GIAC Certified Intrusion Analyst (GCIA) - Bara 4 dagar

On this 4-day GIAC Intrusion Analyst Certification course, you'll develop the competence to configure and monitor detection systems as well as understand, interpret and analyse network traffic and log files.

This course is aimed at professionals responsible for network and host monitoring, traffic analysis and intrusion detection. Some of the skills you'll learn include:

  • Developing a deeper understanding of traffic analysis tools to detect and subsequently respond to intrusions
  • Understanding the importance behind the optimal placement of IDS sensors and how network forensics can help identify intrusions
  • Understanding the intricacies behind detecting intrusions and assisting analysts with the necessary resources

Our unique Lecture | Lab | Review technique will immerse you in course content. Combining both theoretical knowledge with hands-on experience means you'll learn faster and you'll develop the skills necessary to put your new found knowledge to practice as soon as you return to work.

Läs mer...

On this course, you'll be prepared for the GIAC Certified Intrusion Analyst (GCIA) exam. This is covered by your Certification Guarantee.

This course is aimed at those responsible for networking and host monitoring, traffic analysis and intrusion detection.

This course provides knowledge equivalent to the SANS SEC503: Intrusion Detection In-Depth.

Benefits...

Här är 8 skäl varför du ska genomföra din GCIA hos Firebrand Training:

  1. Du blir utbildad och certifierad på bara 4 dagar. Hos oss får du din utbildning och certifiering på rekordtid, en certifering du också genomför här på plats som en integrerad del av den intensiva, accelererade utbildningen.
  2. Allt är inkluderat. Ett engångsbelopp täcker alla kursmaterial, examen, boende och mat och erbjuder det mest kostnadseffektiva sättet att erhålla din GCIA kurs och certifiering på. Och detta utan några oannonserade ytterligare kostnader.
  3. Du klarar GCIA certifieringen första gången eller kan gå om kursen kostnadsfritt. Det är vår garanti. Vi är säkra på att du kommer klara din certifiering första gången. Men skulle du mot förmodan inte göra det kan du inom ett år komma tillbaks, delta i hela kursen igen, och bara betala för eventuella övernattningar och din examen. Allt annat är gratis.
  4. Du lär dig mer.Traditionella utbildningsdagar pågår kl. 09.00-16.00 med långa lunch- och fikapauser. Hos Firebrand Training får du minst 12 timmars effektiv och fokuserad kvalitetsutbildning varje dag tillsammans med din instruktör, utan vare sig privata eller arbetsrelaterade störande moment.
  5. Du lär dig GCIA snabbare. Vi kombinerar de tre inlärningsmetoderna (Presentation|Övning|Diskussion) så att vi därigenom genomför kursen på ett sätt som säkerställer att du lär dig snabbare och lättare.
  6. Du är i säkra händer.Vi har utbildat och certifierat 72.589 personer, vi är auktoriserad partner med alla de stora namnen i branschen och har dessutom vunnit åtskilliga utmärkelser med bland annat ”Årets Learning Partner 2010, 2011, 2012, 2013 och 2015” från Microsoft Danmark och Gazelle priset 2013 - 1. plats för region Själland i Danmark med en tillväxt om 1.430% sedan 2009.
  7. Du lär dig inte bara teorin. Vi har vidareutvecklat GCIAkursen med fler praktiska övningar som ger dig det extra du behöver för att kunna lösa praktiska problemställningar och klara din certifiering.
  8. Du lär dig från de bästa. Våra instruktörer är de bästa i branschen och erbjuder en helt unik blandning av kunskap, praktisk erfarenhet och passion för att lära ut.

Är du redo för kursen? Ta ett KOSTNADSFRITT test för att mäta och utvärdera din kunskap.

