دوره SANS SEC 48

دوره SEC487: Open-Source Intelligence (OSINT) Gathering and Analysis

This is a foundational course in open-source intelligence (OSINT) gathering and, as such, will move quickly through many areas of the field. While the course is an entry point for people wanting to learn about OSINT, the concepts and tools taught are far from basic. The goal is to provide the OSINT groundwork knowledge for students to be successful in their fields, whether they are cyber defenders, threat intelligence analysts, private investigators, insurance claims investigators, intelligence analysts, law enforcement personnel, or just someone curious about OSINT.

Many people think using their favorite Internet search engine is enough to find the data they need and do not realize that most of the Internet is not indexed by search engines. SEC487 teaches students effective methods of finding these data. You will learn real-world skills and techniques that law enforcement, private investigators, cyber attackers, and defenders use to scour the massive amounts of information found on the Internet. Once you have the information, we’ll show you how to ensure that it is corroborated, how to analyze what you’ve gathered, and how to make sure it is useful in your investigations.

You will learn OSINT by completing more than 20 hands-on exercises using the live Internet and dark web.

پیش نیاز دوره

• This course will teach you techniques to help your work whether you are trying to find suspects for a legal investigation, identify candidates to fill a job position                                                                  gather hosts for a penetration test, or search for honey tokens as a defender.

   While this list is far from complete, the OSINT topics in SEC487 will be helpful to: 

  • Cyber Incident Responders
  • Digital Forensics (DFIR) analysts
  • Penetration Testers
  • Social Engineers
  • Law Enforcement
  • Intelligence Personnel
  • Recruiters/Sources
  • Private Investigators
  • Insurance Investigators
  • Human Resources Personnel
  • Researcher

مخاطبین دوره sec487

• تحلیل‌گران Forensics
• هکرهای قانونمند
• کارشناسان امنیت
• مدیران امنیت اطلاعات
• کارشناسان واحد پاسخگویی به حوادث
• کارشناسان واحد مرکز عملیات امنیت

مزایای دوره

• ارائه مدرک معتبر
• برگزاری دوره ها بصورت کاملا عملی
• استفاده از لابراتور مجهز
• استفاده از برترین اساتید داخلی و با مدرک بین المللی
• با توجه به حضور گروه دوران در بیش از 1000 پروژه سازمانی، امکان معرفی دانشجویان دوره به بازار کار مرتبط به دوره ها
• تخفیف جهت حضور در دوره های بعدی
• دريافت مدرک بين المللی مرتبط

سرفصل دوره SEC487: Open-Source Intelligence (OSINT) Gathering and Analysis

  SEC487.1: Foundations of OSINT

• Course Introduction
• Understanding OSINT
• Goals of OSINT Collection
• Diving into Collecting
• Taking Excellent Notes
• Determining Your Threat Profile
• Setting up an OSINT Platform
• Effective Habits and Process
• Leveraging Search Engines

  SEC487.2: Gathering, Searching, and Analyzing OSINT

• Data Analysis Challenges
• Harvesting Web Data
• File Metadata Analysis
• OSINT Frameworks
• Basic Data: Addresses and Phone Numbers
• Basic Data: Email Addresses
• User Names
• Avatars and Reverse Image Searches
• Additional Public Data
• Creating Sock Puppets

  SEC487.3: Social Media, Geolocation, and Imagery

• People Search Engines
• Exercise People Searching
• Facebook Analysis
• LinkedIn Data
• Instagram
• Twitter Data
• Geolocation
• Imagery and Maps

  SEC487.4: Networks, Government, and Business

• Whois
• IP Addresses
• DNS
• Finding Online Devices
• Wireless Networks
• Recon Tool Suites and Frameworks
• Government Data
• Researching Companies

  SEC487.5: The Dark Web, Breach Data, and International Issues

• The Surface, Deep, and Dark Webs
• The Dark Web
• Freenet
• I2P – Invisible Internet Project
• Tor
• Monitoring and Alerting
• International Issues
• Vehicle Searches
• Solo CTF Challenge

  SEC487.6: Capstone: Capture (and Present) the Flag

• Capstone Capture-the-Flag Event

دوران آکادمی زیر مجموعه گروه دوران، مجری برگزاری دوره SANS SEC 487 در قالب آموزش امنیت به صورت آموزش آنلاین و حضوری با بهره گیری از لابراتور آنلاین اختصاصی بهمراه گواهی معتبرارائه می‌شود.