Kaspersky Discount

SANS Special Webcast: Why Security Awareness Matters - 1st in Series

There's still a ton of SANS Webcasts I haven't been through, it's like a treasure trove of CPEs! This one seemed appropriate for Cyber Security Awareness Month. I did this one the other day. It will give a certificate in your SANS account.

Here's the link:
https://www.sans.org/webcasts/security-awareness-matters-1st-series-95534

It's Cyber Security Awareness Month!

SANS is doing a couple free Webcasts, and you can find a few on the main site of http://www.staysafeonline.org as well. If you know of anyplace to promote Cyber Security Awareness Month, please do so!

Here's the link to the ISC publication:
https://isc.sans.edu/diary.html?storyid=14200

SANS Special Webcast: Introduction to Malware Analysis: Turn Malware Inside Out!

A quick CPE for you all today. We've all been to the SANS Archives many times, but I thought this one was pretty good!

Webcast: 
Special Webcast: Introduction to Malware Analysis: Turn Malware Inside Out!
Here's the link:
https://www.sans.org/webcasts/introduction-malware-analysis-turn-malware-out-95490

InfoSecurity Professional Issue #19 Quiz

This links to all issues of their magazine:

https://www.isc2.org/infosecurity_professional/default.aspx

Here's what I did:

Apply CPE to Credential/Concentration: CISSP

Domain for CPE Credit: CISSP - Multiple Domains (Group A)

Activity Start Date: 06/07/12

CPE Type: (ISC)2's InfoSecurity Professional Magazine Quiz

Magazine issue: #18

Free OWASP Online Course

I received an email from isc2 that had the following CPE opportunity in it. I haven't yet tried this since I'm gearing up for a big test, so feel free to comment and let everyone know how it goes!

After a successful launch with (ISC)², Security Compass is pleased
to announce that we will continue hosting the OWASP Top 10 course,
free on our website.
Click here to access the free OWASP course.

What you’ll learn:

• Discover vulnerabilities around the OWASP Top 10 in Security Compass’s easy-to-understand training style applicable to beginners and experts.
• Understand what hackers look for in your web applications including how to defend these threats from a security perspective.
• Learn how organizations have been affected in our Newsflashes and understand security concepts in a relatable manner.
• Earn CPE credits for watching the course.*

Course topics include:

• Injection
• Cross-Site Scripting (XSS) 
• Broken Authentication and Session Management
• Insecure Direct Object References
• Cross-Site Request Forgery (CSRF)
• Security Misconfiguration
• Insecure Cryptographic Storage
• Failure to Restrict URL Access
• Insufficient Transport Layer Protection
• Unvalidated Redirects and Forwards

About Security Compass:
Security Compass is an industry-leading information security firm that provides professional services and training to security-conscious companies. We bring extensive, internationally recognized, cross-industry experience to every client engagement. To our clients, we’re not simply an information security company - we are trusted partners in the development of secure software.

Learn more about Security Compass. 

*You must submit the CPEs yourself through the (ISC)² Member website.

Here's the link:
http://securitycompass.com/computer-based-training/

New IASE Training - Smartphones and Tablets

New training course on the IASE (Information Assurance Support Environment) site. I haven't taken it yet, just saw it and wanted to throw it out there.

Here's the link:

http://iase.disa.mil/eta/smartphone_tablet_v1/launchpage.htm

InfoSecurity Professional Issue #18 Quiz

This links to all issues of their magazine:

https://www.isc2.org/infosecurity_professional/default.aspx

Here's what I did:

Apply CPE to Credential/Concentration: CISSP

Domain for CPE Credit: CISSP - Multiple Domains (Group A)

Activity Start Date: 06/07/12

CPE Type: (ISC)2's InfoSecurity Professional Magazine Quiz

Magazine issue: #18

Windows Server 2012: Preparing for the Datacenter Evolution

Here's a good chance for some Group B CPE's!

Microsoft Jump Start Series
Windows Server 2012:
Preparing for the Datacenter Evolution
Windows Server 2012 Jump Start Details
Course: “Windows Server 2012: Preparing for the Datacenter Evolution”
Date/Time: June 20-21, 2012 from 9:00am – 4:00pm PST
Where: Live virtual classroom (online from wherever you are)
Cost: FREE!
Target audience: IT Professionals and IT Decision Makers

Here's the link:
http://mctreadiness.com/MicrosoftCareerConferenceRegistration.aspx?pid=323&WT.mc_id=Cloud_MSL_MCPFlash_May

