Increase your credibility, job security, and career opportunities by reaching your goal and getting certified! TechNow offers many CompTIA bootcamp style courses in which we administer an exam on the last day of class. We have a proven testing program that will get you the results you want!
Course Overview: PA-212: Palo Alto Networks Firewall Configure Extended Features (EDU-205) Training Class is a two-day course that teaches students to configure and manage the entire line of Palo Alto Networks next-generation firewalls. Students also will be instructed on the basics of implementing and managing GlobalProtect™ and active/ active high availability. Students will gain an in-depth knowledge of how to optimize their visibility and control of applications, users, and content. This course prepares the student for Palo Alto Networks Certified Network Security Engineer(PCNSE). Through hands-on training, students learn high end skills of how to integrate Palo Alto next-generation firewalls into their network infrastructure. This is not a virtualized theoretical course. This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.
Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk. Real hardware per student for real experience and real skill development. TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents.
This course sets up the foundation for the three day course PA-243: Palo Alto Networks Firewall Debug and Troubleshoot (EDU-311). The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies. Additionally, the instructor has taught several security appliance products and carries several SANS, ISC2, ISACA, Cisco, Unix, and Windows certifications. Attendees to the PA-212: Palo Alto Networks Firewall Configure Extended Features (EDU-205) Training Course will receive TechNow approved course materials and expert instruction.
Dates/Locations:
No Events
Duration: 2 days
Course Objectives: Students attending this foundational-level training course will gain an in-depth knowledge of how to configure and manage their Palo Alto Networks firewall. Students also will be instructed on the basics of implementing and managing GlobalProtect™ and active/ active high availability. Students will gain an in-depth knowledge of how to optimize their visibility and control of applications, users, and content.
TN-575: Open Source Network Security Monitoring teaches students how to deploy, build, and run an NSM operation using open source software and vendor-neutral tools. No network is bullet proof and when attackers access your network, this course will show you how to build a security net to detect, contain, and control the attacker. Sensitive data can be monitored and deep packet and deep attachment analysis can be achieved. As organizations stand up a Security Operations Center (SOC) the enterprise NSM is the key ingredient to that SOC. This course not only teaches how to implement an NSM technologically, but how to effectively monitor an enterprise operationally. You will learn how to architect an NSM solution: where to deploy your NSM platforms and how to size them, stand-alone or distributed, and integration into packet analysis, interpret evidence, and integrate threat intelligence from external sources to identify sophisticated attackers. A properly implemented NSM is integral to incident response and provides the responders timely information to react to the incident. TN-575: Open Source Network Security Monitoring is a lab intensive environment with a cyber range that gives each student in-depth knowledge and practical experience monitoring live systems to include: Cisco, Windows, Linux, IoT, and Firewalls.
Attendees to TN-575: Open Source Network Security Monitoring class will receive TechNow approved course materials and expert instruction.
This Course is taught utilizing Security Onion or RockNSM as specified by the customer.
Dates/Locations:
No Events
Duration: 5 Days
Course Objective:
The focus of this course is to present a suite of Open Source security products integrated into a highly functional and scalable Network Security Monitoring solution.
