ОПИСАНИЕ НА ОБУЧЕНИЕТО
Програмата CSCU е предназначена за обучение на студентите по безопасната работа с компютри, устройства и мрежи чрез фокусиране върху практическите аспекти на мрежите и сигурност, което им позволява да разширят своите умения. Студентите ще развият фундаментално разбиране за компютрите, устройствата, и мрежова сигурност, включително кражба на самоличност, кредитни измами с карти, фишинг измами при онлайн банкиране, зловреден софтуер, загуба на на чувствителна информация и социално инженерство. Този сертификация е отлично допълнение към образователните за работещите с познания и крайните потребители, които се интересуват от да се превърнат в сигурни мощни потребители

Предварителни изисквания и знания които е необходимо да имате преди да започнете обучението:
Основни познания за компютри и компютърни устройства.
Тъй като това е основен курс, насочен към сертифициране на потребители на компютри и интернет, няма основни изисквания за участие. Всички, които използват електронна поща, сърфират в интернет, общуват в мигновени съобщения, актуализират страницата си във Facebook, пишат в Twitter, използват приложни програми на Microsoft и т.н., се насърчават да присъстват на тази програма

За кого е предназначено обучението:
Програмата за сертифициране на CSCU е предназначена за лица, които използват компютри и интернет, но не са запознати с въпросите на компютърната сигурност. Тази програма им дава по-добра представа за проблемите на сигурността, с които могат да се сблъскват редовно.

За какво ще ви помогне обучението:
Да получите знания и умения по теми като:
• Introduction to Security
• Securing Operating Systems
• Malware & Antivirus
• Internet Security
• Security on Social Networking Sites
• Securing Email Communications
• Securing Mobile Devices
• Securing the Cloud
• Securing Network Connections
• Data Backup & Disaster Recovery

Придобити знания и умения
Студентите ще се научат да:
Да идентифицират риска, свързан с различни киберзаплахи
Да прилагат сигурността на данните
Да защитават различни операционни системи
Да инсталират и конфигурират антивирусни програми
Да прилагат основни мерки за сигурност, когато са онлайн
Архивиране на данни и възстановяване при бедствия
Прилагане на различни мерки за сигурност на електронната поща
Предпазване на мобилни устройства от различни атаки
Защитават своите акаунти в облака
Защита на мрежовите връзки
Защита на iot устройства и конзоли за игри
Защита на работата от разстояние
Да прилагат подходящи мерки за сигурност, свързани с онлайн социалните мрежи

Защо е необходимо обучение за повишаване на осведомеността за киберсигурността?,
Ландшафт на заплахите - Ландшафтът на заплахите се променя постоянно и информираността за сигурността е нетрайно умение. Непрекъснатото обучение на вашите служителите си за нови и нововъзникващи заплахи създава по-сигурна служител и по-сигурна организация.
Нормативни изисквания - Регламенти като GLBA, PCI, HIPAA и др.
Sarbanes-Oxley изискват обучение за повишаване на осведомеността за сигурността, защото хората са все още са слабото звено в ИТ сигурността.
Политики за използване на собствени устройства (BYOD) - Вашата мрежа е по-малко защото вашите служители използват устройства и връзки, които са извън вашата политика за сигурност. BYOD изисква добра сигурност програма за обучение

C SCU V3 GOES BEYOND SECURITY AWARENESS VERSION 3 INCLUDES

1. Coverage on the latest Operating Systems
2. Latest Tools and Techniques to maximize security
3. Coverage on securing Gaming Consoles and IoT/Smart Home Devices
4. Techniques to secure Home Offices and Remote Work locations

Additional Material for Deeper Understanding

In addition to discussion questions, there are demo videos for the key
concepts of some modules, which explain how to implement certain
security measures in a detailed, step‐by‐step manner

These demonstration videos help students understand these
procedures better than just looking at some screenshots on the
screen.

в ДОПЪЛНЕНИЕ

Each module has a few discussion questions at
the end which enable to students to apply the
concepts learned in course to real life
scenarios. These questions help the instructor
gauge the level of understanding of the
students as well as help the students to
understand the real life applications of
concepts that they are learning

Знания и умения, които получават стиудентите след преминатото обучение:

Програмата за повишаване на осведомеността за сигурността на CSCU се фокусират основно върху Основи на компютърната сигурност.

След завършване на курса студентът ще знае как да:
да защитават различни операционни системи
Да създават резервни копия на данни и да извършват възстановяване при бедствия
да предпазват мобилните си устройства от различни атаки
да се запознае с атаките на социалното инженерство и кражбата на самоличност
да инсталира и конфигурира антивирусни програми
Разбират различни инциденти, свързани със сигурността
Разберете как да защитите своите акаунти в облака
Разбират различните проблеми със сигурността в сайтовете за социални мрежи

МОДУЛ 1: ВЪВЕДЕНИЕ В СИГУРНОСТТА НА ДАННИТЕ
МОДУЛ 2: ЗАЩИТА НА ОПЕРАЦИОННИТЕ СИСТЕМИ
МОДУЛ 3: ЗЛОВРЕДЕН СОФТУЕР И АНТИВИРУСНА ПРОГРАМА
МОДУЛ 4: ИНТЕРНЕТ СИГУРНОСТ
МОДУЛ 5: СИГУРНОСТ В САЙТОВЕТЕ ЗА СОЦИАЛНИ МРЕЖИ
МОДУЛ 6: ЗАЩИТА НА ИМЕЙЛ КОМУНИКАЦИИТЕ
МОДУЛ 7: ЗАЩИТА НА МОБИЛНИ УСТРОЙСТВА
МОДУЛ 8: ЗАЩИТА НА ОБЛАКА
МОДУЛ 9: ЗАЩИТА НА МРЕЖОВИТЕ ВРЪЗКИ
МОДУЛ 10: АРХИВИРАНЕ НА ДАННИ И ВЪЗСТАНОВЯВАНЕ СЛЕД БЕДСТВИЕ
МОДУЛ 11: ЗАЩИТА НА IOT УСТРОЙСТВА И ИГРАЛНИ КОНЗОЛИ
МОДУЛ 12: ЗАЩИТЕНА ДИСТАНЦИОННА РАБОТА

Who should get the C|SCU Certification?
Anyone interested in getting into the world of cybersecurity. Anyone who uses computers
and internet services, including the web, social media, email, messaging apps, etc. but is not
aware of computer security issues
There are no specific prerequisites for the C|SCU certification.

