Intrusion Detection Training

Course Code: IFIS CDE/01

About Course

This course delivers the technical knowledge, insight, and hands-on training you need to defend your network with confidence. You will learn about the underlying theory of TCP/IP and the most used application protocols, such as DNS and HTTP, so that you can intelligently examine network traffic for signs of an intrusion. You will get plenty of practice learning to master different open source tools like tcpdump, Wireshark, Snort, Bro, tshark, and SiLK.

Prerequisites

Prior condition for this course

Students must have at least a working knowledge of TCP/IP and hexadecimal.

Learning Outcomes

In this course, you will learn;

Configure and run open source Snort and write Snort signatures
Configure and run open source Bro to provide a hybrid traffic analysis framework
Understand TCP/IP component layers to identify normal and abnormal traffic
Use open source traffic analysis tools to identify signs of an intrusion
Comprehend the need to employ network forensics to investigate traffic to identify a possible intrusion
Use Wireshark to carve out suspicious file attachments
Write tcpdump filters to selectively examine a particular traffic trait
Craft packets with Scapy
Use the open source network flow tool SiLK to find network behavior anomalies
Use your knowledge of network architecture and hardware to customize placement of IDS sensors and sniff traffic off the wire

Course Outline

Traffic Analysis Fundamentals
Traffic Analysis and application controls
Network monitoring
Network traffic forensics

Target Audience

Intrusion detection, systems and security analysts
Network engineers/ administrators
Hands-on security managers

Requirements

x86- or x64-compatible 1.5 GHz CPU minimum or higher
USB Port
4GB RAM or higher
60 GB free hard drive space
Windows XP/Vista/7/8/10, Mac OS X, or Linux – any type

Duration and Fees

Duration: 2 days
Pricing: $230

Need to know more?

Contact Our team and get all your questions answered or you can request for a call back

Request a Callback

Talk to us on +256 414 231 136 or fill in these details below and request a callback