Duration
3 days
Overview
This course will provide the participants with the in-depth knowledge of information systems audit. This course will discuss about host operating systems to network management and auditing techniques.
Objectives
- To understand information systems audit process
- To be able to audit various type of operating systems
- To be able to analyse log files
- To be able to audit networks and perimeters
Course Outline
Windows Systems Auditing
- Introduction to different version of Windows Systems
- Auditing User Access of Files, Folders and Printers
- Analysing Group Policies
- Active Directory Boundaries Auditing
- Understanding Windows built-in monitoring and events tools
- Understanding Windows Analysis Tools
- Best Practices and common misinterpretation
Linux Systems Auditing
- Introducing the Components of Linux Audit
- Understanding the Audit Logs and Generating Reports
- Visualizing Audit Data
- Relaying Audit Event Notification system Auditing
- Understanding Linux Analysis Tools
- Best Practices
Log Analysis
- Introduction to Log Analysis
- Categorizing the Log Files
- Understanding the concept of Web Server Log Analysis
- Identifying Syslog Statistics and Analysis
- Understanding the Concept of Logging
- Introduction to Monitoring and Security Events
- Understanding Log Analysis Tools
- Various Log Parsing Tools
- Introduction to Log File Rotation Tools
- Understanding Log Security and Best Practices
Auditing and Monitoring Networks, Perimeter and Systems
- Secure Layer 2 Configurations
- Router & Switch Configuration Security
- Firewall Auditing, Validation & Monitoring
- Wireless
- Network Population Monitoring
- Vulnerability Scanning
Web Application Auditing
- Identify controls against information gathering attacks
- Process controls to prevent hidden information disclosures
- Control validation of the user sign-on process
- Examining controls against user name harvesting
- Validating protections against password harvesting
- Best practices for OS and web server configuration
- How to verify session tracking and management controls
- Identification of controls to handle unexpected user input
- Server-side Techniques for Protecting Your Customers and Their Sensitive Data
UNIX Auditing & Monitoring
- Auditing to Create a Secure Configuration
- Building Your Own Auditing Toolkit
- File Integrity Assessment
- Fine Points of find
- Regex Basics
- Auditing to Maintain a Secure Configuration
- Reading Logfiles
- Password Assessment Tools
- Risk Assessment
- What Tools to Use
- How to Go About It
- Building a Baseline
- Building an Audit Script
- Auditing with Accreditation Systems
- Auditing to Determine What Went Wrong
- Finding Hidden Disk Space
- Event Reconstruction
- Identifying Back Doors
- Anatomy of a Rootkit
- Creating a Unix Tools CD
Programme scope, delivery arrangements and suitability are confirmed during enquiry.