Advanced IDS Concepts

  • Demonstrate an understanding of IDS tuning methods and correlation issues (e.g., snort, bro)

Application Protocols

  • The candidate will demonstrate knowledge, skill, and ability relating to application layer protocol dissection and analysis including HTTP, SMTP, and various Microsoft protocols

Concepts of TCP/IP and the Link Layer

  • The candidate will understand the TCP/IP communications model and link layer operations

DNS

  • The candidate will demonstrate a thorough understanding of how DNS works for both legitimate and malicious purposes

Fragmentation

  • The candidate will demonstrate comprehension of how fragmentation works through theory and packet capture examples, as well as the concepts behind fragmentation-based attacks

IDS Fundamentals and Initial Deployment (e.g., snort, bro)

  • Understand architecture, benefits/weaknesses, and configuration options of common IDS systems. Demonstrate ability to configure and deploy IDS (e.g., snort, bro)

IDS Rules (e.g., snort, bro)

  • Create effective IDS (e.g., snort, bro) rules to detect varied types of malicious activity

IP Headers

  • The candidate will demonstrate the ability to dissect IP packet headers and analyse them for normal and anomalous values that may point to security issues

IPv6

  • The candidate will demonstrate knowledge, skill and ability relating to the analysis of IPv6 as well as issues involving IP6 over IPv4

Network Architecture and Event Correlation

  • The candidate will demonstrate competence with issues relating to IDS/IPS management, network architecture as it pertains to intrusion detection, and event correlation and management

Network Traffic Analysis and Forensics

  • The candidate will demonstrate the ability to analyse real traffic and associated artifacts: malicious, normal and application traffic; and demonstrate the ability to discern malicious traffic from false positives

Packet Engineering

  • The candidate will demonstrate knowledge, skill, and ability relating to packet engineering and manipulation including packet crafting, OS fingerprinting, and IDS Evasion/Insertion

Silk and Other Traffic Analysis Tools

  • The candidate will demonstrate the ability to use Silk and other tools to perform network traffic and flow analysis

TCP

  • The candidate will understand TCP communications as well as expected responses to given stimuli at this layer

Tcpdump Filters

  • The candidate will demonstrate the skill and ability to craft tcpdump filters that match on given criteria

UDP and ICMP

  • The candidate will demonstrated the ability to analyse both UDP and ICMP packets and recognise common issues

Wireshark Fundamentals

  • The candidate will demonstrate the knowledge, skills, and abilities associated with traffic analysis using wireshark from an intermediate to high degree of proficiency

Exam Track...

This course will prepare you for the following exam. The exam fee is not included in the course price. If you wish to take the exam, we’ll provide instructions on how to register with GIAC.

  • GIAC Certified Intrusion Analyst (GCIA)

Additional Exam Details:

  • 1 proctored exam
  • 150 questions
  • Time limit of 4 hours
  • Minimum passing score of 67%
  • Certifications must be renewed every 4 years

What's Included...

On this accelerated course, you'll get access to the following:

  • Firebrand official training materials

Prerequisites...

While there are no official prerequisites for this course, you should have a working knowledge of TCP/IP and hexadecimal. As well as this, you should have an understanding of Linux commands such as cd, sudo and pwd.

Är du redo för din Firebrand kurs?

Vi intervjuar alla potentiella deltagare om deras bakgrund, utbildning, certifiering och personliga inställning. Om du kommer igenom denna process så har du riktigt goda möjligheter att klara din certifiering.

Firebrand Training erbjuder en ambitiös utbildningsmiljö som förutsätter att du verkligen dedikerar dig till kursen. Ovanstående förkunskaper är endast vägledande, många deltagare med mindre erfarenhet men med en annan bakgrund eller kunskap har framgångsrikt genomfört sin utbildning hos Firebrand Training.

Om du funderar på huruvida du uppfyller rekommenderade förkunskaper vänligen ring oss på (0)8 52 50 01 66 och prata med en av våra utbildningsrådgivare som kan hjälpa dig.

När...

