SANS Special Webcast: Why Security Awareness Matters - 1st in Series

There's still a ton of SANS Webcasts I haven't been through, it's like a treasure trove of CPEs! This one seemed appropriate for Cyber Security Awareness Month. I did this one the other day. It will give a certificate in your SANS account.

Here's the link:
https://www.sans.org/webcasts/security-awareness-matters-1st-series-95534

SANS Special Webcast: Introduction to Malware Analysis: Turn Malware Inside Out!

A quick CPE for you all today. We've all been to the SANS Archives many times, but I thought this one was pretty good!

Webcast: 
Special Webcast: Introduction to Malware Analysis: Turn Malware Inside Out!
Here's the link:
https://www.sans.org/webcasts/introduction-malware-analysis-turn-malware-out-95490

InfoSecurity Professional Issue #19 Quiz

This links to all issues of their magazine:

https://www.isc2.org/infosecurity_professional/default.aspx

Here's what I did:

Apply CPE to Credential/Concentration: CISSP

Domain for CPE Credit: CISSP - Multiple Domains (Group A)

Activity Start Date: 06/07/12

CPE Type: (ISC)2's InfoSecurity Professional Magazine Quiz

Magazine issue: #18

Free OWASP Online Course

I received an email from isc2 that had the following CPE opportunity in it. I haven't yet tried this since I'm gearing up for a big test, so feel free to comment and let everyone know how it goes!

After a successful launch with (ISC)², Security Compass is pleased
to announce that we will continue hosting the OWASP Top 10 course,
free on our website.
Click here to access the free OWASP course.

What you’ll learn:

• Discover vulnerabilities around the OWASP Top 10 in Security Compass’s easy-to-understand training style applicable to beginners and experts.
• Understand what hackers look for in your web applications including how to defend these threats from a security perspective.
• Learn how organizations have been affected in our Newsflashes and understand security concepts in a relatable manner.
• Earn CPE credits for watching the course.*

Course topics include:

• Injection
• Cross-Site Scripting (XSS) 
• Broken Authentication and Session Management
• Insecure Direct Object References
• Cross-Site Request Forgery (CSRF)
• Security Misconfiguration
• Insecure Cryptographic Storage
• Failure to Restrict URL Access
• Insufficient Transport Layer Protection
• Unvalidated Redirects and Forwards

About Security Compass:
Security Compass is an industry-leading information security firm that provides professional services and training to security-conscious companies. We bring extensive, internationally recognized, cross-industry experience to every client engagement. To our clients, we’re not simply an information security company - we are trusted partners in the development of secure software.

Learn more about Security Compass. 

*You must submit the CPEs yourself through the (ISC)² Member website.

Here's the link:
http://securitycompass.com/computer-based-training/

New IASE Training - Smartphones and Tablets

New training course on the IASE (Information Assurance Support Environment) site. I haven't taken it yet, just saw it and wanted to throw it out there.

Here's the link:

http://iase.disa.mil/eta/smartphone_tablet_v1/launchpage.htm

InfoSecurity Professional Issue #18 Quiz

This links to all issues of their magazine:

https://www.isc2.org/infosecurity_professional/default.aspx

Here's what I did:

Apply CPE to Credential/Concentration: CISSP

Domain for CPE Credit: CISSP - Multiple Domains (Group A)

Activity Start Date: 06/07/12

CPE Type: (ISC)2's InfoSecurity Professional Magazine Quiz

Magazine issue: #18

Phishing Awareness Version 2.0

There's a new version of DoD's Phishing Awareness Online Class out. I haven't yet taken it, just saw it this morning. If it's like the last one, it's an easy CPE for a lunchtime break! (Or if you're just required to do it)

Here's the link:
http://iase.disa.mil/eta/phishing_v2/phishing_v2/launchPage.htm

FEMA's Emergency Management Institute

FEMA's Emergency Management Institute has a lot of free courses you can take online, complete with test! I'm not sure if you can get a certificate from them (Update 5Jun12 - Looks like one reader did get a certificate from this course. Thanks AY!), but it looks like they would be some great disaster recovery CPE's!

Here's their link:
http://training.fema.gov/IS/NIMS.asp

If anyone completes one, please let me know if you get a certificate or transcript or something!

Thanks to Russ McRee and the SANS ISC for this one, check out his journal entry here:
https://isc.sans.edu/diary/Emergency+Operations+Centers+Security+Incident+Management+A+Correlation/13030

DOD Intrusion Detection System IDS Analysis Part 2

The IASE Released a new training module, though I haven't been through it yet. Let me know how it goes!

