101: Enterprise Security Fundamentals

Introduction
Course Introduction
2 Topics
Welcome and Course Overview
Course Logistics, Resources and Support
Offline Lab Setup
1 Topic
Optional: Offline Lab Setup Instructions
Cyber Threat Landscape
1 Topic
Mastering Enterprise Security: Threat Actors, Attacks, and Response
1) Enterprise Domain Environments
1.1 Enterprise Domain Environments
6 Topics
Domains and Active Directory Overview
Accounts and Credential Abuse Techniques
1.1 Lab Instructions
Lab: Domain Controllers and User Accounts Management
Lab: Managing Group Policy Objects
Lab: Deploy Ransomware using GPOs
1.2 Logging, Telemetry, Visibility
1 Topic
Logging, Telemetry and Visibility Overview
1.2.1 Windows Event Logs
3 Topics
1.2.1 Lab Instructions
Lab: Exploring and Analyzing Windows Event Logs
Lab: Enabling Process Creation Events and Analysis with PowerShell
1.2.2 PowerShell Event Logging and Tuning
5 Topics
PowerShell Logging Matters
1.2.2 Lab Instructions
Lab: PowerShell Logging Basics
Greater Visibility Through PowerShell Advanced Logging
Lab: PowerShell Logging Advanced
1.2.3 Sysmon Event Logging and Detection
6 Topics
Sysmon Essentials – Introduction into Powerful System Monitoring
1.2.3 Lab Instructions
Lab: Setting Up Sysmon – Installation and Essential Configurations
Harnessing Sysmon Configurations: Optimize Monitoring Efficiency
Lab: Customizing Sysmon Templates
Lab: Next-Level Sysmon – Enhanced Detections and Advanced Configurations
2) Initial Access
Initial Access Techniques
3 Topics
Understanding Initial Access Techniques: Real-World Insights and Statistics
2.1 Lab Instructions
Lab: Exploring Malicious Office Documents with Macros
3) LOLBins
Discovery, Execution and File Transfer with LOLBins
6 Topics
LOLBins Overview
3.1 Lab Instructions
Lab: System Reconnaissance with LOLBins
Lab: Malicious PowerShell Execution Techniques
Lab: Execution and Persistence with Service Installs
Common Miscellaneous LOLBin Usage
4) Discovery
Domain Reconnaissance
5 Topics
Domain Enumeration Introduction
4.1 Lab Instructions
Lab: Active Directory Enumeration with PowerView
Lab: Suspicious ADFind Domain Enumeration
Advanced Domain Enumeration with BloodHound
5) Credential Attacks
Credential Dumping
5 Topics
The Windows Authentication Architecture
5.1 Lab Instructions
Lab: Dumping NTLM hashes with Mimikatz
Lab: Extracting NTLM Hashes Offline
Lab: Cracking NTLM Hashes
Sessions and Tokens
2 Topics
Windows Logon Sessions and Access Tokens
Lab: Token Impersonation Attack
6) Lateral Movement
Lateral Movement Techniques
2 Topics
Windows SSO and Lateral Movement Techniques Overview
Demo: Pass-the-hash, Pass-the-ticket and PsExec
7) Windows Endpoint Compromise
Windows Endpoint Compromise Overview
2 Topics
Windows Endpoint Compromise Tactics and Techniques
7 Lab Instructions
Persistence Mechanisms
3 Topics
Lab: Autostart via Registry Runkeys and Startup Folders
Lab: Scheduled Tasks for Initial or Recurring Execution of Malicious Code
Lab: Persistence via WMI Event Subscribers
Privilege Escalation Techniques
2 Topics
Common Privilege Escalation Tactics
Lab: Bypassing the User Account Control
Execution and Defense Evasion
4 Topics
Introduction Into Process Internals
Demo: Exploring Live Windows Processes and What Looks Normal
Lab: Deep Dive into Process Injection with Process Hollowing
Bypassing AVs and EDRs in Modern Day Environments
Data Staging and Exfiltration Techniques
2 Topics
Lab: Manual Data Staging and Exfiltration Using RClone
Lab: Automated Data Exfiltration with Exbyte
8) Network Telemetry
Network Telemetry and Security
2 Topics
Network Telemetry and Security Introduction
8 Lab Instructions
Windows Network Security
2 Topics
Lab: Network Security on Windows Endpoints
Lab: Common Techniques for Tampering with Windows Firewalls
C2 Beacon Analysis
3 Topics
C2 Attack Infrastructure and Beacons Overview
Lab: Extracting Network Indicators from C2 Beacon Payloads
Lab: Hunting for Beacons via PCAP Analysis and Fingerprinting
9) Malware
Static Malware Analysis
7 Topics
Understanding Binary File Formats
9 Lab Instructions
Lab: Analyzing File Types and Formats
Lab: Advanced File Examination and Header Inspection
Lab: Analyzing Files for Malicious Behavior with CAPA
Lab: Extracting Malicious Macros in Office Documents
Lab: Static Portable Executable File Analysis with PEStudio
Dynamic Malware Analysis
1 Topic
Lab: Decompiling and Debugging .NET Malware with dnSpy
PowerShell Payload Analysis
3 Topics
Lab: Analyzing Payloads and Extracting Shellcode Part 1
Lab: Analyzing Payloads and Extracting Shellcode Part 2
Gathering Intel via VirusTotal
Final
Congratulations and Next Steps
Next Topic

Course Introduction

101: Enterprise Security Fundamentals Course Introduction
Lesson Content
0% Complete 0/2 Steps
Back to Course
Next Topic
Scroll to Top

Training Waitlist

Join our waitlist and get notified when training becomes available.

Contact Information
Professional Experience
I'm interested in

*By submitting this form, you’re agreeing that we will contact you and to receive our free email newsletter. (You’ll never be spammed and you can unsubscribe at any time.) We do not share your information with third-parties.