GIAC GCIA Kursdatum

Startar

Slutar

Tillgänglighet

Plats

Registrera

27/5/2019 (Måndag)

30/5/2019 (Torsdag)

Avslutad

-

 

30/9/2019 (Måndag)

3/10/2019 (Torsdag)

Väntelista

Rikstäckande

 

11/11/2019 (Måndag)

14/11/2019 (Torsdag)

Begränsat antal platser

Rikstäckande

 

3/2/2020 (Måndag)

6/2/2020 (Torsdag)

Platser tillgängliga

Rikstäckande

 

16/3/2020 (Måndag)

19/3/2020 (Torsdag)

Platser tillgängliga

Rikstäckande

 

Vi har utbildat 72.589 kursdeltagare under 12 år. Vi har bett alla göra en utvärdering av vår accelererade utbildning. För närvarande har 96,75% sagt att Firebrand överträffat deras förväntningar:

"Very informative. Lecturer was very knowledgeable on a wide variety of subjects. A pleasure being bombarded with so much information."
Japie Van Der Merwe, SBM. - GIAC GICSP (5 dagar) (8/7/2019 till 12/7/2019)

"It was a very useful experience and I feel more confident in my ability to pass the exam."
Anonymous. - GIAC GICSP (5 dagar) (8/7/2019 till 12/7/2019)

"Fantastic course, presentation and delivery and great use of real life examples to help the learning process. Thank you!"
Cy Glaister, Self. - GIAC GICSP (5 dagar) (12/3/2018 till 16/3/2018)

"Enjoyed the course very much, the trainers experience was wide ranging and comprehensive and was tapping into his knowledge and experience throughput the course, with some terrific examples of cyber security breaches and the damage it can cause."
A.P.. - GIAC GICSP (5 dagar) (12/3/2018 till 16/3/2018)

"The instructor's teaching techniques, real world examples and ability to share information were invaluable."
D.S.. - GIAC GICSP (5 dagar) (12/3/2018 till 16/3/2018)

"The centre is very well equipped, with many courses going on at the same time but all independent. The shared meal-times and general communal facilities at Wyboston are great. The lecturer was well prepared, the course was well structured and the materials were good in support of the learning objectives."
Dave Pearson. - GIAC GICSP (5 dagar) (30/10/2017 till 3/11/2017)

"Course was interactive, and beneficial with extensive content. Food was plentiful, good facilities with friendly staff."
Roman Hill, Fiserv . - GIAC GICSP (5 dagar) (4/9/2017 till 8/9/2017)

"Very impressed with the details of the course and thanks to the instructor for assisting us and guiding us through the course. "
Anjay Mandalia, WOODGROUP . - GIAC GICSP (5 dagar) (4/9/2017 till 8/9/2017)

"A very informative and enjoyable experience."
I.M.. - GIAC GICSP (5 dagar) (4/9/2017 till 8/9/2017)

"5 Day GICSP is lead by an absolutely brilliant instructor. His wealth of knowledge is evident and his passion for the subject unmatched. He brought to life the training with real world scenarios and practical tips. I would strongly recommend this to any practitioner/aspiring professional within the ICS space."
L.S.. - GIAC GICSP (5 dagar) (4/9/2017 till 8/9/2017)

"Great teaching from skilled and experienced instructors."
Thomas Tronier-Rasmussen, DONG Energy Denmark. - GIAC GICSP (5 dagar) (13/3/2017 till 17/3/2017)

"Our instructor for GICSP was very knowledgeable and very experienced, and this experience added a lot of value to the training that we received at Wyboston Lakes. The venue itself is also very good and lends itself well to intensive training courses. By the end of the week, we had developed camaraderie among the class, and a high degree of confidence that we will be able to pass our certification exams in the near future."
Robert Barnes. - GIAC GICSP (5 dagar) (13/3/2017 till 17/3/2017)

"Good knowledge and experience on Cyber Security for ICS."
Anonym - GIAC GICSP (5 dagar) (21/11/2016 till 25/11/2016)

"Firebrand provided a first class course and testing centre and makes getting the certification very simple. Having both training and exam in a single centre was very helpful."
Anonym - GIAC GICSP (5 dagar) (21/11/2016 till 25/11/2016)

"Perfect!"
Anonym - GIAC GICSP (5 dagar) (21/11/2016 till 25/11/2016)

"Great course with big knowledge in a team of different experiences."
Anonym - GIAC GICSP (5 dagar) (21/11/2016 till 25/11/2016)

