Wednesday, September 02, 2009

Community SANS Security 401: Security Essentials Bootcamp Style in Boulder, Colorado - Discount Code!

http://www.sans.org/boulder09_cs/description.php?tid=672

I will be teaching (!) SANS Security 401 in Boulder, Colorado this Oct. 19 - 24th, 2009. This is a great "intro" class for folks starting out in computer and network security. The course covers the most common issues facing computer security professionals today. It's both broad and deep in it's scope of information. The course is broken out into the following daily topics:

Day 1: Networking Concepts
Day 2: Defense In-Depth
Day 3: Internet Security Technologies
Day 4: Secure Communications
Day 5: Windows Security
Day 6: Linux Security

Follow the links above for more detail on the topics covered for each day.

I'm working on getting some guest speakers for the lunch breaks covering more advanced topics. If you know of any folks local to the Boulder area that would be interesting to hear from, let me know!

Discount Code: If you use the discount code COINS-RF when registering, you'll get a 10% discount off the price of the course. Need a bigger discount? Contact me at rfifarek at sans DOT org for more information.

Department of Defense employees and contractors: Please note that the Security 401 SANS Security Essentials course prepares you to pass the GSEC and S+ certifications. These are two of the certifications which meet the requirements listed in DoD directive 8570.1 for IAT Level II employees and contractors. For details, click on http://www.giac.org/info/41124.

-R

Labels: , , , , , ,

Thursday, June 25, 2009

Penetration Test Tip: Add already guessed or cracked passwords to wordlist

When doing a penetration test, password attacks, while they lack the "sex appeal" of using the latest exploits in Metasploit to 0wn a b0x3r, are still disturbingly effective. Additionally, those same passwords are likely to be used on other machines, whether they be initial passwords for new/unused accounts or the same individual uses the same password on different systems.

Either way, once you guess a password (using enum.exe or the like) or crack a password from an encrypted hash (using John the Ripper or the like), add that password to the beginning of the master wordlist or dictionary list that you will use for the remainder of the penetration test, so that password is checked earlier rather than later.

Want to learn more? Check out:
SANS Security 560: Network Penetration Testing and Ethical Hacking

or

SANS Security 504: Hacker Techniques, Exploits and Incident Handling

-R

Labels: , , , , ,

Monday, March 30, 2009

IT Security Training: SANS Security 560 - Network Penetration Testing and Ethical Hacking, Denver, CO - starting Apr. 14, 2009

I am running a Mentor class of SANS Security 560 - Network Penetration Testing and Ethical Hacking here in Denver, starting April 14, 2009. To sign up, login to your portal account at http://portal.sans.org, then navigate to:

http://www.sans.org/mentor/details.php?nid=14819

for more details and to register. As a favor to me, if you do register, please enter MENTOR RECRUIT in the comments section. That way, SANS knows I marketed my own class :)

Hope to see you there!

-Rich

Labels: , , , , ,

Thursday, November 20, 2008

SANS 2009 in Orlando, Florida March 2-9

In much the same fashion as Las Vegas in Jan., I expect to be at the SANS conference in Orlando early Mar. Drop me a note if you will be attending, and let's meet up.

Join us once again in the Magic Kingdom for SANS 2009, March 2-9, where
you can receive the best in network and computer security training!
There is a great need for people with deep, technical skills in network
security in today's world. At SANS 2009, you can gain the training that
will ensure that you have those skills.

Timing is great. Flights to Orlando are typically inexpensive, and SANS
has discounted rates on hotel rooms. Register by January 21 to get a
$350 tuition discount. Start making your travel plans now!

SANS top-rated instructors, the 'Voices That Matter,' will be on hand
at this outstanding annual event. Choose from 35 courses that are packed
with immediately-useful techniques and tools! See our Event-At-A-Glance
page (http://www.sans.org/info/35639) for a complete list of courses
including several that are in alignment with DoD Directive 8570
requirements for Baseline IA Certifications. For more information see
http://www.sans.org/info/35644.

"SANS courses are hands-down the best security courses in the
industry." - Scott Hilts, Bruce Power

"SANS offers the real world experience that other training venues
can't." - Tom Boyd, Medco

"Thorough and current material, great presentation, real world
examples." - Jason White, University of Maryland

No SANS national event would be complete without our SANS@Night Series
featuring presentations on the most current topics in information
security by some of the best speakers in the industry.

Part of the package, as always, is an extensive Vendor Tools Expo &
Reception where you'll see live demonstrations of cutting-edge
technologies. Numerous SANS Lunch & Learn presentations and Cocktail
Briefs will help you find the right mix of tools and solutions for your
company's unique challenges.

At SANS 2009, you'll learn more than you can imagine and have countless
opportunities to expand your network of security experts and friends.
There's fun for the entire family, too, as this event takes place right
on the Disney property, minutes from EPCOT and Disney-MGM studios.
(http://www.disneyworld.com) This year, SANS 2009 coincides with ESPN
Weekend, which will feature live ESPN telecasts, motorcades, interview
sessions with famous athletes, and an interactive sports zone.

