Rapid CyberOps
Published by O'Reilly Media, Inc.
Attack, defend, and analyze using the command line
Security professionals have many choices for operations and incident response software applications, but none match the availability, flexibility, and agility of the command line. The standard command line, especially bash, is an invaluable asset for conducting cybersecurity operations. Many tools of the trade such as Metasploit, Nmap, and Snort require command-line proficiency simply to use them. During penetration testing, your only option may be to use a command-line interface when interacting with a target system, particularly in the early stages of an intrusion.
Join experts Paul Troncone and Carl Albing to learn to master the command line, so you’ll be able to rapidly create and prototype complex capabilities with as little as a single line of pipelined commands.
What you’ll learn and how you can apply it
By the end of this live online course, you’ll understand:
- Why the command line is a critical skill for cybersecurity practitioners Options for running commands and scripts in Linux and Windows
- How to analyze data and defend information systems using the command line
- How to use bash to enhance the command line and expand your toolkit
And you’ll be able to:
- Run commands across platforms
- Create one-liners to search for and analyze data
- Develop scripts to automate cybersecurity tasks
This live event is for you because...
- You’re a network administrator.
- You’re a cybersecurity practitioner looking to develop skills in the command line and bash.
- You’re a student focused on cybersecurity.
Prerequisites
- Familiarity with simple command lines (commands, I/O redirection, pipeline of commands)
- A basic understanding of cybersecurity
Recommended preparation:
- A machine with Git installed
Recommended follow-up:
- Read bash Cookbook (book)
- Read Cybersecurity Ops with bash (book)
- Watch Great Bash (video, 4h 25m)
Schedule
The time frames are only estimates and may vary according to how the class is progressing.
Introduction (5 minutes)
- Lecture: Overview; cybersecurity and the command line; running commands across platforms
Analyze (40 minutes)
- Lecture: One-liners—slicing and dicing data with the command line; scripts—detecting anomalies and displaying information
- Group exercises
- Q&A
Defend (40 minutes)
- Lectures: One-liners—Searching for data and activity; scripts—baseline creation and comparisons
- Group exercises
- Q&A
Break (5 minutes)
Attack (30 minutes)
- Lecture: Script obfuscation; sockets and the one-line backdoor
- Q&A
Your Instructors
Paul Troncone
Paul Troncone founded the Digadel Corporation, where he performs independent cybersecurity and software development. He has 20 years of experience in the cybersecurity and information technology fields and is a Certified Information Systems Security Professional. Paul has served in a variety of roles, including vulnerability analyst, software developer, penetration tester, and college professor. He earned a BA in computer science from Pace University and an MS in computer science from the Tandon School of Engineering at New York University (formerly Polytechnic University).
Carl Albing
Carl Albing is a research professor in the Data Science and Analytics Group at the Naval Postgraduate School. He’s a teacher, researcher, and software engineer with a breadth of industry experience. A coauthor of bash Cookbook (O’Reilly), he’s worked in software for companies large and small, across a variety of software industries. He recently spent time in academia as a distinguished visiting professor in the Department of Computer Science at the US Naval Academy, where he taught courses on programming languages, compilers, high-performance computing, and advanced shell scripting. He has a BA in mathematics, a master of international management (MIM), and a PhD in computer science.