Exam Title: Certified Secure Computer User (CSCU)
Number of Questions: 50
Test Duration: 2 hours
Passing Score: 70%
Test Format: Multiple Choice
Exam Code: 112-12
Availability: EC-Council Exam Portal

Network Defense Essentials (NDE)

Описание на обучението:

Network Defense Essentials (NDE) е програма за сигурност, обхващаща основните концепции за мрежова сигурност. Тя дава на студентите необходимите умения за идентифициране на увеличаване на заплахите за сигурността на мрежата, които се отразяват върху състоянието на сигурността на организацията и прилагат общи контроли за сигурност за защита на основната мрежова инфраструктура от неоторизиран достъп, модификация , унищожаване или разкриване

Това е първият по рода си MOOC сертификат, който предоставя основни познания и умения за мрежова сигурност с добавени практически упражнения и лаборатории, необходими за добиване на практически опит. Курсът дава холистичен преглед на ключовите компоненти на информационната сигурност, като идентификация, удостоверяване и оторизиация, виртуализация и облачни изчисления, безжични мрежи, мобилни устройства и IoT  устройства и сигурност на данните. Компонентът за интерактивни лаборатории на този курс , гарантира че обучаемите получават практически опит необходим за бъдещето в киберсигурността.

Network Defense Essentials обхваща основните концепции за информационна сигурност  и мрежова защита . Този въвеждащ курс по киберсигурност е предназначен за съвременни кариери в областта на информационната сигурност или киберсигурността на начално ниво и е идеален за обучаеми които се стремят да имат кариера в киберсигурността.

Обучаемите сертрифицирани по NDE имат гарантирано средство за официалното признаване което да добавят към автобиографиите си и да покажат своя опит и умения пред бъдещи работодатели. Целта на сертифицирането NDE е да признае компетентността и експертния опит но професионалист в уменията за мрежова защита и информационна сигурност, като по този начин добави стойност към тяхното работно място и работодател.

Какво ще научите?
Студентите, преминали обучение за NDE, ще познават:
1. Ключови проблеми, затрудняващи мрежовата сигурност
2. Основни протоколи за мрежова сигурност
3. Концепции за идентификация, удостоверяване и оторизация
4. Контроли за сигурност на мрежата Административен контрол (Рамки, закони, актове и политики за сигурност) Физически контрол (контрол за физическа сигурност, сигурност на работното място и контрол на околната среда) Технически контроли (сегментиране на мрежата, защитна стена, IDS/IPS, honeypot, прокси сървър, VPN, SIEM, UBA и антиͲзловреден софтуер
5. Основи на виртуализацията, облачните изчисления и облачната сигурност
6. Основи на безжичната мрежа, безжично криптиране и мерки за сигурност
7. Основи на мобилните и IoT устройства и техните мерки за сигурност
8. Концепции за криптография и PKI Сигурност на данните, криптиране на данни и техники за архивиране и предотвратяване на загуба на данни
9. Мониторинг на мрежовия трафик за подозрителен трафик
10. Основи на виртуализацията, облачните изчисления и облачната сигурност.

Подходящи работни позиции са:

Local Area Network Specialist

Network Security analust

Network Technician

Network Administrator

Network Coordinator

Certification : Network Defence Essentials
Exam Length : 2 Hours
Exam Format : MCQ
No. of Questions: 75

NDE Exam Details

Exam Title


Network Defense Essentials (NDE)

Exam Code


112-51

Availability


EC-Council Exam Portal (please visit https://www.eccexam.com)

Duration 2 Hours
Questions 75
Passing Score 70%

1. Network Security Fundamentals

Fundamentals of network security
• Network security protocols that govern the flow of data

2. Identification, Authentication and Authorization

Access control principles, terminologies, and models
• Identity and access management (IAM)

3. Network Security Controls – Administrative Controls

Regulatory frameworks, laws, and acts
• Security policies, and how to conduct security and awareness
training

4. Network Security Controls –Physical Controls

Importance of physical security and physical security controls
• Physical security policies and procedures
• Best practices to strengthen workplace security
• Environmental controls
5. Network Security Controls –Technical Controls

Types of bastion hosts and their role in network security
• IDS/IPS types and their role in network defense
• Types of honeypots and virtual private networks (VPNs)
• Security incident and event management (SIEM

6. Virtualization and Cloud Computing

Key concepts of virtualization and OS virtualization security
• Cloud computing fundamentals and cloud deployment models
• Cloud security best practices

7. Wireless Network Security

Fundamentals of wireless networks and encryption
mechanisms
• Wireless network authentication methods
• Implementing wireless network security measures

8. Mobile Device Security

Mobile device connection methods and management
• Mobile use approaches in enterprises
• Security risks and guidelines associated with enterprise mobile
usage policies
• Implement various enterprise-level mobile security
management solutions
• Best practices on mobile platforms

9. IoT Device Security

IoT devices, application areas, and communication models
• How security works in IoT-enabled environments

10. Cryptography and PKI

Cryptographic tools, security techniques, and algorithms
• Public key infrastructure (PKI) to authenticate users and
devices in the digital world

11. Data Security

Data security and its importance
• Security controls for data encryption
• Perform data backup and retention
• Implement data loss prevention concepts

12. Network Traffic Monitoring

Network traffic monitoring concepts.
• Traffic signatures for normal and suspicious network traffic.
• Perform network monitoring to detect suspicious traffic.

Предварителни изисквания
Да знаете английски език.
Да имате основни умения за управление компютърна операционна система
Да имате основни умения за използване на Интернет

Digital Forensics Essentials

Описание на обучението:

Този курс запознава студентите с основите на компютърната криминалистика, както и с прозцеса на разследване в компютърната криминалистика. Планирайте да наумите Dark Web,Windows, Linux, криминалистика за зловреден софтуер и много повече! Компонентът за интерактивни лаборатории на този курс ганарантира, практически опит, необходим за бъдещето в цифровата криминалистика.

Обучаемите, сертифицирани от DFE, имат гарантирано средство за официално признаване, което да добавят към автобиографиите си и да покажат своя опит и умения пред бъдещи работодатели. Това подобрява техните  перстективи за напредък в работата, по-високи заплати и по-голямо удовлетворение от работата.

What Students
Will Learn?