SANS has arranged discounted room rates at Walt Disney World Swan and
Dolphin Resorts which includes high-speed Internet access in your room.
Make your reservations now as this special deal is based on space
availability. (http://www.sans.org/info/35634)

Now is the best time to invest in your own deep, technical skills - an
investment that helps to ensure your future in uncertain times! So,
register today for SANS 2009. I look forward to sharing both the magic
of Disney and SANS training with you in Orlando!
(http://www.sans.org/info/35629)

Labels: , , ,

Wednesday, November 19, 2008

Computer Security Training: SANS Security 504 Training in Denver, Colorado

I'm running a local mentor class of SANS Security 504, starting on Jan. 15th, here's the info (take note of the Apple promotion):

SANS is bringing Security 504: SANS Hacker Techniques, Exploits and
Incident Handling to your local community in our popular Mentor hands-on
format! Beginning on January 15, SANS Mentor Richard Fifarek will be
leading this class in Denver, Colorado. For complete course details,
please click on http://www.sans.org/info/34234.

SANS END OF YEAR APPLE GIFT CARD PROMOTION: For a limited time SANS is
offering a $200 Apple gift card for registering and paying for this
class prior to December 31. Looking to try the new iPhone? Here is your
chance! Simply enter the word "Apple" in the comments box on the second
registration screen and make payment by December 31 to receive a $200
Apple gift card.

Why Choose the Mentor Program?

The Mentor Program, http://www.sans.org/info/34239, consists of small,
locally run, 10 week classes utilizing the same great SANS courseware
presented at the larger conferences. This unique program opens SANS
training up to students with family or work commitments necessitating a
more flexible option. Mentored students report several major benefits
of this format including: cost savings, time to digest the material,
convenient evening classes, small groups, a Mentor "coach", and
community networking.

COST SAVINGS: Is the slowing economy resulting in reduced training
budgets? With the SANS Mentor program, you save 25% off the regular
SANS tuition fee with the ability to save even more with group discounts
(see below). No need to spend money on travel and living expenses or
spend a week away from the family.

PACED STUDY: Take 10 weeks to work through and understand
the material. Past students report that the slower pace allows them to
absorb and apply the information. Each session provides you the
opportunity to apply the materials the next day when you return to the
office!

EVENING CLASSES: The Mentor program provides a method for learning the
SANS materials and working towards a GIAC certification without taking
time off from work.

COMMUNITY NETWORKING: The Mentor program allows you to work with local
security professionals in an open discussion format. This community
networking has been identified by students as a major benefit of the
Mentor program.

One recent Mentor student commented, "I thought that the class was
great. I would consider taking another SANS Mentor Program class. It
was much more convenient than traveling and I had the ability to review
material at my own pace." Clint Barnett - Computer & Information
Security Forensics Examiner

A SANS Institute course delivered locally in Denver, Colorado, by an
experienced SANS Mentor who will lead you over a comfortable and
convenient schedule, saving you money, while giving you the opportunity
to network with local security professionals. What a great
combination!! Plus SANS promises you will be able to use what you learn
in the classroom as soon as you return to the office.

TUITION DISCOUNTS!
SANS offers group registration discounts for 2 or more students who
register from the same organization. To obtain the Group Discount
fee and Registration Code offered for this course, contact Miranda
Ruddick at mentor@sans.org PRIOR to registering, and provide the
names and e-mail addresses of all the students registering within
your organization.

Does this sound like the kind of training that would help
you be more effective in your job? Then register today at
http://www.sans.org/info/34234 and see for yourself the excellent
value of SANS training and GIAC certification!

If you have any questions about this course offering, please contact
mentor@sans.org.

Labels: , , ,

Computer Security Training in Las Vegas, NV

I'm scheduled to be in Las Vegas, NV this coming Jan. for SANS Security West, January 24 - February 1. If any of you reading this will be there, give me a shout, and let's meet up!

SANS is offering it's usual collection of top notch training classes:

- SEC401: SANS Security Essentials Bootcamp Style
- SEC504: Hacker Techniques, Exploits and Incident Handling
- SEC508: Computer Forensics, Investigation, and Response
- SEC560: Network Penetration Testing and Ethical Hacking
- MGT512: SANS Security Leadership Essentials for Managers with Knowledge Compression(tm)
- SEC501: Advanced Security Essentials -- Enclave Defender - NEW
- MGT414: SANS(r) +S(tm) Training Program for the CISSP(r) Certification Exam
- SEC502: Perimeter Protection In-Depth
- SEC503: Intrusion Detection In--Depth
- LEG523: Legal Issues in Information Technology and Information Security

They also have a great lineup of evening talks for attendees:

- Hot Trends 2009-2010 - Stephen Northcutt
- Crypto: The Pain Killer of Choice - Eric Cole
- Client Side Attacks: Forget 0-day, time for 0-exploit - Kevin Johnson
- Electronic Records Out of Control - Ben Wright
- State of the Hack: The Chinese Threat - Rob Lee

Hope to see you there!

Labels: , , ,