COURSE OUTLINE
Day 1 Morning: Beyond Virtualization
• Learn about the game changers in the next release of the Hyper-V role on Windows Server 2012
     - Scale, CPU, RAM, Cores, etc.
     - Networking Switch (recorded demo hopefully)
     - NUMA and performance
     - Hyper-V over SMB and Hyper-V over RDMA
     - Replication
     - Shared Nothing Live Migration
     - Live Storage Migration
     - Moving VM from test to a production cluster without downtime
• Massive scale increases, networking improvements, replication and disaster recovery is all in the box
     - IP Address Virtualization
     - IP Address Virtualization with SCVMM 2012 SP1
Day 1 Afternoon: Manageability
• Learn about how you can manage a few systems up to a hundred systems – all from one console
     - Server Manager
     - DAC… and related topics
     - Installing roles in offline VHDs
• Server Core installs scaring you off? Learn about all your installation and management options
     - Moving from Core-MiniShell-Full UI and back again
• Windows PowerShell automation and management at scale – all with built in tools
     - PowerShell ISE and command simplification
     - PowerShell new features and new PowerShell replacements for common commands
     - Automating OS level tasks, IP addresses, etc.
• Clustering—Cluster-aware updating
• Networking
     - Network Teaming and network configuration
     - SMB MultiChannel and RDMA
Day 2 Morning: Storage
• Learn how Continuous Availability of File Services improves workload reliability and performance
     - Setup HA File Server; SMB Failover
     - Running SQL over SMB; Running Hyper-V over SMB
• Storage groups, disk provisioning, iSCSI and SAN integration
     - Storage Spaces
     - Built-in ISCSI; Boot from ISCSI
     - DeDup
     - Windows Online Backup
Day 2 Afternoon: Remote Users
• Remote connectivity options for your workforce
     - DA; Offline Domain Join and DA
     - DA simplified Setup; Possible DA Multi-Site
• VDI and Remote Desktop Services deployment and changes
      - User level disks
     - Pooled / Private VDI Setup
     - VDI Quick Setup
     - Multi-Touch RDP

Free Security Software (After Rebate)

Some free security software from newegg.com!





bitdefender Total Security 2012 - 3 User (Expires 5/23/12)

TREND MICRO Titanium Maximum Security - 3 PCs (Free 4GB flash drive w/ purchase, limited offer )(Expires 5/30/12)

 McAfee Total Protection 2012 - 3 PCs (Expires 5/30/12)

Phishing Awareness Version 2.0

There's a new version of DoD's Phishing Awareness Online Class out. I haven't yet taken it, just saw it this morning. If it's like the last one, it's an easy CPE for a lunchtime break! (Or if you're just required to do it)

Here's the link:
http://iase.disa.mil/eta/phishing_v2/phishing_v2/launchPage.htm

FEMA's Emergency Management Institute

FEMA's Emergency Management Institute has a lot of free courses you can take online, complete with test! I'm not sure if you can get a certificate from them (Update 5Jun12 - Looks like one reader did get a certificate from this course. Thanks AY!), but it looks like they would be some great disaster recovery CPE's!

Here's their link:
http://training.fema.gov/IS/NIMS.asp

If anyone completes one, please let me know if you get a certificate or transcript or something!

Thanks to Russ McRee and the SANS ISC for this one, check out his journal entry here:
https://isc.sans.edu/diary/Emergency+Operations+Centers+Security+Incident+Management+A+Correlation/13030

DOD Intrusion Detection System IDS Analysis Part 2

The IASE Released a new training module, though I haven't been through it yet. Let me know how it goes!

Here's the link:
http://iase.disa.mil/eta/ids-part2/ids_part2/launchpage.htm

InfoSecurity Professional Issue #17 Quiz

This links to all issues of their magazine:
https://www.isc2.org/infosecurity_professional/default.aspx


Here's what I did:
Apply CPE to Credential/Concentration: CISSP
Domain for CPE Credit: CISSP - Multiple Domains (Group A)
Activity Start Date: 04/11/2012
CPE Type: (ISC)2's InfoSecurity Professional Magazine Quiz
Magazine issue: #17

Free A+ Practice Tests

I know this is only very loosely related to CPEs, but you can use CPE for self study, and if you're self studying for the A+, use these free practice tests to help you!

Here's the link:
http://www.examforce.com/offer/free-comptia-a-practice-exam-bundle-2

ISC2's SecurityTALK

Plenty of Webcasts to choose from. I'm not sure if they'll give you a certificate or not, I haven't had time to do one yet! If someone can email me to let me know, please do so and I'll update this thing!

Here's the link:
https://www.isc2.org/SecurityTALK.aspx

Here's the info from their page:
SecurityTALK
Industry Knowledge at Your Fingertips
SecurityTALK is a searchable library of presentations and documents directly related to information security. From one convenient location, you have access to the following resources:
(ISC)² Online Events: e-Symposium webcasts and ThinkTank webinars
Industry Presentations: webcasts, webinars and podcasts on a variety of industry topics 
Industry Research: research and whitepapers pertaining to information security
CPEs
You can earn CPEs by reviewing some of the materials in this media channel. To determine which resources are available for credit(s), refer to the (ISC)2 CPE Policies & Guidelines.
Submit Your Presentation or Research
Help this valuable site grow! You can offer your industry knowledge and expertise and make it available to your peers here.
See our SecurityTALK Submission Guidelines.
Check back often to keep up-to-date with what's happening in your industry.

Free Security Software (After Rebate)

Free After Rebate items from Newegg.com. Free Security is always awesome security!

KASPERSKY lab Anti-virus 2012 - 1 User

McAfee Internet Security 2012 - 3 PCs

DoD Designated Accrediting Authority (DAA) v9.0 Training

Just updated on the DISA Site! An easy CPE or two here. I have yet to take it, kind of busy this morning, but just wanted to get it out there.

Here's the link:
http://iase.disa.mil/eta/daav9/daav9/launchpage.htm

Someone let me know how long it took and I'll update the post!

Free After Rebate - Kaspersky Anti-Virus and Norton Ghost from Newegg!

Click to go to Newegg.com!

Click to go to Newegg.com!

ISC2 Need to Knows for Security Managers 10 part Series

Nice stack of information here! Sign up! Not sure of the CPE potential yet...

Here's the link:

https://www.isc2.org/need-to-knows/Default.aspx