Fundamentals of Computer Forensics
Legal compliance
Forensic investigation
Anti-forensics techniques and countermeasures
Network forensics fundamentals
Web application forensics
Malware forensics
Investigating web attacks
Malware analysis & more…

DFE Exam Details
Exam Title
Digital Forensics Essentials (DFE)
Exam Code
112-53
Availability
EC-Council Exam Portal (please visit https://www.eccexam.com)
Duration
2 Hours
Questions
75
Passing Score
70%

There are no eligibility criteria for the Essentials Series. The certification is valid for three
years from the date the certificate is issued. The recertification window is at the end of
3-years, and EC-Council members may recertify by passing the exam again. There are no
annual fees or EC-Council Continuing Education Credits (ECE’s) required to maintain the
certification credential during the three-year term.

Учебен план

Модул 1 Основи на компютърната криминалистика

Модул 2 Процес на разследване по компютърна криминалистика

Модул 3 Разбиране на твърдите дискове и файловите системи

Модул 4 Събиране и дублиране на данни

Модул 5 Премахване на антикриминалистичните техники

Модул 6 Криминалистика на Windows

Модул 7 Криминалистика на Linux и Мас

Модул 8 Мрежова криминалистика

Модул 9 Разследване на уеб атаки

Модул 10 Криминалистика на Dark Web

Модул 11 Ръзследване на имейл престъпления

Модул 12 Криминалистика на зловреден софтуер

Предварителни изисквания
Да знаете английски език.
Да имате основни умения за управление компютърна операционна система
Да имате основни умения за използване на Интернет

TARGET AUDIENCE

High School Students

• Who wants to get an early start to their cybersecurity career and master the fundamentals of security online.

College University/Students

• Who wants to prepare for a cybersecurity career and aid their IT education.

Working Professionals

• Who wants to get into a cybersecurity field and don’t know where to start their education journey.

JOB ROLES
• ECSS helps to prepare to apply for entry level job roles in Network Defense, Ethical Hacking
and Digital Forensics.

DURATION: 5 DAYS OR 40 HOURS

EXAM TITLE: EC-COUNCIL CERTIFIED SECURITY SPECIALIST

EXAM DETAILS

NUMBER OF QUESTIONS: 100
EXAM AVAILABILITY: EC-COUNCIL EXAM PORTAL
PASSING SCORE: 70%
DURATION: 3 HOURS
TEST FORMAT: MULTIPLE CHOICE

What Students
Will Learn?

Fundamentals of Computer Forensics
Legal compliance
Forensic investigation
Anti-forensics techniques and countermeasures
Network forensics fundamentals
Web application forensics
Malware forensics
Investigating web attacks
Malware analysis & more…

What will you Learn?
Students going through ECSS training will learn:
Network Security Fundamentals:
• Fundamentals of network security
• Network security protocols that govern the flow of data
Identification, Authentication, and Authorization:
• Access control principles, terminologies, and models
• Identity and access management (IAM)
Network Security Controls: Administrative Controls
• Regulatory frameworks, laws, and acts
• Security policies, and how to conduct security and awareness training
Network Security Controls: Physical Controls
• Importance of physical security and physical security controls
• Physical security policies and procedures
• Best practices to strengthen workplace security
• Environmental controls
Network Security Controls: Technical Controls
• Types of bastion hosts and their role in network security
• IDS/IPS types and their role in network defense
• Types of honeypots and virtual private networks (VPNs)
• Security incident and event management (SIEM)
Virtualization and Cloud Computing
• Key concepts of virtualization and OS virtualization security
• Cloud computing fundamentals and cloud deployment models
• Cloud security best practices
Wireless Network Security
• Fundamentals of wireless networks and encryption mechanisms
• Wireless network authentication methods
• Implementing wireless network security measures
Mobile Device Security
• Mobile device connection methods and management
• Mobile use approaches in enterprises
• Security risks and guidelines associated with enterprise mobile usage policies
• Implement various enterprise-level mobile security management solutions
• Best practices on mobile platforms
IoT Device Security
• IoT devices, application areas, and communication models
• How security works in IoT-enabled environments
Cryptography and PKI
• Cryptographic tools, security techniques, and algorithms
• Public key infrastructure (PKI) to authenticate users and devices in the digital world

What will you Learn?
Students going through ECSS training will learn:
Data Security
• Data security and its importance
• Security controls for data encryption
• Perform data backup and retention
• Implement data loss prevention concepts
Network Traffic Monitoring
• Network traffic monitoring concepts.
• Traffic signatures for normal and suspicious network traffic.
• Perform network monitoring to detect suspicious traffic
Information Security Fundamentals
• Information security fundamentals
• Information security laws and regulations
Ethical Hacking Fundamentals
• Cyber Kill Chain methodology
• Hacking concepts, hacking cycle, and different hacker classes
• Ethical hacking concepts, scope, and limitations
Information Security Threats and Vulnerabilities
• Detect various threat sources and vulnerabilities in a network or system
• Different types of malwares
Password Cracking Techniques and Countermeasures
• Types of password cracking techniques
Social Engineering Techniques and Countermeasures
• Social engineering concepts and techniques
• Insider threats and identity theft concepts
Network-Level Attacks and Countermeasures
• Packet sniffing concepts and types
• Sniffing techniques and countermeasures
• DoS and DDoS attacks under sniffing attacks
Web Application Attacks and Countermeasures
• Web Server Attacks
• Web Application Attacks
• Web Application Architecture and Vulnerability Stack Web Application Threats and Attacks
• SQL Injection Attacks
• Types of SQL Injection Attacks

What will you Learn?
Students going through ECSS training will learn:
Wireless Attacks and Countermeasures
• Wireless Terminology
• Types of Wireless Encryption
• Wireless Network-specific Attack Techniques Bluetooth Attacks
• Wireless Attack Countermeasures
Mobile Attacks and Countermeasures
• Mobile Attack Anatomy
• Mobile Attack Vectors and Mobile Platform Vulnerabilities
IoT and OT Attacks and Countermeasures
IoT Attacks
• IoT Devices, their need and Application Areas
• IoT Threats and Attacks
OT Attacks
• Understand OT Concepts
• OT Challenges and Attacks
• OT Attacks Countermeasures
Cloud Computing Threats and Countermeasures
• Cloud Computing Concepts
• Container Technology
• Cloud Computing Threats
• Cloud Computing Countermeasures
Penetration Testing Fundamentals
• Fundamentals of Penetration Testing and its Benefits
• Various Types and Phases of Penetration Testing
• Guidelines and Recommendations for Penetration Testing
Computer Forensics Fundamentals
• Fundamentals of computer forensics and digital evidence
• Objectives of forensic readiness to reduce the cost of investigation
• Roles and responsibilities of a forensic investigator.
• Legal compliance in computer forensics
Computer Forensics Investigation Process
• Forensic investigation process and its importance
• Forensic investigation phases
Understanding Hard Disks and File Systems
• Types of disk drives and their characteristics
• Booting process of Windows, Linux, and Mac operating systems
• Examine file system records during an investigation

