TN-909: Windows Forensic Analysis

Course Overview:

Windows Forensic Analysis is a hands-on course that covers digital forensics of the Microsoft Windows operating system. The collection and analysis of data tracking user based activity that can be used for internal purposes or legal litigation. TechNow has the student analyze many data images for various Windows operating systems, as current as Windows 8.1, Windows 10 in an environment that uses many Cloud technologies such as Office365, Skydrive, Sharepoint, Exchange Online, and Windows Phone.

This is not death by power point. The course is aligned with digital forensic investigators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics of Windows Forensic Analysis.

Attendees to TN-909: Windows Forensic Analysis will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

Windows Operating System Components
Core Forensic Principles
Live Response and Triage-Based Acquisition Techniques
Windows Image Mounting and Examination
Memory, Pagefile, Filesystems
Data and Metadata
Profiling systems and users
Tracking USB and BYOD
Log and Registry Analysis
User Communications
Email Forensics
Browser Forensics
Reporting and Presentation

Course Prerequisites:

Windows and Security Experience

Comments

Latest comments from students

Liked the class? Then let everyone know!

N-310: CCNA Extended Bootcamp

Course Overview:

TechNow’s Course ensures that you are ready to test for the CCNA Certification. This intensive ten-day program is a high end, hands-on, bootcamp using physical routers & switches in classroom. Students will learn how to install, operate, configure, and verify basic IPv4 and IPv6 networks. The course covers configuring network components such as switches, routers, and wireless LAN controllers; managing network devices; and identifying basic security threats. The course also gives you a foundation in network programmability, automation, and software-defined networking. Additionally the course stress tests the students on exam practices that insure the student a successful outcome on the 200-301 CCNA exam.

This course is available for group purchasing with a minimum of 4 students. Please call to get scheduling availability.

Attendees to N-310: CCNA Extended Bootcamp will receive TechNow approved course materials and expert instruction.

Date/Locations:

This course is available for group purchasing with a minimum of 4 students. Please call to get scheduling availability. (210) 733-1093

No Events

Duration: 10 days

Course Objectives:

- Identify the components of a computer network and describe their basic characteristics
- Understand the model of host-to-host communication
- Describe the features and functions of the Cisco Internetwork Operating Systems (IOS) software
- Describe LANs and the role of switches within LANs
- Describe Ethernet as the network access layer of TCP/IP and describe the operation of switches
- Install a switch and perform the initial configuration
- Describe the TCP/IP Internet layer, IPv4, its addressing scheme, and subnetting
- Describe the TCP/IP Transport layer and Application layer
- Explore functions of routing
- Implement basic configuration on a Cisco router
- Explain host-to-host communications across switches and routers
- Identify and resolve common switched network issues and common problems associated with IPv4 addressing
- Describe IPv6 main features and addresses, and configure and verify basic IPv6 connectivity
- Describe the operation, benefits, and limitations of static routing
- Describe, implement, and verify Virtual Local Area Networks (VLANs) and trunks
- Describe the application and configuration of inter-VLAN routing
- Explain the basics of dynamic routing protocols and describe components and terms of Open Shortest Path First (OSPF)
- Explain how Spanning Tree Protocol (STP) and Rapid Spanning Tree Protocol (RSTP) work
- Configure link aggregation using EtherChannel
- Describe the purpose of Layer 3 redundancy protocols
- Describe basic WAN and VPN concepts
- Describe the operation of Access Control Lists (ACLs) and their applications in the network
- Configure Internet access using Dynamic Host Configuration Protocol (DHCP) clients and explain and configure Network Address Translation (NAT) on Cisco routers
- Describe basic Quality of Service (QoS) concept
- Describe network and device architectures and introduce virtualization
- Introduce the concept of network programmability and Software-Defined Networking (SDN)
- Configure basic IOS system monitoring tools
- Describe the management of Cisco devices
- Describe the current security threat landscape
- Describe threat defense technologies
- Implement a basic security configuration of the device management plane
- Implement basic steps to harden network devices

Lab Objectives:

- - Get started with Cisco Command-Line Interface (CLI)
  - Observe How a Switch Operates
  - Perform Basic Switch Configuration
  - Implement the Initial Switch Configuration
  - Inspect TCP/IP Applications
  - Configure an Interface on a Cisco Router
  - Configure and Verify Layer 2 Discovery Protocols
  - Implement an Initial Router Configuration
  - Configure Default Gateway
  - Explore Packet Forwarding
  - Troubleshoot switch Media and Port Issues
  - Troubleshoot Port Duplex Issues
  - Configure Basic IPv6 Connectivity
  - Configure and Verify IPv4 Static Routes
  - Configure Iv6 Static Routes
  - Implement IPv4 Static Routing
  - Implement IPv6 Static Routing
  - Configure VLAN and Trunk
  - Troubleshoot VLANs and Trunk
  - Configure a Router on a Stick
  - Implement Multiple VLANs and Basic Routing Between the VLANs
  - Configure and Verify Single-Area OSPF
  - Configure and Verify EtherChannel
  - Improve Redundant Switched Topologies with EtherChannel
  - Configure and Verify IPv4 ACLs
  - Implement Numbered and Named IPv4 ACLs
  - Configure a Provider-Assigned IPv4 Address
  - Configure Static NAT
  - Configure Dynamic NAT and Port Address Translation (PAT)
  - Implement PAT
  - Log into the WLC
  - Monitor the WLC
  - Configure a Dynamic (VLAN) Interface
  - Configure a DHCP Scope
  - Configure a WLAN
  - Define a Remote Access Dial-In User Service (RADIUS) Server
  - Explore Management Options
  - Explore the Cisco DNA Center
  - Configure and Verify NTP
  - Configure System Message Logging
  - Create the Cisco IOS Image Backup
  - Upgrade Cisco IOS Image
  - Configure WLAN Using Wi-Fi Protected Access 2 (WPA2) Pre-Shared Key (PSK) Using the GUI
  - Secure Console and Remote Access
  - Enable and Limit Remote Access Connectivity
  - Secure Device Administrative Access
  - Configure and Verify Port Security
  - Implement Device Hardening

