Explore the World of Threat Intelligence
In the dynamic landscape of cybersecurity, staying ahead of threats is paramount. Our Certified Threat Intelligence (TI) Analyst course equips you with the knowledge and skills to not just keep pace but to proactively defend against evolving cyber risks.
Unveiling the Power of Threat Intelligence
Threat intelligence is the heartbeat of modern security. In this 5-day, 35-hour instructor-led program, you’ll delve into the world of security threats, attack methodologies, and the intricate dance between cybercriminals and defenders. But we don’t just stop at theory. You’ll gain hands-on experience, uncovering the latest attacks, understanding attacker techniques, and learning how to respond effectively. This knowledge isn’t just about career enhancement; it’s your ticket to being the guardian of your organization’s digital realm.
Your Career Catalyst
Whether you’re a cybersecurity analyst, SOC expert, or a newcomer to the world of network security, this course is your game-changer. With a deep understanding of threat intelligence, the MITRE ATT&CK Framework, and practical setup of a Threat Intel Framework, you’ll be the go-to professional for identifying, countering, and mitigating cyber threats. Don’t just navigate the cybersecurity landscape; lead the way with our Certified Threat Intelligence (TI) Analyst course.
Take your career to the next level. Enroll now and become the guardian your organization needs in an increasingly digital world.
Course Details
Course code: CSD; Duration: 3 days; Instructor-led/ remote online training
A recent study compared the cost implementing security into applications at various stages of the development life cycle. Some of the interesting findings from that study include:
- Adding security during coding costs 6.5 times more than architecting it during the upfront software design process
- Implementing security after deployment costs 15 times more than architecting it during the upfront software design process
- Fixing security holes after deployment costs 100 times more than architecting it during the upfront software design process
- On average, every 1,000 lines of code has at least 5 to 15 defects (United States Department of Defense and the Software Engineering Institute).
Developers want to Write Secure Code, they just Don’t know how. This course transforms a developer into a secure developer irrespective of the language they use.
Audience
Developers
Prerequisites
No prerequisites
Methodology
This program will be conducted with interactive lectures, PowerPoint presentation, discussion and practical exercise.
Course Objectives
None
Outlines
Module 2: Principles of Secure Development
The 8 Principles of Secure Development are basic foundation blocks for Secure Programming. Generally, these 8 principles are not followed during the Software Development process resulting in applications with tons of vulnerabilities that are easily exploited by hackers/intruders
- Input Validation,
- Output Validation,
- Error Handling,
- Authentication and Authorization,
- Session Management,
- Secure Communications,
- Secure Storage and
- Secure Resource Access
Module 2: Technical Deep Dive on Latest Attacks
- What is security, vulnerabilities & O-days, attack life cycle, different attack vectors
- Threats vs. Risks, why perimeter defense are failing? Why anti-virus is not enough?
- Introduction to cyber kill chain
- Indicators of compromise (IOC) & IOC sources (OTX, MISP)
- Business email compromise (BEC) (lab) with indicators of compromise
- Ransomware (lab) with indicators of compromise
- Advanced persistent threat (lab) with indicators of compromise
- File-less malwares (lab) with indicators of compromise
- Mobile malwares (lab) with indicators of compromise
- Web data breach (lab) with indicators of compromise
- Malvertising (lab) with indicators of compromise
- Social media-based attacks (lab) with indicators of compromise
- Password based attacks (password stuffing, account takeover, phishing, etc) (lab)
- What is mitre ATT&CK framework?
- Tactics, techniques and procedures (TTP)
- Threat actors
- ATT&CK navigator
- The threat hunter-playbook
- Atomic red team library
- Threat-based adversary emulation with ATT&CK
- Behavioral-based analytic detection using ATT&CK
- Mapping to ATT&CK from raw data – lab
- Storing and analysing ATT&CK-mapped intel
Module 3: OWASP & SANS Top Web Application Vulnerabilities – Attacks & Defenses
Attacks with Hands-on Labs on:
- SQL Injection,
- Cross Site Scripting,
- Cross Site Request Forgery,
- LDAP Injection,
- Command Injection,
- Parameter/Form Tampering,
- Payment Gateway hacking
- Improper Error Handling,
- unvalidated Input,
- Directory Traversal,
- Cookie Poisoning,
- Insecure storage,
- Information Leakage,
- Broken Account Management,
- Denial of Service,
- Buffer Overflow,
- Log Tampering,
- Broken Access Control,
- Broken Session Management,
- Session Fixation,
- Security Misconfiguration.
- File Upload and Download and many more
Module 4: Application Security Testing
- Automatic and Manual Vulnerability Scanning with W3af, Wapiti, Nikto, BurpSuite
- Vulnerability Scanning with Acunetix & Other Commercial Scanners
- Vulnerability Scanning with NeXpose Community
- SSL Strip & Man-in-the-Middle Attacks
- Password Cracking
- HTTP DOS
- Automated and Manual Exploitation of Web Vulnerabilities using tons of Scripts
- Vulnerability Assessment reporting with Remediations and Mitigations