Here's the link:
http://iase.disa.mil/eta/ids-part2/ids_part2/launchpage.htm

InfoSecurity Professional Issue #17 Quiz

This links to all issues of their magazine:
https://www.isc2.org/infosecurity_professional/default.aspx


Here's what I did:
Apply CPE to Credential/Concentration: CISSP
Domain for CPE Credit: CISSP - Multiple Domains (Group A)
Activity Start Date: 04/11/2012
CPE Type: (ISC)2's InfoSecurity Professional Magazine Quiz
Magazine issue: #17

Free A+ Practice Tests

I know this is only very loosely related to CPEs, but you can use CPE for self study, and if you're self studying for the A+, use these free practice tests to help you!

Here's the link:
http://www.examforce.com/offer/free-comptia-a-practice-exam-bundle-2

ISC2's SecurityTALK

Plenty of Webcasts to choose from. I'm not sure if they'll give you a certificate or not, I haven't had time to do one yet! If someone can email me to let me know, please do so and I'll update this thing!

Here's the link:
https://www.isc2.org/SecurityTALK.aspx

Here's the info from their page:
SecurityTALK
Industry Knowledge at Your Fingertips
SecurityTALK is a searchable library of presentations and documents directly related to information security. From one convenient location, you have access to the following resources:
(ISC)² Online Events: e-Symposium webcasts and ThinkTank webinars
Industry Presentations: webcasts, webinars and podcasts on a variety of industry topics 
Industry Research: research and whitepapers pertaining to information security
CPEs
You can earn CPEs by reviewing some of the materials in this media channel. To determine which resources are available for credit(s), refer to the (ISC)2 CPE Policies & Guidelines.
Submit Your Presentation or Research
Help this valuable site grow! You can offer your industry knowledge and expertise and make it available to your peers here.
See our SecurityTALK Submission Guidelines.
Check back often to keep up-to-date with what's happening in your industry.

DoD Designated Accrediting Authority (DAA) v9.0 Training

Just updated on the DISA Site! An easy CPE or two here. I have yet to take it, kind of busy this morning, but just wanted to get it out there.

Here's the link:
http://iase.disa.mil/eta/daav9/daav9/launchpage.htm

Someone let me know how long it took and I'll update the post!

Tons of Free courses at MIT OpenCourseWare (OCW)

I see lots upon lots of Free CPEs here!! (Now I just have to find the time to do them...)

Here's the link:

http://ocw.mit.edu/courses/

IA Training Classroom site

Many classes available for US Government, US Military, and Contractors via the new IA Training Classroom site. Good luck!

Here's the link: (*NOTE* You must have a CAC to view)
https://powhatan.iiie.disa.mil/classroom_training/index.html

InfoSecurity Professional Issue #16 Quiz

An easy 2 CPEs today!

This links to all issues of their magazine:
https://www.isc2.org/infosecurity_professional/default.aspx

Here's what I did:
Apply CPE to Credential/Concentration: CISSP
Domain for CPE Credit: CISSP - Multiple Domains (Group A)
Activity Start Date: 12/16/2011
CPE Type: (ISC)2's InfoSecurity Professional Magazine Quiz
Magazine issue: #16

SANS: How Attackers Exploit Modern, Secure Wireless Networks

Another awesome webcast here! (You also get a certificate in your SANS account)

The Link is here:
https://www.sans.org/webcasts/attackers-exploit-modern-secure-wireless-networks-94724

Here's what I did:
Domain: CISSP - Multiple Domains (Group A)
CPE Type: CBT
Course Name: SANS: How Attackers Exploit Modern, Secure Wireless Networks
Number of hours: 1

DoD Information Assurance Awareness version 10.0

DoD Information Assurance Awareness version 10.0

Updated course here, took about an hour.

The Link is here:
http://iase.disa.mil/eta/iaav10/index.htm

Here's what I did:
Domain: CISSP - Multiple Domains (Group A)
CPE Type: CBT
Course Name: DoD Information Assurance Awareness version 10.0
Number of hours: 1

Working with Snort

The CPEs I'm referring to today are (and aren't) free, unfortunately. I just recently got access to my SANS OnDemand class (SEC503: Intrusion Detection In-Depth) [http://www.sans.org/ondemand/description.php?tid=5016], and I wanted to learn some in-depth snort before entering that chapter of the class. To that end, I went and found some documentation on it.

So I'm thinking self study, outside the class, should be worth one or two type B credits, at least. However, there aren't many "official" webcasts to work with, so I threw up some VMs and have been tinkering around with Snort in my own learning way. Let me know if you think they'll be worth some credits, and I'll update this post!

Here's the link to the official documentation for Snort:
http://www.snort.org/community/snort-webcast-series/
http://www.snort.org/docs

Microsoft Events/Virtual Labs

Just wanted to give away another source of bunches of CPEs! The description straight from their page: "The Microsoft Events contains technical Webcasts, Podcasts, Virtual Labs for a range of professionals using Microsoft products, tools and technologies. Choose a topic and refine your search with our Filter Tools."

So many free opportunities here!

Here's the link:
http://events.microsoft.com/