Prerequisites:
Students should have a basic understanding of networks, TCP/IP and standard protocols such as DNS, HTTP, etc. Some Linux knowledge/experience is recommended, but not required
Course Outline:
Network Security Monitoring (NSM) Methodology
High Bandwidth Packet Capture Challenges
Installation of Security Onion
Use Cases (analysis, lab, stand-alone, distributed)
Resource Requirements
Configuration
Setup Phase I – Network Configuration
Setup Phase 2 – Service Configuration
Evaluation Mode vs. Configuration Mode
Verifying Services
Security Onion Architecture
Configuration Files and Folders
Network Interfaces
Docker Environment
Security Onion Containers
Overview of Security Onion Analyst Tools
Kibana
CapME
CyberChef
Squert
Sguil
NetworkMiner
Quick Review of Wireshark and Packet Analysis
Display and Capture Filters
Analyze and Statistics Menu Options
Analysis for Signatures
Analyzing Alerts
Replaying Traffic
3 Primary Interfaces:
Squert
Sguil
Kibana
Pivoting Between Interfaces
Pivoting to Full Packet Capture
Snort and Surricata
Rule Syntax and Construction
Implementing Custom Rules
Implementing Whitelists and Blacklists
Hunting
Using Kibana to Slice and Dice Logs
Hunting Workflow with Kibana
Bro
Introduction and Overview
Architecture, Commands
Understanding and Examining Bro Logs
Using AWK, sort, uniq, and bro-cut
Working with traces/PCAPs
Bro Scripts Overview
Loading and Using Scripts
Bro Frameworks Overview
Bro File Analysis Framework FAF
Using Bro scripts to carve out more than files
RockNSM ( * If Applicable)
Kafka
Installation and Configuration
Kafka Messaging
Brokers
Integration with Bro and FSF
File Scanning Framework FSF
Custom YARA Signatures
JSON Trees
Sub-Object Recursion
Bro and Suricata Integration
Elastic Stack
Adding new data sources in Logstash
Enriching data with Logstash
Automating with Elastalert
Building new Kibana dashboards
Production Deployment
Advanced Setup
Master vs Sensor
Node Types – Master, Forward, Heavy, Storage
Command Line Setup with sosetup.conf
Architectural Recommendations
Sensor Placement
Hardening
Administration
Maintenance
Tuning
Using PulledPork to Disable Rules
BPF’s to Filter Traffic
Spinning up Additional Snort / Suricata / Bro Workers to Handle Higher Traffic Loads
CT-395: CompTIA CySA+ Cybersecurity Analyst is for IT professionals looking to gain IT security analyst skills, and for those following the recommended skills pathway to achieve cybersecurity mastery. It provides a bridge between CompTIA Security+ (CT-325) and CompTIA SecurityX (CT-425), thus completing a certification path within the CompTIA family of certifications. As attackers have learned to evade traditional signature-based solutions, an analytics-based approach has become extremely important. CySA+ applies behavioral analytics to the IT security market to improve the overall state of security. The CompTIA Cybersecurity Analyst (CySA+) certification verifies that successful candidates have the knowledge and skills required to configure and use threat detection tools, perform data analysis and interpret the results to identify vulnerabilities, threats and risks to an organization, with the end goal of securing and protecting applications and systems within an organization. Let us help you bridge this gap, and leave you prepared for the certification exam (CS0-003).
TechNow is a CompTIA partner uses official CompTIA CySA+ curriculum.
While there is no required prerequisite, the CompTIA CySA+ certification is intended to follow CT-325: Security+ or equivalent experience. It is recommended for CompTIA CySA+ candidates to have the following:
3-4 years of hands-on information security or related experience
Certified Offensive AI Security Professional (COASP) validates the competencies required for practitioners who need to demonstrate offensive AI security skills, emulating adversaries, validating defenses, and leading red-team/blue-team exercises to keep AI resilient, reliable, and auditable
The Certified Offensive AI Security Professional (COASP) equips you to identify and neutralize AI-specific threats before attackers do. And Bridges security, engineering, and data science so controls exist across the full AI life cycle.
Participants will gain hands-on experience to perform end-to-end adversarial testing and deliver defensive validation evidence including the ability to simulate adversarial AI kill chains, Harden AI architectures by secure system prompts, context windows, tool integrations, RAG pipelines, and agent memory, Conducting AI security assessments aligned to MITRE ATLAS, OWASP LLM/ML Top 10, NIST AI RMF, and DoD Test & Evaluation practices , This course covers how to build SOC-ready capabilities for AI-focused detection logic, incident playbooks, and forensic procedures , & how to execute prompt injection, adversarial prompting , Assess AI supply-chain risk , Implement defensive engineering controls and Produce assurance and compliance artifacts.
By the end of the course, learners will be well-prepared to take the Certified Offensive AI Security Professional (COASP) exam and demonstrate the ability to exploit vulnerabilities in LLMs and agents, and build defense that survive real world attacks, learners will master offensive techniques that break AI before the attackers do.
Course Outline:
01. Offensive AI and AI System Hacking Methodology
02. AI Reconnaissance and Attack Surface Mapping
03. AI Vulnerability Scanning and Fuzzing
04. Prompt Injection and LLM Application Attacks
05. Adversarial Machine Learning and Model Privacy Attacks
06. Data and Training Pipeline Attacks
07. Agentic AI and Model-to-Model Attacks
08. AI Infrastructure and Supply Chain Attacks
09. AI Security Testing, Evaluation, and Hardening
