If you want more "demo" check out their latest metasploit videos.

I second that CEH was great and delivered what you need for the exam

Many congratulations to you, great achievement! One of these days I'll allocate time to following in your footsteps :)

@Scott-Hyman said:

EC council test 312-49

Scott,

According to https://cert.eccouncil.org/application-process-eligibility.html, there are two possible paths for eligibility.

In order to be eligible to attempt EC-Council CEH, CHFI v8 or ECSA v8 certification examination,
candidate may opt to :

Attend Official Training
If a candidate attends an official instructor-led training (ILT), computer-based training (CBT), online live training, or academic learning, candidate is eligible to attempt the relevant EC-Council exam.

Attempt Exam without Official Training
In order to be considered for the EC-Council certification exam without attending official
training, candidate must:

Have at least two years of information security related experience.

Educational Background that reflects specialization in information security.

Remit a non-refundable eligibility application fee of USD 100.00

Submit a completed Exam Eligibility Application Form.

Purchase an official exam voucher DIRECTLY from EC-Council through www.eccouncil.org/store.aspx

The official training means an authorized training provider. ITProTV is not at this time an Official Training Provider for the EC-Council. So this would put us into the 2nd of these categories.

Your options are limited by the EC-Council's requirements. You're going to pay for the* official training* or you're going to pay for the privilege of taking the exam!

Cordially,
Ronnie Wong
Host, ITProTV

Now I have a second, more-realistic pfSense firewall configured to put in place. Since it is an Athlon 144 I've installed the AMD64 build of 2.2.2, with Gb of PC3200 RAM, and a modest 160Gb HDD. The case is much smaller at 1U, and I plan to power it with a 12VDC source for the DSATX PSU I bought. I'm staying with four interfaces (WAN, LAN, 'ADMIN', and DMZ), I could actually transfer the configuration.

It may be in-place before the presentations, I haven't quite decided the change-out date...

Syslog and event management can grow into a large topic and ultimately lead into analytics and SIEM.

The original syslog daemon is syslog on linux, but most distributions come with rsyslog theses days and is very flexible in sorting and filtering messages. But it is all through the CLI.

If you want a UI to investigate logs then again there are lots of open source tools, to get started download security onion http://blog.securityonion.net/p/securityonion.html , install into a VM and have a look at ELSA.

You can also checkout LogStash as well, but it is a more involved install.

Then there are all the commercial offerings that you can look and a few give a freemium model.

Cheers

Dan

That's very helpful @Ben-Coyle , many thanks :+1: +1:

@D.-Rogers Thaks for those - some great mindmaps there. The SANS poster is pretty good for showing potential attack vectors to people too :+1:

I've not looked at these in depth but this guy has put together a pretty impressive list that he calls "Forensic Challenges."

http://www.amanhardikar.com/mindmaps/ForensicChallenges.html

I used a combination of self-study and on-the-job experience. I've been working in IT professionally for almost 20 years and a hobbyist for nearly 30. The CEH requirement that a candidate must show two years of work experience in a security related field is warranted. I've used and still use many of the tools as a white hat blue team defender.

Steve,

Thanks for request and I will add it to our official show request list to make sure we have it tracked and are able see the interest for it in the future! Thanks for article as well, I liked it.

Cordially,
Ronnie Wong
Host, ITProTV

I would like to echo quite a bit that has already been stated here. I was only able to catch one broadcast live, and enjoyed watching the discussion online as well as the actual lesson. The course surprised me with both how much I already knew and with how much I didn't know. That tells me it was the perfect class for me. This being said, I would be no where near ready to take the exam now, but will probably take it eventually.

Also, I said it in that specific thread already, but I must thank Michela once again for compiling the links as she did. That was a tremendous help. There were many times that it was mentioned that Mike was putting links in the discussion, but I have not tracked down a Q&A thread with those in there yet.

Thanks again for the course.

The notes for that episode are ready to go! Click the download link for the PDF.

Scott,

Thanks for the note on this, I know that we had an early forum post on this very same thing that I can no longer find. I will try to see if we can dig it up in the archives about this. If we haven't posted Show ERRATA for this, we will try and get them updated with the proper order.

Cordially,
Ronnie Wong
Host, ITProTV

Thanks! I thought I was going crazy :D

@Ken-Schuerman Good question.... I'd be very interested in hearing a response to this. I'd also like to suggest that perhaps ITPro could get an attorney to do a few episodes... Not just for CEH, but perhaps just IT in general? This would be beneficial to those that do independent contracting.

@donpezet Somehow I had posted this in the wrong area earlier... Just moving it here, where I intended to put it.

Thanks Michala!

Re Journal of physical security link, the site appears to be down but the papers are available on Slideshare here: http://www.slideshare.net/noham1887/documents

@rick-sidwell That's really useful information, thanks for sharing.