"Our Trainer was extremely knowledgeable, helpful and very good at explaining things. Facilities and accommodation very good. No complaints especially as I passed."
D.H, Northumbrian Water Ltd. - GIAC GICSP (5 dagar) (13/6/2016 till 17/6/2016)

"The real world experience from the instructor proves invaluable - a lot to learn not just about passing the exam"
Nicolas Goupil. - GIAC GICSP (5 dagar) (13/6/2016 till 17/6/2016)

"This was my first experience with Firebrand and it went really well. The course was really intense and we were going through a lot. One thing, I would like to mention is that you should have a good and solid knowledge prior to taking this course, purely due to volume of material you have to go through. Facilities and Environment was really good. You have all the tools that you need to make it a successful training. Instructor was really knowledgeable and had lots of hands on experience. Definitely recommend to anyone."
D.I.. - GIAC GICSP (5 dagar) (7/9/2015 till 11/9/2015)

"Firebrand Training is the best training centre ever! I have experienced extended help from my instructor when I decided not to sit for my exam due to a health problem, and was able to encourage me on when I should sit and pass my exam. Firebrand can help you to find the hiding talent you have."
Zaituni Mmari, eProcess international S.A (ECOBANK GROUP). - GIAC GICSP (5 dagar) (7/9/2015 till 11/9/2015)

"Excellent facility, instruction and accommodation. Felt well prepared for the exam although it is important to remember to attend to the pre-requisites before arriving. Thanks for an immersive and successful week."
T.R., E.ON UK. - GIAC GICSP (5 dagar) (7/9/2015 till 11/9/2015)

"Great training facility and as long as you're willing to put the work in, you will get value from any Firebrand course."
P.A, Chemring Technology Solutions. - GIAC GICSP (5 dagar) (26/1/2015 till 30/1/2015)

"Excellent facilities and course diversity. Instructor was again excellent and the boot camp style of learning beneficial to my learning style."
E.B, Chemring Technology Solutions. - GIAC GICSP (5 dagar) (26/1/2015 till 30/1/2015)

"bra kursmaterial, bra larare!"
kenneth zingmark, proditum. - Microsoft Dynamics NAV 2016 Financials (5 dagar) (27/6/2016 till 1/7/2016)

"Mycket seriöst utbildning och mycket kompetent utbildare. "
Peter Louring, Nordic NAV AB. - Microsoft Dynamics NAV 2016 Financials (5 dagar) (27/6/2016 till 1/7/2016)

"Koncentrerad och fokuserad presentation av ämnet samt kompetent (och tålmodig föreläsare gav en bra bas för ytterligare fördjupning i ämnet."
Ulrika Lantz, Sogeti Sverige AB. - Microsoft Dynamics AX 2012 R3 Trade & Logistics (5 dagar) (27/6/2016 till 1/7/2016)

"Bra med intensiva dagar. Trevlig personal och forelasare. "
I.R.. - Microsoft Dynamics AX 2012 HRM (3 dagar) (13/6/2016 till 15/6/2016)

"Bra kurs pa ratt niva for alla deltagare, aven fast vi har olika utgangspunkter och och tidigare erfarenhet. Kravande, men det visste vi innan :) Jattebra boende, mat osv."
Anna-Karin Normelli Callhammar, SDC. - Microsoft Dynamics AX 2012 HRM (3 dagar) (13/6/2016 till 15/6/2016)

"Bra koncept som sparar tid. Inga dagliga resor mellan hotell och utbilldningslokal."
Anonym - Microsoft Upgrading your skills to Windows Server 2016 (3 dagar) (13/6/2016 till 15/6/2016)

"Fantastisk lärare, med stor kunskap, insikt och förmåga att fånga ens fokus genom långa lektionspass."
Anonym - ISACA CISA Certifiering (4 dagar) (8/6/2016 till 10/6/2016)

"Mycket bra. Väldigt kompetent larare"
Anonym - Microsoft Dynamics AX 2012 Development - Introduction (4 dagar) (22/5/2016 till 25/5/2016)