What will you Learn?
Students going through ECSS training will learn:
Data Acquisition and Duplication
• Data acquisition fundamentals, methodologies, and their different types
• Determine the data acquisition format
Defeating Anti-forensics Techniques
• Anti-forensics techniques and their countermeasures
Windows Forensics
• How to gather volatile and non-volatile information
• Perform Windows memory and registry analysis
• Analyze the cache, cookie, and history recorded in web browsers
• Examine Windows files and metadata
Linux and Mac Forensics
• Volatile and non-volatile data in Linux
• Analyze filesystem images using the sleuth kit
• Demonstrate memory forensics
• Mac forensics concepts
Network Forensics
• Network forensics fundamentals
• Event correlation concepts and types
• Identify indicators of compromise (IoCs) from network logs
• Investigate network traffic for suspicious activity
Investigating Web Attacks
• Web application forensics and web attacks
• Understand IIS and Apache web server logs
• Detect and investigate various attacks on web applications
Dark Web Forensics
• Dark web forensics investigation and how it works.
• Tor browser forensics
Investigating Email Crime
• Email basics and how it can be used as evidence
• Techniques and steps used in email crime investigation
Malware Forensics
• Malware, its components, and distribution methods
• Malware forensics fundamentals and types of malware analysis
• Perform static malware analysis and dynamic malware analysis
• Conduct system and network behavior analysis

ECSSv10 Exam Information
Exam Title EC-Council Certified Security Specialist
Exam Code ECSS
Number of Questions 100
Duration: 3 hours Exam
Availability Locations: EC-Council Exam Portal
Test Formats: Multiple Choice
Passing Score: 70%

Учебен план

NETWORK DEFENSE ESSENTIALS

1. Network Security Fundamentals
2. Identification, Authentication, and Authorization
3. Network Security Controls: Administrative Controls
4. Network Security Controls: Physical Controls
5. Network Security Controls: Technical Controls
6. Virtualization and Cloud Computing
7. Wireless Network Security
8. Mobile Device Security
9. IoT Device Security
10. Cryptography and the Public Key Infrastructure
11. Data Security
12. Network Traffic Monitoring
13. Information Security Fundamentals

ETHICAL HACKING ESSENTIALS

14. Ethical Hacking Fundamentals
15. Information Security Threats and Vulnerability Assessment
16. Password Cracking Techniques and Countermeasures
17. Social Engineering Techniques and Countermeasures
18. Network Level Attacks and Countermeasures
19. Web Application Attacks and Countermeasures
20. Wireless Attacks and Countermeasures
21. Mobile Attacks and Countermeasures
22. IOT & OT Attacks and Countermeasures
23. Cloud Computing Threats and Countermeasures
24. Penetration Testing Fundamentals

DIGITAL FORENSICS ESSENTIALS

25. Computer Forensics Fundamentals
26. Computer Forensics Investigation Process
27. Understanding Hard Disks and File Systems
28. Data Acquisition and Duplication
29. Defeating Anti-forensics Techniques
30. Windows Forensics
31. Linux and Mac Forensics
32. Network Forensics
33. Investigating Web Attacks
34. Dark Web Forensics
35. Investigating Email Crimes
36. Malware Forensics

Модул 1 Основи на компютърната криминалистика

Модул 2 Процес на разследване по компютърна криминалистика

Модул 3 Разбиране на твърдите дискове и файловите системи

Модул 4 Събиране и дублиране на данни

Модул 5 Премахване на антикриминалистичните техники

Модул 6 Криминалистика на Windows

Модул 7 Криминалистика на Linux и Мас

Модул 8 Мрежова криминалистика

Модул 9 Разследване на уеб атаки

Модул 10 Криминалистика на Dark Web

Модул 11 Ръзследване на имейл престъпления

Модул 12 Криминалистика на зловреден софтуер

Course Outline
NETWORK DEFENSE ESSENTIALS
1. Network Security Fundamentals
2. Identification, Authentication, and Authorization
3. Network Security Controls: Administrative Controls
4. Network Security Controls: Physical Controls
5. Network Security Controls: Technical Controls
6. Virtualization and Cloud Computing
7. Wireless Network Security
8. Mobile Device Security
9. IoT Device Security
10.Cryptography and the Public Key Infrastructure
11.Data Security
12.Network Traffic Monitoring
ETHICAL HACKING ESSENTIALS
13. Information Security Fundamentals
14. Ethical Hacking Fundamentals
15. Information Security Threats and Vulnerability
Assessment
16. Password Cracking Techniques and Countermeasures
17. Social Engineering Techniques and Countermeasures
18. Network Level Attacks and Countermeasures
19. Web Application Attacks and Countermeasures
20. Wireless Attacks and Countermeasures
21. Mobile Attacks and Countermeasures
22. IOT & OT Attacks and Countermeasures
23. Cloud Computing Threats and Countermeasures
24. Penetration Testing Fundamentals
DIGITAL FORENSICS ESSENTIALS
25. Computer Forensics Fundamentals
26. Computer Forensics Investigation Process
27. Understanding Hard Disks and File Systems
28. Data Acquisition and Duplication
29. Defeating Anti-forensics Techniques
30. Windows Forensics
31. Linux and Mac Forensics
32. Network Forensics
33. Investigating Web Attacks
34. Dark Web Forensics
35. Investigating Email Crimes
36. Malware Forensics

Предварителни изисквания
Да знаете английски език.
Да имате основни умения за управление компютърна операционна система
Да имате основни умения за използване на Интернет

Target Audience
ECSS is designed for anyone who wants to enhance their skills and make a career in
Network Defense, Ethical Hacking, Digital Forensics, and the cybersecurity
industry.
High School Students
Who want to get an early start to their cybersecurity career and master the fundamentals of security online.
College University/Students
Who wants to prepare for a cybersecurity career and aid their IT education.
Working Professionals
Who want to get into a cybersecurity field and don’t know where to start their education journey.

C|CT COURSE DESCRIPTION
EC-Council’s C|CT certification immerses students in well-constructed knowledge transfer. Training is
accompanied by critical thinking challenges and immersive lab experiences that allow candidates to
apply their knowledge and move into the skill development phase in the class itself. Upon completing
the program, C|CT-certified professionals will have a strong foundation in cybersecurity principles
and techniques as well as hands-on exposure to the tasks required in real-world jobs.