Prerequisites:

- - Familiarity in the following networking topics:
    - TCP/IP
    - IP Configuration
    - Peer-to-Peer Networking
    - Subnetting
    - Building a Routing Table
  - It is not required but highly recommended to have the following certifications:
    - Security +
    - Network +

Comments

Latest comments from students

User: kdinivahi29

Instructor comments: The instructor Mr. Tom Bigger has done a terrific job of substantiating the textbook content with hands on labs. He has been patient and ensure that we understood the material

User: MikeWisn

Instructor comments: Did exceptional job explaining complicated concepts.

Facilities comments: Hotel front desk phone ringing loudly during class was distracting.

Liked the class? Then let everyone know!

TN-999: Reverse Engineering Malware Course

Course Overview:

This course is designed for professionals that are expected to do malware analysis. A skills focus enables the student to better absorb the subject matter and perform successfully on the job. This is not death by power point. The course is aligned with information assurance operators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics Reverse Engineering Malware.

Attendees to TN-999: Reverse Engineering Malware will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

Toolkit and Lab Assembly
Malware Code and Behavioral Analysis Fundamentals
Malicious Static and Dynamic Code Analysis
Collecting/Probing System and Network Activities
Analysis of Malicious Document Files
Analyzing Protected Executables
Analyzing Web-Based Malware
DLL Construction and API Hooking
Common Windows Malware Characteristics in x86 Assembly
Unpacking Protected Malware
In-Depth Analysis of Malicious Browser Scripts, Flash Programs and Office
In-Depth Analysis of Malicious Executables
Windows x86 Assembly Code Concepts for Revers-Engineering Memory Forensics for Rootkit Analysis

Prerequisites:

Strong understanding of core systems and network concepts
Exposure to programming and assembly concepts
Comfortable with command line access

Comments

Latest comments from students

User: marcus.osullivan

Instructor comments: Good stuff. I like the beginning half where there was help from an additional instructor to facilitate fixing computer errors that inevitably popped up.

Facilities comments: The baby deer were neat! I like the resort.

Liked the class? Then let everyone know!

TN-979: Intrusion Analyst Course

Course Overview:

Intrusion Analyst is a hands-on course that covers intrusion detection in-depth. This includes concepts such as the use of Snort, network traffic analysis, and IDS signatures.

A skills focus enables the student to better absorb the subject matter and perform successfully on the job. This is not death by power point. The course is aligned with information assurance operators and executing hands-on labs. Lecture and labs walk the student through the knowledge required to truly understand the mechanics of packet and intrusion analysis.

Attendees to TN-979: Intrusion Analyst will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Duration: 5 days

Course Objectives:

Advanced Snort Concepts
Analyst Toolkit
Domain Name System (DNS)
Examining Packet Crafting
Examining Packet Header Fields
Fragmentation
ICMP Theory
IDS Interoperability
IDS Patterns
IDS/IPS Management & Architecture Issues
Indications, Warnings & Traffic Correlation
IPv6
Microsoft Protocols
Network Traffic Analysis
NIDS Evasion, Instertion & Checksums
Snort Fundamentals & Configuration
Snort GUIs & Sensor Management
Snort Performance, Active Response & Tagging
Snort Rules
Stimulus Response
TCPdump Fundamentals
TCP/IP Fundamentals
Wireshark Fundamentals
Writing TCPdump Filters

Course Prerequisites:

GSEC or equivalent experience
UNIX, Windows, Networking, and Security Experience
This is a hands-on skill course requiring comfort with command line interaction and network communications

Comments

Latest comments from students

User: Tosha

Instructor comments: Dave was an excellent instructor. He is very informative and knowledgeable in the course and the material. I have enjoyed the class and I would take another course with him as the instructor.

Facilities comments: Very nice and clean hotel.

User: buckey26

Instructor comments: Dave was one of the best instructors I have ever had for a tech course. He broke down everything to the point where you can understand it internally.

Liked the class? Then let everyone know!

Security

Twenty years of experience in the area of information assurance ensures that you are benefiting from a very mature and successful security training program. TechNow offers the full suite of security training courses to meet any DoD 8570 requirements.

Security Course Flow

Here is our list of security related courses.