Showing posts with label [training]. Show all posts
Showing posts with label [training]. Show all posts

Oct 14, 2022

Cloud Security and DevSecOps Automation

Completed my training on SEC540 today. 

SEC540 provides me with a methodology to secure modern Cloud and DevOps environments. By embracing the DevOps culture,I'm able to walk away to build security controls witin the DevSecOps security program.

It is important to understand the DevOps toolchain and how to introduce security controls in their automated pipelines responsible for delivering changes to cloud-based systems. Without effective pipeline security controls, security teams lose visibility into the changes released into production environments.

Sep 30, 2021

AZ-500T00-A - Microsoft Azure Security Technologies (D4)

Module 4 : Manage Security Operations

  1. Azure Monitor
  2. Azure Security Center
  3. Azure Sentinel
  4. Hands-on Labs
    • Lab 13 : Azure Monitor
    • Lab 14 : Azure Security Center
    • Lab 15 : Azure Sentinel

Sep 29, 2021

AZ-500T00-A - Microsoft Azure Security Technologies (D3)

Module 3 : Secure Data and Application

  1. Azure Key Vault
  2. Application Security
  3. Storage Security
  4. Database Security
  5. Hands-on Labs
    • Lab 10 : Key Vault (Implementing Secure Data by setting up Always Encrypted)
    • Lab 11 : Securing Azure SQL Database
    • Lab 12 : Service Endpoints and Securing Storage

Sep 28, 2021

AZ-500T00-A - Microsoft Azure Security Technologies (D2)

Module 2 : Implement Platform Protection

  1. Perimeter Security
  2. Network Security
  3. Host Security
  4. Container Security
  5. Hands-on Labs
    • Lab 07 : Network Security Groups and Application Security Groups
    • Lab 08 : Azure Firewall
    • Lab 09 : Configuring and Securing ACR and AKS

Sep 27, 2021

AZ-500T00-A - Microsoft Azure Security Technologies (D1)

Module 1 : Manage Identity

  1. Azure Active Directory
  2. Hybrid Identity
  3. Azure AD Identity Protection
  4. Azure AD Privileged Identity Management
  5. Enterprise Governance 
  6. Hands-on Labs
    • Lab 01 : Role-based Access Control
    • Lab 02 : Azure Policy
    • Lab 03 : Resource Manager Locks
    • Lab 04 : MFA, Conditional Access and AAD Identity Protection
    • Lab 05 : Azure AD Privileged Identity Management
    • Lab 06 : Implement Directory Synchronization

Mar 2, 2021

Prisma Cloud Monitoring and Securing

Today, just completed the training on Prisma Cloud Monitoring and Securing (RETIRED), and score at 95% (23/24). 


Oct 9, 2020

Automating Information Security with Python

Just completed my SEC573 training (since Aug 2020), and passed the GIAC Python Coder (GPYC) certification.

Syllabus:

  1. SEC573.1: Essentials Workshop with pyWars
  2. SEC573.2: Essentials Workshop with MORE pyWars
  3. SEC573.3: Defensive Python
  4. SEC573.4: Forensics Python
  5. SEC573.5: Offensive Python

Link: Automating Information Security with Python | SANS SEC573

Oct 30, 2019

Containers, Kubernetes, and Red Hat OpenShift Administration I

Today, just completed the training on [DO285] "Containers, Kubernetes, and Red Hat OpenShift Administration I" (Oct 21~25).

The training helps me to build the skills on building local containers, establishing the health of a new OpenShift cluster, and managing access to cluster. One major focus is to troubleshoot the common problems beside configuring the Red Hat OpenShift Container Platform cluster.

The outline for the course:

  • Introduction to container technology
  • Create containerized services
  • Manage containers
  • Manage container images lifecycle
  • Create custom container images
  • Deploy containerized applications on OpenShift
  • Deploy multicontainer applications
  • Explore Red Hat OpenShift Container Platform
  • Verify the health of a cluster
  • Configure authentication and authorization
  • Configuring application security
  • Configure OpenShift networking for applications
  • Control pod scheduling
  • Scale an OpenShift cluster
  • Describe cluster updates
  • Manage a cluster with the web console
  • Execute a comprehensive review

May 20, 2019

Advanced Web App Penetration Testing, Ethical Hacking, and Exploitation Techniques

Completed my training on SEC642 today.

This onDemand training begin by exploring some advanced techniques and attacks to which all modern applications' vulnerabilities, such as new web frameworks, encryption and cryptography, alternate web front ends on mobile apps, HTTP/2 and websocket.