C|CT COURSE OUTLINE - TOPICS COVERED

1. INFORMATION SECURITY THREATS AND VULNERABILITIES
2. Information Security Attacks
3. Network Security Fundamentals
4. Identification, Authentication, and Authorization
5. Network Security Controls: Administrative Controls
6. Network Security Controls: Physical Controls
7. Network Security Controls: Technical Controls
8. Network Security Assessment Techniques and Tools
9. Application Security
10. Virtualization and Cloud Computing
11. Wireless Network Security
12. Mobile Device Security
13. Internet of Things (IoT) and Operational Technology (OT) Security
14. Cryptography
15. Data Security
16. Network Troubleshooting
17. Network Traffic Monitoring
18. Network Log Monitoring and Analysis
19. Incident Response
20. Computer Forensics
21. Business Continuity and Disaster Recovery
22. Risk Management

With over 220 hands-on labs conducted in our cyber range environment, you will have the opportunity to practice every learning objective on live machines and vulnerable targets in the course. Pre-loaded with over 3,500 hacking tools and various operating systems, you will gain unprecedented exposure and hands-on experience with the most common security tools, latest vulnerabilities, and widely used operating systems in the industry. Our range is web accessible, making it easier for you to learn and practice from anywhere.

What’s Covered:

YOUR LEARNING PATHWAY TO A
PROMISING CAREER IN CYBERSECURITY

WHO CAN TAKE THIS COURSE?

The C|CT is ideal for anyone looking to start their career in cybersecurity or add a strong foundational
understanding of the cybersecurity concepts and techniques required to be effective on the job. The
course is especially well suited to:
Early-career IT professionals, IT managers, career changers, and career advancers
Students and recent graduates

WHAT ARE THE PREREQUISITES FOR THE C|CT?

No specific prerequisites are required for the C|CT certification, although previous knowledge and
experience in IT and networking with a focus on cybersecurity can be an advantage. Candidates
should have knowledge of computers and computer networks prior to entering the C|CT program,
although core technologies are covered in the curriculum.

iLearn (Self-Study)
This solution is an asynchronous, self-study environment in a video streaming format

Live Online
This solution offers "Live Online" training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

EXAM & TRAINING INFORMATION

Exam Title: Certified Cybersecurity Technician
Exam Code: 212-82
Number of Questions: 60
Duration: 3 hours
Exam Availability Locations: ECC Exam Portal
Test Format: Multiple choice and Real Life hands-on Practical
Exam
Exam Mode: Remote Proctoring Services
Passing Score: 70%
Training Duration: 5 days
Delivery Modes: Instructor-led training
iWeek (synchronous online learning)
iLearn (asynchronous online learning)
CodeRed (asynchronous online learning)

WHAT YOU WILL LEARN IN THIS COURSE
Key concepts in cybersecurity, including information security and network security
Information security threats, vulnerabilities, and attacks
The different types of malware
Identification, authentication, and authorization
Network security controls

Administrative controls (frameworks, laws, acts, governance and compliance
programs, security policies)
*
Physical controls (physical and workplace security policies, environmental controls)
*
Technical controls (network security protocols; network segmentation; firewalls; intrusion
detection and prevention systems; honeypots; proxy servers; VPNs; user behavior analytics;
network access control; unified threat management; security information and event
management; security orchestration, automation, and response; load baancers; anti-malware

Network security assessment techniques and tools (threat hunting, threat intelligence, vulnerability
assessment, ethical hacking, penetration testing, configuration and asset management)
Application security design and testing techniques
Fundamentals of virtualization, cloud computing, and cloud security
Wireless network fundamentals, wireless encryption, and related security measures
Fundamentals of mobile, IoT, and OT devices and related security measures
Cryptography and public-key infrastructure
Data security controls, data backup and retention methods, and data loss prevention techniques
Network troubleshooting, traffic and log monitoring, and analysis of suspicious traffic
The incident handling and response process
Computer forensics and digital evidence fundamentals, including the phases of a forensic investigation
Concepts in business continuity and disaster recovery
Risk management concepts, phases, and frameworks

Learning Objectives Exam Information
1. Key concepts in cybersecurity, including information security and
network security
2. Information security threats, vulnerabilities, and attacks
3. The different types of malware
4. Identification, authentication, and authorization
5. Network security controls
6. Network security assessment techniques and tools (threat hunting,
threat intelligence, vulnerability assessment, ethical hacking,
penetration testing, configuration and asset management)
7. Application security design and testing techniques
8. Fundamentals of virtualization, cloud computing, and cloud security
9. Wireless network fundamentals, wireless encryption, and related
security measures
10. Fundamentals of mobile, IoT, and OT devices and
related security measures
11. Cryptography and public-key infrastructure
12. Data security controls, data backup and retention
methods, and data loss prevention techniques
13. Network troubleshooting, traffic and log monitoring, and
analysis of suspicious traffic
14. The incident handling and response process
15. Computer forensics and digital evidence fundamentals,
including the phases of a forensic investigation
16. Concepts in business continuity and disaster recovery
17. Risk management concepts, phases, and frameworks

Who is it for?

The C|CT is ideal for anyone looking to start their career in
cybersecurity or add a strong foundational understanding of the
cybersecurity concepts and techniques required to be effective
on the job. The course is especially well suited to:
Early-career IT professionals, IT managers, career changers,
and career advancers
Students and recent graduates

C|EH® v12 www.eccouncil.org/cehProve Your Skills and Abilities With
Online, Practical Examinations
The Certified Ethical Hacker® credential is trusted globally as the industry standard for
evaluating one’s understanding of ethical hacking and security testing. As an ANSI 17024
accredited examination, the 150-question, 4-hour proctored exam is recognized across
the globe as the original and most trusted tactical cyber security certification for ethical
hackers. Certification domains are carefully vetted through industry practitioners, ensuring
the certification maps to current industry requirements; this exam undergoes regular
psychometric evaluation and tuning to ensure a fair and accurate measure of the candidate’s
knowledge in the ethical hacking domain.

