Key Techniques System Administrators Use to Find Hackers In Their Systems (Also known as "Detecting the Wily Hacker")

This course and continuing updates give system administrators up-to-date tools and techniques to illuminate evidence of potentially malicious activity on their systems and to look deeper to determine whether problems are real. It uses hands-on exercises to ensure sysadmins are comfortable using the tools. Because attack vectors are constantly changing, the program does not stop with the first class, but continues with quarterly updates that illuminate the newest attacks and how the lessons they learned before would be adjusted to target the newest attacks. Because attackers are increasingly focusing on database and application software, the program will also include a growing library of up-to-date modules on finding hackers in specific software applications and Web sites. The order of development of the additional modules will be determined by a vote of the system administrators who are active in the program.

This course is not designed to make a sysadmin into a security geek. Rather, it will help sysadmins better understand how they can do what is required by security teams and auditors without wasting a lot of time. The course also has a strong focus on tools and techniques that system administrators need to meet audit and security requirements as efficiently as possible.

In other words, this class provides the tools and techniques that help sysadmin teams meet the needs of security and audit teams -- and still do their day jobs.