Certification Training

Network Forensic Analysis (NFA)

The NFA course is a lab-intensive course designed for technicians involved with incident response, traffic analysis or security auditing. The certification exam is an actual practical lab requiring candidates to follow procedures and apply industry standard methods to detect and identify attacks.

NFA was designed to partner with courses like CEH (Certified Ethical Hacker) in order to provide experience detecting the attacks a student may have seen or read about in the past. NFA pre-requisites should include information obtained from an offensive hacking and countermeasures course.

NFA is a continuously evolving course, rarely repeating the exact same captures or attacks. Many courses update their curriculum only after a large period of time, perhaps even years. NFA is committed to using the most recent attacks that real-world analysts are currently experiencing. While certain “historical” attacks are discussed in the course, students will analyze captures of attacks that are as current as a few weeks. Freewater Technologies keeps the focus on cutting edge technology, providing students with tangible information that can immediately be applied to job skills.

REDSHELL

Freewater’s proprietary course, REDSHELL, is designed to demonstrate the use of Windows PowerShell as a 100% offensive tool. To quote harmj0y, PowerShell is simply “Microsoft’s handy post-exploitation language” and there is no better way to put it. Designed as the answer to all things of Microsoft Scripting, like any administrative interface if it is used with a bit of creativity it becomes a dream to an offensive operator. Microsoft has created a language that is extremely easy to learn (even borrowing or improving on some of the best features of other scripting languages) that exposes all of the APIs within ANY version of Windows.

REDSHELL focuses on two main facts:

1. Windows security suffers from a weak underbelly by relying on the “normal” user interface.
2. PowerShell allows an operator to avoid detection by not introducing any foreign processes, allowing well-written code to avoid modern (and even future predicted) methods of detection.

Topics covered in REDSHELL

• Full AD enumeration with any low privilege account
• The ability to write to disk as well as calling the scripts without any trigger of antivirus
• Utilizing common web sites as the control channel for Command and Control
• Returning the response of a command via a GET request (not POST)
• The ability to rewrite every aspect of a covert channel
• Persistence from any trigger
• Blending in with behavioral analytics
• Using 3rd party APIs of Web Applications as a communication channel
• Implementing mass commands
• Maintaining invisibility without requiring an encrypted channel
• Establishing a framework for offensive activity

REDSHELL is designed as a weapon that transcends the commercial use of Penetration Testing. It belongs in the hands of National Security and is therefore not offered to personnel outside of DoD, DHS and Law Enforcement.

Network+

Network+ ensures an IT professional has the knowledge and skills to:

• Configure, manage, and maintain essential network devices
• Use devices such as switches and routers to segment network traffic
• Identify benefits and drawbacks of existing network configurations
• Implement network security, standards, and protocols
• Troubleshoot network problems

Security+

Security+ ensures a security professional has the knowledge and skills to:

• Detect types of compromise and understand pen testing and vulnerability scanning concepts
• Install, configure, and deploy network components while assessing and troubleshooting issues
• Install and configure identity and access services, as well as management controls
• Implement and summarize risk management best practices and the business impact
• Install and configure wireless security settings and implement public key infrastructure

CySA+

CySA+ is for IT professionals looking to gain the following security analyst skills:

• Perform data analysis and interpret the results to identify vulnerabilities, threats and risks to an organization.
• Configure and use threat-detection tools.
• Secure and protect applications and systems within an organization.

 Linux+

Linux+ ensures an IT professional has the knowledge and skills to:

• Configure kernel modules, network parameters, storage, cloud and virtualization technologies
• Manage software and services, and explain server roles, job scheduling and use of devices
• Understand best practices for permissions and authentication, firewalls, and file management.
• Analyze system properties and processes and troubleshoot user, application and hardware issues
• Execute basic BASH scripts, version control using Git, and orchestration processes

CASP+

The CASP+ certification validates advanced-level competency in risk management, enterprise security operations and architecture, research and collaboration, and integration of enterprise security.

• Enterprise security to include operations, architecture concepts and techniques and requirements
• Analyzing risk through interpreting trend data and anticipating cyber defense needs
• Coverage of integrating cloud and virtualization technologies
• Inclusion of implementing cryptographic techniques, such as blockchain, cryptocurrency and mobile device encryption

Pentest+

Pentest+ ensures a penetration testing professional have the knowledge and skills to:

• Exploit network, wireless, application, and RF-based vulnerabilities, summarize physical security attacks, and perform post-exploitation techniques
• Conduct information gathering exercises with various tools and analyze output and basic scripts (limited to: Bash, Python, Ruby, PowerShell)
• Utilize report writing and handling best practices explaining recommended mitigation strategies for discovered vulnerabilities

Cloud+

CompTIA Cloud+ validates the skills you need to maintain and optimize cloud infrastructure services. It also:

• Covers the increased diversity of knowledge, skills and abilities required of system administrators to validate what is necessary to perform effectively in data center jobs.
• Views cloud-based infrastructure services as an increasingly important piece of an organization’s IT systems.
• Is the only vendor-neutral, performance-based certification covering more than a specific vendor or a single function — such as security or networking — to help you better realize the return on investment of cloud infrastructure services.

Implementing and Administering Cisco Solutions (CCNA)

This course gives you a broad range of fundamental knowledge for all IT careers. Through a combination of lecture, hands-on labs, and self-study, you will learn how to install, operate, configure, and verify basic IPv4 and IPv6 networks. The course covers configuring network components such as switches, routers, and wireless LAN controllers; managing network devices; and identifying basic security threats. The course also gives you a foundation in network programmability, automation, and software-defined networking.

Cisco Certified Network Professional Security (CCNP Security)

Achieving the CCNP Security certification proves your skills with security solutions. This exam tests your knowledge of implementing and operating core security technologies, including: Network security, Cloud security, Content security, Endpoint protection and detection, Secure network access, and Visibility and enforcement. To earn CCNP Security certification, you pass two exams: one that covers core security technologies and one security concentration exam of your choice, so you can customize your certification to your technical area of focus.