Upcoming dates

No public dates scheduled right now

This class runs as a private cohort on dates that suit your team, at your site or delivered live online. Tell us roughly when and how many people, and we'll come back with dates and a total.

We can also add you to the notify list for the next public date, though private delivery is usually faster and works out better per seat once you're past four or five people.

Request private dates

About this class

This course takes cybersecurity practice to the next level. It is an advanced experience that builds upon the defensive skills and knowledge taught by the CyberSec First Responder® (Exam CFR-410) course. It is an applied experience in that it almost entirely consists of hands-on exercises featuring many different tools and environments.

The “”A”” in CFR-A can also refer to the cybersecurity modes this course is built around:

Attack: Simulating attacks on computing assets to test security measures and learn more about threat vectors.
Analyze: Identifying, detecting, and assessing threats to learn more about how they operate and how they affect security.
Address: Implementing countermeasures and other protections to mitigate the impact of threats to security.

What you'll be able to do

Get oriented to your tools and environment.
Exploit vulnerabilities in software.
Exploit vulnerabilities related to system access, networking, data, and file configurations.
Analyze attacks using passive and active methods.
Implement security protections to minimize the impact of attacks.

Course outline

1 - Getting Oriented to Your Tools and Environment

Explore the CFR-A Activity Environment
Perform Reconnaissance
Simulate an Attack Using Metasploit

2 - Exploiting Software Vulnerabilities

Exploit Code-Execution and Injection Vulnerabilities
Exploit Web-Application Vulnerabilities

3 - Exploiting System Vulnerabilities

Exploit Access Vulnerabilities
Exploit Network Vulnerabilities
Exploit Data Vulnerabilities
Exploit File-Configuration Vulnerabilities

4 - Analyzing Attack

Analyze Logs for Signs of Attack
Detect Attack Using Active Monitoring Systems
Perform Digital Forensics

5 - Protecting Assets

Protect Data
Protect Access
Protect Software
Protect Networks and Systems

Before you attend

To ensure your success in this course, you should have taken the CyberSec First Responder® (Exam CFR410) course and passed the associated exam. This validates you have intermediate skills in working with the Linux® operating system; working at the command line; using fundamental cybersecurity tools like Nmap and Metasploit; and following an incident-response process, all of which are important to this course. And, it ensures you have foundational cybersecurity and networking knowledge.

In addition, you should have some familiarity with computer programming and scripting. Expertise in writing code is not necessary, but you should be able to comprehend code at a high level, and follow the logic behind a script as it is explained to you. Knowledge of one particular programming language is not required. Python is fairly universal, especially among technology professionals who are not software developers by trade.

Who this is for

This course is designed for cybersecurity professionals who want to expand their practical skills in the three aforementioned modes. The target student is also someone who has taken the CyberSec First Responder® (Exam CFR-410) course and wants to dive deeper into the methods and tactics used to defend against a range of cyber threats.