Security+ - Emanuel De La Cruz

Security Essentials

With these labs, we will acquire fundamental knowledge and skills required to assist with cybersecurity operations and practices. We'll learn about various potential threat and attacks. Implement solutions to mitigate risks. Apply monitoring and assessment techniques to networks, applications, host devices, and cloud solutions. Learn the importance of data ownership and regulations and respond to incidents and conduct analysis.

Advanced Labs

Implementing PowerShell Security

In this activity, we will use Group Policy to configure PowerShell security, set execution controls, implement PowerShell code signing, and disable remote PowerShell.

Identifying Malicious Code

In this activity, we are supporting incident response by assessing indicators to determine whether a case should be escalated to senior analysts. We have two script samples that server managers have flagged as suspicious. We'll identify the type of code used in both cases and decide whether they should be escalated to the senior response team.

Installing, Using, and Blocking a Malware-based Backdoor

In this activity, we will disable Windows Defender, leaving a server vulnerable. We then simulate the accidental installation of malware and view the changes. We take on the role of a pen tester or hacker, and determine whether the malware was installed based on open network ports. Next, we connect to the infected server, proving we have the ability to exploit it. Finally, in the role of security administrator, we will remove the malware.

Acquiring Digital Forensics Evidence

In this activity, we will create a disk image, and then use an MD5 hash to confirm its integrity. We will also use Autopsy to explore an existing case file.

Architecture

Configuring a Firewall

In this activity, we will use iptables in Linux to configure firewall rules and examine firewall access log files.

Scanning and Identifying Network Nodes

In this lab, we will use common network tools, such as local commands and the Nmap network mapper, to discover other hosts on the local network. Next, we will conduct a banner grabbing exercise to identify specific services on the hosts. Finally, we will use DNS tools to gather name resolution information.

Intercepting and Interpreting Network Traffic with Packet Sniffing Tools

In this lab, we use Wireshark and tcpdump to capture network traffic and display relevant information on the local network.

Security

Analyzing the Results of a Credentialed Vulnerability Scan

In this activity, we will explore the capabilities of the OpenVAS (openvas.org) vulnerability scanner and analyze scan reports.

Auditing Passwords with a Password Cracking Utility

View probable passwords based on a survey, integrate the passwords into a wordlist, and then use the modified wordlist to audit passwords by using John the Ripper.

Automation

Implementing a Secure Network Design

In this activity, we will configure an internal Windows webserver for HTTPS connectivity, providing a secured connection to an internal web application. In part two, we will configure DHCP security settings, including Authorization, an IP address reservation, and audit logs.

Infrastructure

Configuring an Intrusion Detection System

In this activity, we will configure an Intrusion Detection System (IDS) and then initiate a Denial of Service (DoS) attack against a Windows server.

Follow Me