Поредицата C|PENT, мястото където тестерите за проникване придобиват умения в реалния свят, е проектирана да предоставя предизвикателства на всяко ниво от спектъра на атаките. Освен това поредицата съдържа множество слоеве на мрежово сегментиране където ако се получи достъп до един сегмент, се използват най-новите техники на проникване, за да се достигне до следващия сегмент. Много от предизвикателствата изискват нестандартно мислене и персонализиране на скриптове и експлойти, за да навлезете в най-вътрешните сегменти на мрежата. Ключът към това да бъдеш висококвалифициран тестер за проникване е да се изправиш срещу различните цели, които са конфигурирани по различни начини. C|PENT се състои от цели мрежови сегменти, които копират корпоративна мрежа - това не е симулация на компютърна игра; това е точно представяне на корпоративна мрежа, която представя най-новите предизвикателства пред тестера за проникване. Тъй като целите и технологиите продължават да се променят, C|PENT е гъвкав и се справя и с динамичното добавяне на машини и защити в дадената инфроструктура. И накрая, целите и сегментите са прогресивни по натура. След като влезете в една машина и/или сегмент, следващият ще ви предизвика още повече.

Съдържание на курса:

Module 1 Introduction to Penetration Testing and Methodologies
Cover the fundamentals of penetration testing, including penetration testing approaches, strategies, methodologies, techniques, and various guidelines and recommendations for penetration testing. Cover the fundamentals of key issues in the information security world, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.

Module 2 Penetration Testing Scoping and Engagement
Learn the different stages and elements of scoping and engagement in penetration testing.

Module 3 Open-Source Intelligence (OSINT)
Learn how to use techniques and tools to gather intelligence about the target from publicly available sources such as the World Wide Web (WWW), through website analysis, by using tools/frameworks/scripts, and so on.

Module 4 Social Engineering Penetration Testing
Learn different social engineering techniques and perform social-engineering penetration testing on a target organization.

Module 5 Network Penetration Testing – External
Learn how to implement a comprehensive penetration testing methodology for assessing networks from outsiders’ perspectives. Learn the process attackers follow to exploit the assets using vulnerabilities from the outside of the network perimeter.

Module 6 Network Penetration Testing – Internal
Learn how to implement a comprehensive penetration testing methodology for assessing networks from insider’s perspectives.

Module 7 Network Penetration Testing - Perimeter Devices
Learn how to implement a comprehensive penetration testing methodology for assessing the security of network perimeter devices, such as Firewalls, IDS, Routers, and Switches.

Module 8 Web Application Penetration Testing
Learn how to analyze web applications for various vulnerabilities, including the Open Web Application Security Project (OWASP) Top 10, and determine the risk of exploitation.

Module 9 Wireless Penetration Testing
Learn how to test various components of wireless networks, such as WLAN, RFID devices, and NFC technology devices.

Module 10 IoT Penetration Testing
Understand various threats to Internet of things (IoT) networks and learn how to audit security controls for various inherent IoT risks.

Module 11 OT and SCADA Penetration Testing
Understand OT and SCADA concepts and learn the process of testing various components of OT and SCADA networks

Module 12 Cloud Penetration Testing
Understand various security threats and concerns in cloud computing and learn how to perform cloud penetration testing to determine the probability of exploitation.

Module 13 Binary Analysis and Exploitation
Understand the binary analysis methodology and reverse engineer applications to identify vulnerable applications that may lead to the exploitation of an information system.

Module 14 Report Writing and Post Testing Actions
Learn how to document and analyze the results of a penetration test and recommend post-penetration test actions.

Допълнителни модули за самостоятелна подготовка

> Penetration Testing Essential Concepts
> Fuzzing
> Mastering Metasploit Framework
> PowerShell Scripting
> Bash Environment and Scripting
> Python Environment and Scripting
> Perl Environment and Scripting
> Ruby Environment and Scripting
> Active Directory Pen Testing
> Database Penetration Testing
> Mobile Device Penetration Testing
> CEH Refresher

ATTAINING THE C|PENT CERTIFICATION

SINGLE EXAM, DUAL CERTIFICATION?
Should you score at least 70% in the C|PENT practical exam, you shall attain the C|PENT  credential. However, if you are one of the few rare experts on the planet, you may be able to hit the minimum 90% to earn the Licensed Penetration Tester (LPT) Master Credential!
C|PENT is a fully online, remotely proctored practical exam that evaluates candidates through a challenging 24-hour performance-based, hands-on exam. The exam is broken into two practical exams of 12 hours each that will test your perseverance and focus by forcing you to outdo yourself with each new challenge. Candidates have the option to choose either two 12-hour exams or one 24-hour exam.

Candidates who score more than 90% will establish themselves as Penetration Testing Masters and attain the prestigious LPT (Master) credential!
Check our CPENT Exam Blueprint!

COMMON JOB ROLES FOR C|PENT

> Ethical Hackers
> Penetration Testers
> Network Server Administrators
> Firewall Administrators
> Security Testers
> System Administrators and Risk Assessment Professionals
> Cybersecurity Forensic Analyst
> Cyberthreat Analyst
> Cloud Security Analyst
> Information Security Analyst
> Application Security Analyst
> Cybersecurity Assurance Engineer
> Security Operations Center (SOC) Analyst
> Technical Operations Network Engineer
> Information Security Engineer
> Network Security Penetration Tester
> Network Security Engineer
> Information Security Architect

iLearn (Self-Study)
This solution is an asynchronous, self-study environment in a video streaming format

Live Online
This solution offers "Live Online" training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

EC-COUNCIL’S VULNERABILITY ASSESSMENT AND PENETRATION TESTING (VAPT) LEARNING TRACK

The C|EH® v12 training program includes 20 modules covering various technologies, tactics,
and procedures, providing prospective ethical hackers with the core knowledge needed to
thrive in cybersecurity. Delivered through a carefully curated training plan that typically
spans five days, the 12th version of the C|EH® continues to evolve to keep up with the
latest OS, exploits, tools, and techniques. The concepts covered in the training program
are split 50/50 between knowledge-based training and hands-on application through our
cyber range.Every tactic discussed in training is backed by step-by-step labs conducted in a
virtualized environment with live targets, live tools, and vulnerable systems. Through our lab
technology, every participant will have comprehensive hands-on practice to learn and apply
their knowledge."

