TN-905: Cyber Threat Intelligence Analysis

Course Overview:

TechNow has worked worldwide enterprise infrastructures for over 30 years and has developed demos and labs to exemplify the techniques required to demonstrate technologies that effectively support CTI. This course integrates well with our courses TN-575: Open Source Network Security Monitoring and TN-865: Wireshark Network Traffic and Security Analysis .

TechNow develops Cyber Ranges and makes them available for conferences in support of annual meetings for Cyber Threat Response Teams. Developing scenarios and reacting to them appropriately is a big part of the value in understanding the contexts required to comprehend valuable CTI. As with many advanced TechNow security courses, there is a large hands-on ratio. This course helps Cyber Protection Teams (CPT), Defensive Cyber Operations (DCO), and Mission Defense Teams (MDT) to collect, analyze and apply targeted cyber intelligence to defensive operations in order to proactively act on and tune response to attacks by cyber adversaries. CPT, DCO, and MDT can take preemptive action by utilizing CTI, understanding CTI tools, techniques and procedures (TTPs) needed to generate and consume timely and relevant intelligence to improve resilience and prevention.

This course focuses on the collection, classification, and exploitation of knowledge about adversaries and their TTPs. . MDT puts us close the mission and helps define the internal context to be analyzed against the CTI. TechNow pushes the student to truly understand how to think about and use CTI to make a difference.

Attendees to TN-905: Cyber Threat Intelligence Analysis will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Course Duration: 5 days

Course Objectives:

Learn to comprehend and develop complex scenarios
Identify and create intelligence requirements through practices such as threat modeling
Utilize threat modeling to drive intelligence handling and practices
Breakdown tactical, operational, and strategic-level threat intelligence
Generate threat intelligence to detect, respond to, and defeat focused and targeted threats
How to collect adversary information creating better value CTI
How to filter and qualify external sources, mitigating low integrity intelligence
Create Indicators of Compromise (IOCs) in formats such as YARA, OpenIOC, and STIX
Move security maturity past IOCs into understanding and countering the behavioral tradecraft of threats
Breaking down threats mapped against their tradecraft to tweak IOCs
Establish structured analytical techniques to be successful in any security role
Learn and apply structured principles in support of CTI and how to communicate that to any security role.

Course Prerequisites:

Security+, or equivalent experience

Comments

Latest comments from students

Liked the class? Then let everyone know!

Test2

http://technow.www162-254-253-232.a2hosted.com/palo-alto-firewall-essentials-fasttrack-training-class-course-pa-215/

Course Overview:

PA-215: Palo Alto Networks Firewall Essentials FastTrack Training Class is a five-day course that teaches students to configure and manage the entire line of Palo Alto Networks next-generation firewalls. Through hands-on training, students learn high end skills of how to integrate Palo Alto next-generation firewalls into their network infrastructure.This is not a virtualized theoretical course. This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.

Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk. Real hardware per student for real experience and real skill development. TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents.

This course sets up the foundation for the two day course PA-222: Palo Alto Networks Panorama Essentials.

The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies. Additionally, the instructor has taught several security appliance products and carries several SANS, Cisco, Unix, and Windows certifications.

Attendees to the PA-215: Palo Alto Firewall Essentials FastTrack Training Course will receive TechNow approved course materials and expert instruction.

Dates/Locations:

No Events

Duration 5 days

Course Objectives:

Students attending this foundational-level training course will gain an in-depth knowledge of how to configure and manage their Palo Alto Networks firewall, including hands-on experience in configuring the security, networking, threat prevention, logging, and reporting features of the Palo Alto Networks Operating System (PAN-OS).