"Koncentrerad utbildning med bra nivå på trainer."
S.L.. - ISACA CISM Certifiering (4 dagar) (9/5/2016 till 12/5/2016)

"Utmärkt lärare, bra mat, bra ställe."
Patrik Bryland, Centric. - Microsoft MCTS System Center 2012 Configuration Manager (4 dagar) (3/5/2016 till 6/5/2016)

"Mkt bra lärare! Pratar tydligt och intresseväckande."
Fredrik Sundén, ATEA. - Microsoft MCTS System Center 2012 Configuration Manager (4 dagar) (3/5/2016 till 6/5/2016)

"Fullt fokus på ämnet under alla vakna timmar på dygnet."
A.W.. - Microsoft MCTS System Center 2012 Configuration Manager (4 dagar) (3/5/2016 till 6/5/2016)

"Fina och bra lokaler. En mycket bra instruktör som utvecklade sina svar mycket väl."
Mikael Ahokas, Telecomputing. - Microsoft MCSA: Office 365 (5 dagar) (15/2/2016 till 19/2/2016)

"Bra, kunnig lärare som hanterar att lära ut i högt tempo. Bra lokaler med trevlig personal och en restaurang med jättegod mat!"
Anonym - Microsoft MCSA: Windows Server 2012 R2 (9 dagar) (9/4/2016 till 17/4/2016)

"Lärorik, Intensiv och mycket givande. "
Kaveh Hoodeh, Atea Sverige AB. - EC-Council Certified Ethical Hacker (CEH) (5 dagar) (11/4/2016 till 15/4/2016)

"Intensivt men bra."
Anonym - EC-Council Certified Ethical Hacker (CEH) (5 dagar) (11/4/2016 till 15/4/2016)

"Very helpful staff at the site and a very knowledgeable instructor."
Jordan Mowat, Intergraph. - ISTQB Firebrand's Training for ISTQB's Advanced Test Manager Certification (3 dagar) (9/3/2016 till 11/3/2016)

"Ett mycket bra utbildningsätt, komma bort från arbetsplatsen och störningsmoment för att kunna fokusera 100% på kursen. Ingen dötid utan fullfart helatiden."
Patrik Landberg , Tieto. - Microsoft MCSA: Office 365 (5 dagar) (15/2/2016 till 18/2/2016)

"Intressant ämne och superbra lärare."
Anonym - EC-Council Certified Ethical Hacker (CEH) (5 dagar) (1/2/2016 till 5/2/2016)

"Mycket väl planerat och genomfört"
Jan Karlsson, Ingen, tyvarr. - Microsoft Dynamics AX 2012 R3 Trade & Logistics (5 dagar) (25/1/2016 till 29/1/2016)

"Mycket bra faciliteter for andamalet. Väl använd tid. "
Anonym - Microsoft Dynamics AX 2012 R3 Trade & Logistics (5 dagar) (25/1/2016 till 29/1/2016)

"Fantastiskt!"
Daniel Zhang. - ITIL® v3 Foundation (ITIL 4) (2 dagar) (20/1/2016 till 21/1/2016)

"Bra anläggning och kurslokaler."
Anna Wibergh, EVRY. - Microsoft Dynamics Sure Step 2012 (2 dagar) (19/1/2016 till 20/1/2016)

"Bra upplagg och boende"
James Skallsjo, Nordea. - The Open Group TOGAF® 9.2 certified training (Level 1&2) (3 dagar) (18/1/2016 till 20/1/2016)

"Hogt tempo med bra larare. Valdigt bra mat"
Anonym - The Open Group TOGAF® 9.2 certified training (Level 1&2) (3 dagar) (18/1/2016 till 20/1/2016)

"Intensiva men intressanta dagar, god mat och mycket bra kursledare!"
Jan Olsson, 2conciliate Business Solutions AB. - The Open Group TOGAF® 9.2 certified training (Level 1&2) (3 dagar) (18/1/2016 till 20/1/2016)

"Bra"
Anonym - Cisco CCNA (Routing & Switching) (7 dagar) (11/1/2016 till 16/1/2016)