Introduction to Ethical Hacking
Cover the fundamentals of key issues in the information security world, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.
Foot Printing and Reconnaissance
Learn how to use the latest techniques and tools to perform foot printing and reconnaissance, a critical pre-attack phase of the ethical hacking process.
Scanning Networks
Learn different network scanning techniques and countermeasures.
Enumeration
Learn various enumeration techniques, such as Border Gateway Protocol (BGP) and Network File Sharing (NFS) exploits, and associated countermeasures.
Module 05: Vulnerability Analysis
Learn how to identify security loopholes in a target organization’s network, communication infrastructure, and end systems. Different types of vulnerability assessment and vulnerability assessment tools.
System Hacking
Learn about the various system hacking methodologies—including steganography, steganalysis attacks, and covering tracks—used to discover system and network vulnerabilities.
Malware Threats
Learn different types of malware (Trojan, virus, worms, etc.), APT and fileless malware, malware analysis procedure, and malware countermeasures.
Sniffing
Learn about packet-sniffing techniques and how to use them to discover network vulnerabilities, as well as countermeasures to defend against sniffing attacks.
Social Engineering
Learn social engineering concepts and techniques, including how to identify theft attempts, audit human-level vulnerabilities, and suggest social engineering countermeasures.
Denial-of-Service
Learn about different Denial of Service (DoS) and Distributed DoS (DDoS) attack techniques, as well as the tools used to audit a target and devise DoS and DDoS countermeasures and protections.
Session Hijacking
Understand the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.
Evading IDS, Firewalls, and Honeypots
Get introduced to firewall, intrusion detection system (IDS), and honeypot evasion techniques; the tools used to audit a network perimeter for weaknesses; and countermeasures.
Hacking Web Servers
Learn about web server attacks, including a comprehensive attack methodology used to audit vulnerabilities in web server infrastructures and countermeasures.
Hacking Web Applications
Learn about web application attacks, including a comprehensive web application hacking methodology used to audit vulnerabilities in web applications and countermeasures.
SQL Injection
Learn about SQL injection attacks, evasion techniques, and SQL injection countermeasures.
Hacking Wireless Networks
Understand different types of wireless technologies, including encryption, threats, hacking methodologies, hacking tools, Wi-Fi sedcurity tools, and countermeasures.
Hacking Mobile Platforms
Learn Mobile platform attack vector, android and iOS hacking, mobile device management, mobile security guidelines, and security tools.
IoT Hacking
Learn different types of IoT and OT attacks, hacking methodology, hacking tools, and countermeasures.
Cloud Computing
Learn different cloud computing concepts, such as container technologies and server less computing, various cloud computing threats, attacks, hacking methodology, and cloud security techniques and tools.
Session Hijacking
Understand the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.

With over 220 hands-on labs conducted in our cyber range environment, you will have the opportunity to practice every learning objective on live machines and vulnerable targets in the course. Pre-loaded with over 3,500 hacking tools and various operating systems, you will gain unprecedented exposure and hands-on experience with the most common security tools, latest vulnerabilities, and widely used operating systems in the industry. Our range is web accessible, making it easier for you to learn and practice from anywhere.

What’s Covered:

C|EH® v12 www.eccouncil.org/cehProve Your Skills and Abilities With
Online, Practical Examinations
The Certified Ethical Hacker® credential is trusted globally as the industry standard for
evaluating one’s understanding of ethical hacking and security testing. As an ANSI 17024
accredited examination, the 150-question, 4-hour proctored exam is recognized across
the globe as the original and most trusted tactical cyber security certification for ethical
hackers. Certification domains are carefully vetted through industry practitioners, ensuring
the certification maps to current industry requirements; this exam undergoes regular
psychometric evaluation and tuning to ensure a fair and accurate measure of the candidate’s
knowledge in the ethical hacking domain.

Common Job Roles for C|EH
Windows 11 Windows Server 2022
Parrot Security Windows Server 2019
Android Ubuntu Linux
• Mid-Level Information Security Auditor
• Cybersecurity Auditor
• Security Administrator
• IT Security Administrator
• Cyber Defense Analyst
• Vulnerability Assessment Analyst
• Warning Analyst
• Information Security Analyst 1
• Security Analyst L1
• Infosec Security Administrator
• Cybersecurity Analyst level 1, level 2, & level 3
• Network Security Engineer
• SOC Security Analyst
• Security Analyst
• Network Engineer
• Senior Security Consultant
• Information Security Manager
• Senior SOC Analyst
• Solution Architect
• Cybersecurity Consultan

iLearn (Self-Study)
This solution is an asynchronous, self-study environment in a video streaming format

Live Online
This solution offers "Live Online" training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

What is the C|EH® v12?
Hackers are here. Where are you?
The Certified Ethical Hacker (C|EH® ) is an industry renowned, globally
recognized credential. In its 12th version, the C|EH® offers the most
comprehensive ethical hacking program with training, practice,
certification, and competition all integrated into one course that can
change your cybersecurity career trajectory. This one-of-a-kind
certification provides extensive hands-on training, labs, assessment,
mock engagement (practice), and global hacking competitions to ensure
that learners are at the top of their game with the most in-demand skills.
Our exclusive learning framework, Learn | Certify | Engage | Compete,
prepares students for the certification exam and the industry's most
robust, in-depth, hands-on lab and practice range experience of any
cybersecurity program available.

C|EH® v12 Course Content - 3000+  Pages of Student Manual
3500+ Hacking & Security Tools
519 Attack Techniques
1900+ Pages of Lab Manual
220 Hands-On Practical Labs
20 Refreshed Modules

C|EH® v12 www.eccouncil.org/cehProve Your Skills and Abilities With
Online, Practical Examinations
The Certified Ethical Hacker® credential is trusted globally as the industry standard for
evaluating one’s understanding of ethical hacking and security testing. As an ANSI 17024
accredited examination, the 150-question, 4-hour proctored exam is recognized across
the globe as the original and most trusted tactical cyber security certification for ethical
hackers. Certification domains are carefully vetted through industry practitioners, ensuring
the certification maps to current industry requirements; this exam undergoes regular
psychometric evaluation and tuning to ensure a fair and accurate measure of the candidate’s
knowledge in the ethical hacking domain.

C|EH® v12 www.eccouncil.org/cehProve Your Skills and Abilities With
Online, Practical Examinations
The Certified Ethical Hacker® credential is trusted globally as the industry standard for
evaluating one’s understanding of ethical hacking and security testing. As an ANSI 17024
accredited examination, the 150-question, 4-hour proctored exam is recognized across
the globe as the original and most trusted tactical cyber security certification for ethical
hackers. Certification domains are carefully vetted through industry practitioners, ensuring
the certification maps to current industry requirements; this exam undergoes regular
psychometric evaluation and tuning to ensure a fair and accurate measure of the candidate’s
knowledge in the ethical hacking domain.

