Module 1

Before the course

1. 1.(W00) Course Instructions
2. 2.(W39M00) Instructor Intro
3. 3.(W39M00) Lab configuration

Module 2

Q&A - DNS Intro

1. 1.(W39M00) Q&A - Part 1
2. 2.(W39M00) Q&A - Part 2
3. 3.(W39M00) Q&A Part 3 - Cache Poisoning Explanation

Module 3

Module 1 Lectures

1. 1.(W39M01) Bind9 Configuration
2. 2.(W39M02) Ettercap
3. 3.(W39M03) Netwox
4. 4.(W39M04) Netwag Part 1
5. 5.(W39M05) Netwag Part 2
6. 6.(W39M06) W4SP Part 1
7. 7.(W39M07) W4SP Part 2

Module 4

Module 1 Labs

Module 5

Module 2 Lectures

1. 1.(W39M13) SANS Sift Workstation Part 1
2. 2.(W39M14) SANS Sift Workstation Part 2
3. 3.(W39M15) Floss
4. 4.(W39M16) Fakenet-NG - FlareVM
5. 5.(W39M17) Floss - FlareVM

Module 6

Module 2 Labs

Module 7

Module 3 Lectures

1. 1.(W39M22) Redline
2. 2.(W39M23) IOC
3. 3.(W39M24) Volatility
4. 4.(W39M25) Indicators of Compromise with Wireshark

Module 8

Module 3 Labs

Module 9

Module 4

1. 1.(W39M00) Addendum - Could IOC Security
2. 2.(W39M27) Working with NetworkMiner
3. 3.(W39M28) Analyzing malware network activity
4. 4.(W39M29) Infection Monkey Part 1
5. 5.(W39M31) Infection Monkey Part 2

Module 10

Module 4 Labs

Module 11

Final Exam