|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/ccna-cyber-ops-malware-analysis-using-elsa-and-pcap-files/
课程评论：没有评论
本课程是 CCNA Cyber Ops 系列课程的一部分，专注于使用 ELSA (Enterprise Log Search and Archive) 和 PCAP 文件进行恶意软件分析。 **课程亮点：** * **就业前景广阔：** 课程强调了网络安全领域巨大的就业缺口（预计到2021年将有350万个未填补的职位），以及思科 CCNA Cyber Ops 认证的重要性。 * **实践为主：** Unlike purely theoretical courses, this course emphasizes hands-on learning, believing that practical experience is crucial for applying knowledge in real-world scenarios. * **构建自有实验室：** 课程教授如何搭建和安装学习环境中所需的工具，让学习者能够独立进行实践和实验，不受限于在线实验室。 * **工具使用：** 重点介绍 CCNA Cyber Ops 认证所需的工具，包括 ELSA、Wireshark 和 Kali Linux。 * **PCAP 文件与 tcpreplay：** 学习如何使用 `tcpreplay` 命令重放 PCAP 文件，以模拟网络流量进行恶意软件分析。 * **日志处理：** 涵盖日志规范化、日志汇总和日志聚合等关键技术。 * **Security Onion：** 课程包含关于安装和使用 Security Onion 的章节，这是在开始使用 ELSA 之前必不可少的准备工作。 **课程目标：** * 让学习者掌握使用 ELSA 和 PCAP 文件进行恶意软件分析的技能。 * 帮助学习者搭建和管理自己的网络安全实验环境。 * 为学习者通过 CCNA Cyber Ops 认证和未来在网络安全领域的学习打下坚实基础。 **适合对象：** * 对网络安全和恶意软件分析感兴趣的学习者。 * 希望获得 CCNA Cyber Ops 认证的学习者。 * 希望通过实践学习网络安全工具的学习者。
*** Part of the best selling course: CCNA Cyber Ops Tools: Sec Onion, Wireshark, and Kali Linux ****** The Only standalone course about ELSA (Enterprise Log Search and Archive) on Udemy***It is estimated that there will be about 1.5 million unfilled jobs in cyber security by the year 2020. A more recent statistic increased this number for cyber security unfilled jobs to be 3.5 million by the year 2021. In addition, recent article highlights Cisco Systems intention to become a cyber security force. For these reasons, Cisco created the CCNA Cyber Ops certification, which can become one of the most certifications in demand in the near future. Furthermore, Cisco created a scholarship program for this certification, which emphasis its importance. In this course you will learn about the tools that you can use for your study of the CCNA Cyber Ops certification. Learning the theory side is important, but the hands on side is more important, since the main purpose of your study is to apply your knowledge in production, and since your hands on will enforce your theory knowledge. You can not teach someone how to drive a car by showing him or her how to do it, but you have to let him try and practice how to do that. Furthermore, showing you hands on labs and how to use tools without teaching you how to create these labs and install these tools, might not give you the ultimate benefit from your study. For this reason, I have created this course to teach you how to create your own home labs, and to understand the core usage and important features of the tools used in them. I believe in the saying: "Give a man a fish and you feed him for a day; teach a man to fish and you feed him for a lifetime". If you have access to online labs, such as that offered by Cisco through their scholarship, you still need to know how to create your own home labs to continue practicing and experimenting, which is what this course will help you to achieve. On the other hand, this course will prepare you to go through these online labs quickly, and with confidence, since you will be familiar with the tools used in them. And not just online labs, but any other hands on Cyber Ops courses, like what I intend to publish in the near future.In this course you will learn about how to use the tcpreplay command, and where to download PCAP files that can be used with this command to recreate network packets in order to practice with malware analysis using ELSA. You will go through the steps of log normalization,log summarization, and log aggregation.Because you will need to install and learn security onion before start working with ELSA, I have a section for that.I hope that you will join me in this course and start your Cyber security journey. Happy learning!
