Courses Catalog

This course will teach you the advanced features included in your Maltego Client. After this course, you will be able to create custom Entities, use the advanced options included with the Maltego Standard Transforms, and collaborate with colleagues. Syllabus Introduction The Transform menu Advanced Infrastructure Transforms Data Integration Custom Entities Imports and Exports Maltego Advanced

The Getting Started in Security with BHIS and MITER ATT&CK course from Wild West Hackin Fest is designed for those who want to enter the world of cyber security. This course does not require prerequisites and its purpose is to understand and learn how to defend against attacks that happen on a daily basis by hackers. In this course, you will learn about 11 of the most important attacks that every organization must protect itself against. The instructor of this course is John Strand. Getting Started in Security With BHIS and MITRE Att&CK

The Intrusion Operations course from FortyNorth Institute is the advanced training of Red Team operations. FortyNorth Institute has focused all its attention on the development of Red Team courses, and the courses of this institute have a high level of technical content. In this course, you will start your work exactly like a hacker who is targeting an organization, and this process will continue until you gain access and enter the organization’s network. In this course, you will write malicious and customized viruses to bypass antivirus and other defense technologies of the organization’s network (Evasion), use of whitelists to bypass restrictions, advanced penetration testing of the target organization for final access. Syllabus Introduction Command and Control Options Malleable Profiles Command and Control Configuration Aggressor Scripting OSINT Active Recon Phishing Application Whitelisting Antivirus Evasion EDR Evasion Overview Persistence Initial Access, Recon, and Lateral Movement Attacking the Cloud Finalizing the Assessment FortyNorth – Intrusion Operations

This intermediate -level , 3-day-long intensive course dives deep into Modern Initial Access and Evasion tactics, which were effective on numerous engagements delivered in tightly monitored environments. The author will share his insights regarding strategies that made his malware accomplish engagement objectives, side by side with aggressively configured AVs & EDRs. Designing modern Red Team malware carriers smuggled in scripts, executables, and HTML websites are only some areas the course focuses on. We will explore numerous technical concepts and file formats. Craft advanced malicious Office documents, shellcode loaders, smuggling payloads, and other infected scripts that will help us reach target systems effectively. By applying modern AV & EDR evasion techniques into custom-crafted Red Team weaponry, capable teams will be equipped with the knowledge to succeed during adversary simulations even in the rapidly changing threat surface landscape. This course focuses on that – telling effective techniques apart from ones that no longer work.

The Initial Access Operations course from FortyNorth Institute is an advanced training for hacking and gaining access in the style of the Red Team. FortyNorth Institute has focused all its attention on the development of Red Team courses, and the courses of this institute have a high level of technical content. One of the most important stages and goals of the red team is initial access to the environment of the target organization. In this course, you will learn how to use a wide range of attacks such as phishing attacks, creating customized and personal viruses, stealing passwords, executing code by Meterpreter or Cobalt Strike, process injection, etc. Access the target organization’s network and environment. Syllabus Introduction Development Environment and Goals Credential Harvesting Weaponized Word Documents Code Execution (Part 1) Code Execution (Part 2) Code Protections FortyNorth – Initial Access Operations

The Certified Red Team Analyst [CCRTA] course from the cyberwarfare institute is a Red Team-style hacking and security training for beginners. This is a hands-on training course specifically designed for beginners interested in Red Teaming operations.

The Certified Enterprise Security Controls Attack Specialist [CESC-AS] course from the cyberwarfare institute is a Red Team-style hacking and security training at the level of organizations and companies. This is a hands-on training course specifically designed for people interested in high-level, organized Red Teaming operations. Syllabus Hands-on of Enterprise Security Controls Implementation of Security Controls Offensive C# Tradecraft Abusing Windows API Abusing/Evading Host & Network based security controls CWL: Enterprise Security Controls Attack Specialist

In this CSP course, you will apply all the knowledge and skills taught in the CSL course to crack real software.  Real software are commercial proprietary software.  We are doing this for educational purposes and not to harm software developers. This skill and knowledge benefits developers in that they are better able to secure their software. The concept is similar to ethical hacking – the only way to defend against hackers is to know how hackers break in. Similarly, for software security. The best way to improve software security is to learn how software is being cracked.

Cracking Software Legally (CSL) course is reverse engineering training and software penetration testing legally. In this course, you will learn about reverse engineering and Assembly language. Also, this course will provide valuable information for people who work in the field of Malware Analysis and Exploit Development. Gives. Syllabus Introduction Creating a Sandbox for Cracking Software Introduction to crackme’s Introduction to x64dbg and Detect it Easy (DIE) Setting up your cracking workspace and workflow Debugger Stepping Basics Stepping Into Calls Breakpoint Reversing Jumps How to patch a program Summary of Cracking Software Workflow Introduction to cracking gui-based programs Analyzing the PE for a gui-based program Crack the Serial Key using BP on strings Windows api functions & the stack Patching to bypass wrong serial key message Setting Breakpoints on Intermodular Calls Setting BP from the Call Stack Cracking Registration File Checks Removing Nag Screens Cracking Trial Period Software Cracking Auto-Generated Serial Keys Removing Nag Screen by TDC Cracking by patching eax register values Cracking via Hardware Breakpoints How to Change Serial Key By Patching Memory Directly xAnalyzer Static Code Analyzer Serial Fishing – how to extract serial key Cracking Software Protection Cracking software using loaders Cracking Software’s Anti-Debugging Protection Cracking Software that has a combination of Packing Anti-Debugging Keygens Assembly Language Programming for Reversers Creating an External Keygen Cracking Visual Basic 6 Native compiled software Cracking VB6 p-code Software x64dbg tools usage Cracking .NET Framework Software (C# and VB.NET) Cracking .NET Software Protection Understanding the Process of De-obfuscation Cracking DLL’s Cracking Software Legally (CSL)

This risk management course is specifically designed to guide a CISO in defining and implementing a risk management approach within an IS program. The course introduces the student to the most common approaches and practices used by organizations worldwide. It is not intended to cover risk outside of the IS enterprise (including financial and business risks).

EC-Council’s Certified Incident Handler program equips students with the knowledge, skills, and abilities to effectively prepare for, deal with, and eradicate threats and threat actors in an incident. This ANAB-Accredited and US DoD 8140 approved program provides the entire process of Incident Handling and Response and hands-on labs that teach the tactical procedures and techniques required to effectively Plan, Record, Triage, Notify and Contain. Students will learn the handling of various types of incidents, risk assessment methodologies, as well as laws and policies related to incident handling. After attending the course, students will be able to create IH&R policies and deal with different types of security incidents such as malware, email security, network security, web application security, cloud security, and insider threat-related incidents.

is a training and credentialing program that helps the candidate acquire trending and in-demand technical skills through instruction by some of the most experienced trainers in the industry. The program focuses on creating new career opportunities through extensive, meticulous knowledge with enhanced level capabilities for dynamically contributing to a SOC team. Being an intense 3-day program, it thoroughly covers the fundamentals of SOC operations, before relaying the knowledge of log management and correlation, SIEM deployment, advanced incident detection, and incident response. Additionally, the candidate will learn to manage various SOC processes and collaborate with CSIRT at the time of need.