CyberSec First Responder® – Advanced (CFR-A)

This course takes cybersecurity practice to the next level. It is an advanced experience that builds upon the defensive skills and knowledge taught by the CyberSec First Responder® (Exam CFR-410) course. It is an applied experience in that it almost entirely consists of hands-on exercises featuring many different tools and environments.

The “”A”” in CFR-A can also refer to the cybersecurity modes this course is built around:

• Attack: Simulating attacks on computing assets to test security measures and learn more about threat vectors.
• Analyze: Identifying, detecting, and assessing threats to learn more about how they operate and how they affect security.
• Address: Implementing countermeasures and other protections to mitigate the impact of threats to security.

Course Objective

• Get oriented to your tools and environment.
• Exploit vulnerabilities in software.
• Exploit vulnerabilities related to system access, networking, data, and file configurations.
• Analyze attacks using passive and active methods.
• Implement security protections to minimize the impact of attacks.

1 Getting Oriented to Your Tools and Environment

• Explore the CFR-A Activity Environment
• Perform Reconnaissance
• Simulate an Attack Using Metasploit

2 Exploiting Software Vulnerabilities

• Exploit Code-Execution and Injection Vulnerabilities
• Exploit Web-Application Vulnerabilities

3 Exploiting System Vulnerabilities

• Exploit Access Vulnerabilities
• Exploit Network Vulnerabilities
• Exploit Data Vulnerabilities
• Exploit File-Configuration Vulnerabilities

4 Analyzing Attack

• Analyze Logs for Signs of Attack
• Detect Attack Using Active Monitoring Systems
• Perform Digital Forensics

5 Protecting Assets

• Protect Data
• Protect Access
• Protect Software
• Protect Networks and Systems

The CFR-A assessment is primarily designed for cybersecurity practitioners in various red-team (offensive) or blue-team (defensive) roles who wish to validate their knowledge of advanced techniques for securing the organization and its assets. Other individuals who wish to validate advanced cybersecurity knowledge are also candidates for this assessment. 

To ensure your success in this course, you should have taken the CyberSec First Responder® (Exam CFR410) course and passed the associated exam.
This validates you have intermediate skills in working with the Linux® operating system; working at the command line; using fundamental cybersecurity tools like Nmap and Metasploit; and following an incident-response process—all of which are important to this course. And, it ensures you have foundational cybersecurity and networking knowledge. In addition, you should have some familiarity with computer programming and scripting. Expertise in writing code is not necessary, but you should be able to comprehend code at a high level, and follow the logic behind a script as it is explained to you. Knowledge of one particular programming language is not required. Python is fairly universal, especially among technology professionals who are not software developers by trade.
Logical Operations offers a couple Python courses that can help you obtain this experience: 

• Introduction to Programming with Python® 
• Advanced Programming Techniques with Python®