EIEIOTECHNOVATION
← Training programmes

EIEIO / CYBERSECURITY

CREST Practitioner Security Analyst

Course outline

4 days
Discuss this programme →

Duration

CREST Practitioner Security Analyst

4 days

Overview

This course provides the entry level skills required to test the security of networks by mimicking the techniques commonly deployed by malicious cyber actors (hackers). It is designed to prepare candidates for the CREST Practitioner Security Analyst exam.

Recommended Basic Knowledge

We recommends that candidates have some/all of the following basic knowledge before commencing the course. However, all key concepts and knowledge considered essential preparation for the CPSA exam will be covered during the course. Any of the following basic knowledge will be helpful in getting the most out of the course and passing the exam:

  • Common cybersecurity communication methods, principles and concepts that support the network infrastructure.
  • IT security principles and methods.
  • Network access, identity and access management.
  • Common network tools.
  • Cybersecurity threats, risks and issues posed by new technologies and malicious actors
  • Common network layer attack vectors.
  • The main classes of cyberattacks.
  • Different types of cyber attackers, their capabilities and objectives.
  • Basic system administration, network management and operating system hardening methods.
  • Some basic security architecture concepts including topology, protocols, components, and principles.
  • Basic understanding of Windows and Unix ports and services.
  • The OSI model and underlying network protocols.
  • Some principles of security management.
  • Common network protocols and directory services.
  • Current/emerging cybersecurity technologies and associated threats.
  • Common access authentication methods.
  • Some knowledge of network security at practitioner level.
  • Basic principles of IT operations security.
  • Physical and logical network devices and infrastructure.
  • Common network hardware devices and functions.
  • Common network technologies.
  • Some knowledge of the capabilities and limitations of cybersecurity products.

Course Learning Outcomes

Upon successful completion of this course, a trainee will achieve the following knowledge and skills:

  • Knowledge of the various legal/regulatory regimes that govern penetration testing in the UK cybersecurity related threats and vulnerabilities.
  • Knowledge of the engagement lifecycle of a typical penetration test
  • Knowledge of the risks contingent upon penetration testing
  • Knowledge of the enumeration phase of testing
  • Knowledge of penetration testing and red teaming principles, tools and techniques.
  • Knowledge of good reporting principles
  • Knowledge of hacker methodologies.
  • Knowledge of penetration testing principles, techniques and best practice application.
  • Knowledge of how to mimic the attacks a social engineer would use to attempt a system breach.
  • Knowledge of network protocols.
  • Knowledge of encryption cracking tools, password cracking tools and remote access methods.
  • Skill in using network analysis tools to identify vulnerabilities.
  • Skill in conducting application vulnerability assessments and understanding their results.
  • Skill in recognizing vulnerabilities in security systems.
  • Skill in effectively performing target system analysis.
  • Skill in analyzing an organization's communication networks through the eyes of an attacker.
  • Skill in interpreting vulnerability scan results to identify vulnerabilities and their levels of criticality in relation to the organization.
  • Skill in the use of basic penetration testing tools and techniques.
  • Skill in using tools, techniques and procedures to remotely exploit and establish persistence on a target.
  • Skill in identifying, modifying and manipulating applicable operating system components.
  • Skill in identifying a network's characteristics when viewed through the eyes of an attacker.

Agenda

Day

Topic

  • Welcome and housekeeping/safety briefings

Module 7: DNS

  • Recap of Day 1 & questions/discussion time
  • Any questions from yesterday?

Module 15: Unix Enumeration

  • Recap of Day 2 & questions
  • Any questions from yesterday?

Module 21: Wireless

  • Recap of Day 3 & questions
  • Any questions from yesterday?

Module 27: Cross-Site Scripting (XSS)

  • Recap of Day 4 and questions
  • Any questions from yesterday?

Module 30: Encryption

  • Recap of Day 5 and questions
  • Assessment

Programme scope, delivery arrangements and suitability are confirmed during enquiry.