Day 1 Module 0 – Introduction & Overview Module 1 – Administration & Management Configuration Management PAN-OS & Software Updates Service Route Configuration Log Forwarding GUI, CLI, and API Module 2 – Interface Configuration L2 & L3 Vwire Tap Interface Management in Security Zones VLANs QoS	Day 2 Module 3 – Layer 3 Configuration L3 Configuration and DHCP NAT DNS Proxy Policy Based Forwarding in Introduction to IPv6 Module 4 – App-ID App-ID Process Policy Administration Module 5 – Content-ID Antivirus Anti-spyware Vulnerability URL Filtering File Blocking and Wildfire Data Filtering DoS Protection Botnet
Day 3 Module 6 – VM Firewall Downlaod VM Template Configure ESXi Configure VM Module 7 – Decryption SSL Inbound and Outbound Module 8 – Custom Signatures Defining New Application Signatures Application Override Custom Threat ID	Day 4 Module 9 – User-ID User-ID Agent Terminal Server Agent XML API Captive Portal Module 10 – VPN and GlobalProtect Psec Tunnels GlobalProtect Agent Portal Gateway HIP
Day 5 Module 11 – High Availability Active/Passive Active/Active Module 12 – Panorama Device Groups & Objects Shared Policy Configuration Management Reporting

Prerequisites:

Security+, Network+, CCNA and networking experience is recommended.

This course is in no way associated with Palo Alto Networks, Inc.

Comments

Latest comments from students

Like the class? Then let everyone know!

PA-215: Palo Alto Networks Firewall Essentials FastTrack

Course Overview: PA-215: Palo Alto Networks Firewall Essentials FastTrack Training Class is a five-day course that teaches students to configure and manage the entire line of Palo Alto Networks next-generation firewalls. This course combines PA-213 and PA-212 and adds a half day introduction to Panorama and Troubleshooting. Through hands-on training, students learn high end skills of how to integrate Palo Alto next-generation firewalls into their network infrastructure. This is not a virtualized theoretical course. This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.

This course sets up the foundation for the two day course PA-232: Palo Alto Networks Panorama Manage Multiple Firewalls. The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies. Additionally, the instructor has taught several security appliance products and carries several SANS, Cisco, Unix, and Windows certifications. Attendees to the PA-215: Palo Alto Firewall Essentials FastTrack Training Course will receive TechNow approved course materials and expert instruction.

Dates/Locations: No Events

Duration 5 days

Course Objectives: Students attending this foundational-level training course will gain an in-depth knowledge of how to configure and manage their Palo Alto Networks firewall, including hands-on experience in configuring the security, networking, threat prevention, logging, and reporting features of the Palo Alto Networks Operating System (PAN-OS). Additionally Panorama and Troubleshooting are addressed.

Day 1 Module 0 – Introduction & Overview Module 1 – Administration & Management Configuration Management PAN-OS & Software Updates Service Route Configuration Log Forwarding GUI, CLI, and API Module 2 – Interface Configuration L2 & L3 Vwire Tap Interface Management in Security Zones VLANs QoS	Day 2 Module 3 – Layer 3 Configuration L3 Configuration and DHCP NAT DNS Proxy Policy Based Forwarding in Introduction to IPv6 Module 4 – App-ID App-ID Process Policy Administration Module 5 – Content-ID Antivirus Anti-spyware Vulnerability URL Filtering File Blocking and Wildfire Data Filtering DoS Protection Botnet
Day 3 Module 6 – VM Firewall Downlaod VM Template Configure ESXi Configure VM Module 7 – Decryption SSL Inbound and Outbound Module 8 – Custom Signatures Defining New Application Signatures Application Override Custom Threat ID	Day 4 Module 9 – User-ID User-ID Agent Terminal Server Agent XML API Captive Portal Module 10 – VPN and GlobalProtect Psec Tunnels GlobalProtect Agent Portal Gateway HIP
Day 5 Module 11 – High Availability Active/Passive Active/Active Module 12 – Panorama Device Groups & Objects Shared Policy Configuration Management Reporting

Prerequisites:

Security+, Network+, CCNA and networking experience is recommended.

This course is in no way associated with Palo Alto Networks, Inc.

Comments

Latest comments from students

User: rod3535@gmail.com

Instructor comments: Instructor was great, he explained everything and made sure we understood the process's/product. He also took time out of his own schedule to help set up a VM environment on our personal pc's.

Facilities comments: Facility was great, enjoyed feeding the deers!

Like the class? Then let everyone know!