Syllabus:

  1. SEC642.1: Advanced Attacks
  2. SEC642.2: Web Cryptography
  3. SEC642.3: Alternative Interfaces and XML
  4. SEC642.4: Modern Web Frameworks, Part 1
  5. SEC642.5: Modern Web Frameworks, Part II 
Link: Advanced Web Application Penetration Testing and Exploitation | SANS SEC642

Sep 1, 2018

Mastering Burp Suite Pro

Just completed the training Aug (27~29) on Mastering Burp Suite Pro: 100% Hands-on. 

This is one of the HITB Technical training series by Nicholas Gregoire, one of the best Burp Suite Pro subject matter expert (SME) in the world.

Day 1

  • Introduction to Burp: GUI, tools, audit workflow, inline help, …
  • Proxy module: scope, filters, sorting, …
  • Repeater module: exploitation of the D-Link DIR-100 backdoor, efficiency tips, …
  • Intruder module: covering every attack type and most payload types

Day 2

  • Advanced Proxy module: live modifications, interception and manual analysis, …
  • Sequencer module: token analysis
  • Advanced Intruder module: reusing configuration options, non default columns, …
  • Auth module: horizontal and vertical privileges escalation

Day 3

  • Macros and sessions module: transparent management of anti-CSRF tokens and short sessions
  •  Extensions module: catalog of public extensions, developing your own, REST API, …
  • Recently added tools: Collaborator, ClickBandit, Infiltrator



Dec 23, 2017

IoT/Embedded Device Hacking Training

Just finished attending the IoT/Embedded Device Hacking 5-day Training (Dec 18~22).

This training course is designed to help people working in the information security industry to learn basic knowledge needed to hack and reverse-engineer embedded system. The training covers embedded device hacking with UART/JTAG, dumping/parsing/extracting/analyzing firmware image, modifying firmware, detecting/analyzing embedded malware, discovering/exploiting vulnerabilities in firmware, and wireless hacking using SDR.

Course Outline:

  • Module 1: Hunting for UART ports
  • Module 2: Hacking Embedded Device with JTAG
  • Module 3: Firmware Acquisition
  • Module 4:  Basics of Reverse Engineering ARM/MIPS Code
  • Module 5:  Embedded Device Vulnerability Assessment
  • Module 6:  Embedded Malware Detection and Analysis
  • Module 7:  Modifying Firmware for Fun and Profit
  • Module 8:  Hacking Wireless Network

Link: IoT / Embedded Device Hacking


Dec 10, 2010

Reverse-Engineering Malware: Malware Analysis Tools and Techniques

Just completed the GIAC Reverse Engineering Malware (GREM) exam today. 

This popular course explores malware analysis tools and techniques in depth. FOR610 training has helped forensic investigators, incident responders, security engineers, and IT administrators acquire the practical skills to examine malicious programs that target and infect Windows systems.

I took this self-study course in Aug 6, 2010. The course begins by establishing the foundation for analyzing malware in a way that dramatically expands upon the findings of automated analysis tools. I've learn how to set up a flexible laboratory to examine the inner workings of malicious software, and how to use the lab to uncover characteristics of real-world malware samples, and then edirect and intercept network traffic in the lab to explore the specimen's capabilities by interacting with the malicious program.

Syllabus:

  • FOR610.1: Malware Analysis Fundamentals
  • FOR610.2: Reversing Malicious Code
  • FOR610.3: Malicious Web and Document Files
  • FOR610.4: In-Depth Malware Analysis
  • FOR610.5: Examining Self-Defending Malware
  • FOR610.6: Malware Analysis Tournament 

Link:  Reverse Engineering Malware Training | Malware Tools & Techniques | SANS FOR610

Aug 18, 2007

Intrusion Detection In-Depth

SEC503: Intrusion Detection In-Depth delivers the technical knowledge, insight, and hands-on training you need to defend your network with confidence. You will learn about the underlying theory of TCP/IP and the most used application protocols, such as HTTP, so that you can intelligently examine network traffic for signs of an intrusion.

The hands-on training (Aug. 05 - Aug. 10 2007) in SEC503 is intended to be both approachable and challenging for beginners and seasoned veterans. There are two different approaches for each exercise. The first contains guidance and hints for those with less experience, and the second contains no guidance and is directed toward those with more experience. In addition, an optional extra credit question is available for each exercise for advanced students who want a particularly challenging brain teaser. A sampling of hands-on exercises includes the following:

  • Day 1: Hands-On: Introduction to Wireshark
  • Day 2: Hands-On: Writing tcpdump filters
  • Day 3: Hands-On: IDS/IPS evasion theory
  • Day 4: Hands-On: Snort rules
  • Day 5: Hands-On: Analysis of three separate incident scenarios
  • Day 6: Hands-On: The entire day is spent engaged in the NetWars: IDS Version challenge

Link: Network Intrusion Detection | SANS SEC503 | Intrusion Detection Training