance, Risk and Compliance (CGRC)
    TechNow, Inc, San Antonio TX

    Duration: 3 Days

    Course Objectives:

    • Initiate the Preparation Phase
    • Perform Execution Phase
    • Perform Maintenance Phase
    • Understand the Purpose of Security Authorization

    Prerequisites:

    • IT Security
    • Information Assurance
    • Information Risk Management certification and systems administration
    • 1-2 years of general experience technical experience
    • 2 years of general systems experience
    • 1-2 years of Database/Systems Development/Network Experience
    • Information Security Policy Experience

    Comments

    Latest comments from students

    Liked the class?  Then let everyone know!