Evergreen Alliance Training Program for GIAC Security Essentials (GSEC)

Access Control & Password Management
You will learn the fundamental principles of access control and how passwords play a crucial role in managing access within a secure environment.

Container and macOS Security
You will gain an understanding of how to secure containers and explore the security features available in macOS.

Cryptography
You will acquire a basic understanding of cryptography, including the major types of cryptosystems and steganography techniques.

Cryptography Algorithms & Deployment
You will learn about the mathematical principles behind cryptography and recognize commonly used symmetric, asymmetric, and hashing cryptosystems.

Cryptography Application
You will understand the use, functionality, and operation of technologies like VPNs, GPG, and Public Key Infrastructure (PKI).

Data Loss Prevention and Mobile Device Security
You will explore the risks and impacts of data loss, as well as strategies for preventing it, alongside key security considerations for mobile devices.

Defense in Depth
You will learn the concept of defense in depth, identify critical areas of security, and apply strategies to implement effective security across an organization.

Defensible Network Architecture
You will understand how to design and implement network architectures that can be monitored and controlled to resist intrusions.

Endpoint Security
You will develop a basic understanding of endpoint security devices, such as endpoint firewalls, Host Intrusion Detection Systems (HIDS), and Host Intrusion Prevention Systems (HIPS).

Enforcing Windows Security Policy
You will gain an overview of Windows security features, such as Group Policy and INF security templates, to enforce security policies effectively.

Incident Handling & Response
You will understand the principles of incident handling, including processes for responding to security incidents.

Linux Fundamentals
You will gain knowledge of the Linux operating system’s structure, including its vulnerabilities and permission settings.

Linux Security and Hardening
You will learn techniques to gain visibility into Linux systems, allowing you to secure, audit, and harden them.

Log Management & SIEM
You will explore the importance of logging, the setup and configuration of logs, and how to analyze logs using Security Information and Event Management (SIEM) systems.

Malicious Code & Exploit Mitigation
You will understand common attack methods and basic defensive strategies to mitigate these threats.

Network Security Devices
You will learn about the functions and uses of network security devices, such as firewalls, Network Intrusion Detection Systems (NIDS), and Network Intrusion Prevention Systems (NIPS).

Networking & Protocols
You will gain insight into the properties and functions of network protocols and protocol stacks.

Security Frameworks and CIS Controls
You will learn about the CIS Critical Controls, NIST Cybersecurity Framework, and MITRE ATT&CK knowledge base, including their implementation and purpose.

Virtualization and Cloud Security
You will understand the risks associated with virtualization and cloud services, as well as how to secure these environments.

Vulnerability Scanning and Penetration Testing
You will learn the relationship between reconnaissance, resource protection, risks, threats, and vulnerabilities, including the basics of network mapping and penetration testing techniques.

Web Communication Security
You will understand web application security and common vulnerabilities such as CGI, cookies, SSL, and active content.

Windows Access Controls
You will explore how permissions are applied in the Windows NT File System, Shared Folders, Printers, Registry Keys, and Active Directory, as well as how privileges are assigned.

Windows as a Service
You will learn how to manage updates across a network of Windows hosts.

Windows Automation, Auditing, and Forensics
You will be introduced to the techniques and technologies used to audit and investigate Windows hosts.

Windows Security Infrastructure
You will understand the differences between Windows operating systems and how Windows manages user groups, accounts, Active Directory, and Group Policy.

Windows Services and Microsoft Cloud
You will learn how to secure Windows network services, including IPsec, IIS, Remote Desktop Services, and Microsoft Azure security features.

Wireless Network Security
You will gain an understanding of the misconceptions and risks associated with wireless networks, along with best practices for securing them.