PA-232: Palo Alto Networks Panorama Manage Multiple Firewalls (EDU-221)

Course Overview: PA-232: Palo Alto Networks Panorama Manage Multiple Firewalls (EDU-221) Training Class is a two-day course. Students attending this course will gain an in-depth knowledge of how to configure and manage their Palo Alto Networks Panorama Management Server. Upon completion of this course, administrators will understand the Panorama server’s role in managing and securing their overall network. Network professionals will learn to use Panorama’s aggregated reporting to provide them with a holistic view of a network of Palo Alto Networks next-generation firewalls. This is not a virtualized theoretical course. This is hands-on, real world instruction, directly relevant to the DoD and Commercial implementations of Palo Alto Networks next-generation firewalls.

Each student is issued a physical Palo Alto firewall and a Cisco layer 3 switch at their desk. Real hardware per student for real experience and real skill development.

TechNow provides a very comprehensive client infrastructure that includes Windows, Linux, and multiple packet sniffer agents. The instructor for this course has been a lead in Unix kernel development to implement firewall and intrusion detection technologies. Additionally, the instructor has taught several security appliance products and carries several SANS, ISC2, ISACA, Cisco, Unix, and Windows certifications.

Attendees to the PA-232: Palo Alto Networks Panorama Manage Multiple Firewalls (EDU-221) Training Course will receive TechNow approved course materials and expert instruction.

Dates/Locations: No Events

Duration: 2 days

Course Objectives: Students attending this foundational-level training course will gain an in-depth knowledge of how to configure and manage their Palo Alto Networks Panorama Management Server.

Day 1

Module 0 – Introduction & Overview
Mod 1: Overview
- Panorama Solution
- Deployment Design
Mod 2: Initial Configuration
- Interface Configuration
- Setup Configurations
- Device Deployment
- Configuration Management
Mod 3: Templates
- Templates Overview
- Common Organization
- Strategies
- Configuring Templates
Mod 4: Device Groups
- Device Groups
- Objects
- Policies
- Device Group Commit

Day 2

Mod 5: Administration
- Admin Roles and Access
- Control
- Commit Procedure
Mod 6: Logging and
- Reporting
- Logging
- Application Command
- Center
- App-Scope
- Correlation Objects
- Reports
Mod 7: Log Collectors
- Plan a Log Collection
- Deployment
- Distributed Data Collection
- Log Deployment
- Configure Dedicated Log
- Collector
- Managed Collector Groups
Mod 8: Business Continuity
- Panorama High Availability
- Collector Group
- Redundancy
- Export Configuration
- Disk Installation

Prerequisites:

Security+, Network+, CCNA and networking experience is recommended.

This course is in no way associated with Palo Alto Networks, Inc.

Comments

Latest comments from students

Like the class? Then let everyone know!

TN-919: Penetration Tester Course

Course Overview:

This course engages students by providing in-depth knowledge of the most prominent and powerful attack vectors and an environment to perform these attacks in numerous hands-on scenarios. This course goes far beyond simple scanning for low-hanging fruit, and shows penetration testers how to model the abilities of an advanced attacker to find significant flaws in a target environment and demonstrate the business risk associated with these flaws.

Attendees to TN-919:Penetration Tester course will receive TechNow approved course materials and expert instruction.

Date/Locations:

No Events

Course Duration: 5 days

Course Objectives:

Advanced Hash Manipulation
Command Shell vs. Terminal Access
Enumerating Users
Exploitation Fundamentals
Injection Attacks
Legal Issues
Metasploit
Moving Files with Exploits
Obtaining and Passing Password Representations
Overview of Passwords
Penetration Testing Foundations
Penetration Testing Process
Penetration Testing via the Command Line
Profiling the Target
Reconnaissance
Scanning for Targets
Using a Proxy to Attack a Web Application
Vulnerability Scanning
Wireless Crypto and Client Attacks
Wireless Fundamentals

Course Prerequisites:

GSEC or equivalent experience
UNIX, Windows, networking, and security experience
This is a hands-on skill course requiring comfort with command line interaction and network communications