C|EH® v12 www.eccouncil.org/cehProve Your Skills and Abilities With
Online, Practical Examinations
The Certified Ethical Hacker® credential is trusted globally as the industry standard for
evaluating one’s understanding of ethical hacking and security testing. As an ANSI 17024
accredited examination, the 150-question, 4-hour proctored exam is recognized across
the globe as the original and most trusted tactical cyber security certification for ethical
hackers. Certification domains are carefully vetted through industry practitioners, ensuring
the certification maps to current industry requirements; this exam undergoes regular
psychometric evaluation and tuning to ensure a fair and accurate measure of the candidate’s
knowledge in the ethical hacking domain.

The C|EH® v12 training program includes 20 modules covering various technologies, tactics,
and procedures, providing prospective ethical hackers with the core knowledge needed to
thrive in cybersecurity. Delivered through a carefully curated training plan that typically
spans five days, the 12th version of the C|EH® continues to evolve to keep up with the
latest OS, exploits, tools, and techniques. The concepts covered in the training program
are split 50/50 between knowledge-based training and hands-on application through our
cyber range.Every tactic discussed in training is backed by step-by-step labs conducted in a
virtualized environment with live targets, live tools, and vulnerable systems. Through our lab
technology, every participant will have comprehensive hands-on practice to learn and apply
their knowledge."

Introduction to Ethical Hacking
Cover the fundamentals of key issues in the information security world, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.
Foot Printing and Reconnaissance
Learn how to use the latest techniques and tools to perform foot printing and reconnaissance, a critical pre-attack phase of the ethical hacking process.
Scanning Networks
Learn different network scanning techniques and countermeasures.
Enumeration
Learn various enumeration techniques, such as Border Gateway Protocol (BGP) and Network File Sharing (NFS) exploits, and associated countermeasures.
Module 05: Vulnerability Analysis
Learn how to identify security loopholes in a target organization’s network, communication infrastructure, and end systems. Different types of vulnerability assessment and vulnerability assessment tools.
System Hacking
Learn about the various system hacking methodologies—including steganography, steganalysis attacks, and covering tracks—used to discover system and network vulnerabilities.
Malware Threats
Learn different types of malware (Trojan, virus, worms, etc.), APT and fileless malware, malware analysis procedure, and malware countermeasures.
Sniffing
Learn about packet-sniffing techniques and how to use them to discover network vulnerabilities, as well as countermeasures to defend against sniffing attacks.
Social Engineering
Learn social engineering concepts and techniques, including how to identify theft attempts, audit human-level vulnerabilities, and suggest social engineering countermeasures.
Denial-of-Service
Learn about different Denial of Service (DoS) and Distributed DoS (DDoS) attack techniques, as well as the tools used to audit a target and devise DoS and DDoS countermeasures and protections.
Session Hijacking
Understand the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.
Evading IDS, Firewalls, and Honeypots
Get introduced to firewall, intrusion detection system (IDS), and honeypot evasion techniques; the tools used to audit a network perimeter for weaknesses; and countermeasures.
Hacking Web Servers
Learn about web server attacks, including a comprehensive attack methodology used to audit vulnerabilities in web server infrastructures and countermeasures.
Hacking Web Applications
Learn about web application attacks, including a comprehensive web application hacking methodology used to audit vulnerabilities in web applications and countermeasures.
SQL Injection
Learn about SQL injection attacks, evasion techniques, and SQL injection countermeasures.
Hacking Wireless Networks
Understand different types of wireless technologies, including encryption, threats, hacking methodologies, hacking tools, Wi-Fi sedcurity tools, and countermeasures.
Hacking Mobile Platforms
Learn Mobile platform attack vector, android and iOS hacking, mobile device management, mobile security guidelines, and security tools.
IoT Hacking
Learn different types of IoT and OT attacks, hacking methodology, hacking tools, and countermeasures.
Cloud Computing
Learn different cloud computing concepts, such as container technologies and server less computing, various cloud computing threats, attacks, hacking methodology, and cloud security techniques and tools.
Session Hijacking
Understand the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.

With over 220 hands-on labs conducted in our cyber range environment, you will have the opportunity to practice every learning objective on live machines and vulnerable targets in the course. Pre-loaded with over 3,500 hacking tools and various operating systems, you will gain unprecedented exposure and hands-on experience with the most common security tools, latest vulnerabilities, and widely used operating systems in the industry. Our range is web accessible, making it easier for you to learn and practice from anywhere.

What’s Covered:

C|EH® v12 www.eccouncil.org/cehProve Your Skills and Abilities With
Online, Practical Examinations
The Certified Ethical Hacker® credential is trusted globally as the industry standard for
evaluating one’s understanding of ethical hacking and security testing. As an ANSI 17024
accredited examination, the 150-question, 4-hour proctored exam is recognized across
the globe as the original and most trusted tactical cyber security certification for ethical
hackers. Certification domains are carefully vetted through industry practitioners, ensuring
the certification maps to current industry requirements; this exam undergoes regular
psychometric evaluation and tuning to ensure a fair and accurate measure of the candidate’s
knowledge in the ethical hacking domain.

Common Job Roles for C|EH
Windows 11 Windows Server 2022
Parrot Security Windows Server 2019
Android Ubuntu Linux
• Mid-Level Information Security Auditor
• Cybersecurity Auditor
• Security Administrator
• IT Security Administrator
• Cyber Defense Analyst
• Vulnerability Assessment Analyst
• Warning Analyst
• Information Security Analyst 1
• Security Analyst L1
• Infosec Security Administrator
• Cybersecurity Analyst level 1, level 2, & level 3
• Network Security Engineer
• SOC Security Analyst
• Security Analyst
• Network Engineer
• Senior Security Consultant
• Information Security Manager
• Senior SOC Analyst
• Solution Architect
• Cybersecurity Consultan

iLearn (Self-Study)
This solution is an asynchronous, self-study environment in a video streaming format

Live Online
This solution offers "Live Online" training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

What is the C|EH® v12?
Hackers are here. Where are you?
The Certified Ethical Hacker (C|EH® ) is an industry renowned, globally
recognized credential. In its 12th version, the C|EH® offers the most
comprehensive ethical hacking program with training, practice,
certification, and competition all integrated into one course that can
change your cybersecurity career trajectory. This one-of-a-kind
certification provides extensive hands-on training, labs, assessment,
mock engagement (practice), and global hacking competitions to ensure
that learners are at the top of their game with the most in-demand skills.
Our exclusive learning framework, Learn | Certify | Engage | Compete,
prepares students for the certification exam and the industry's most
robust, in-depth, hands-on lab and practice range experience of any
cybersecurity program available.

C|EH® v12 Course Content - 3000+  Pages of Student Manual
3500+ Hacking & Security Tools
519 Attack Techniques
1900+ Pages of Lab Manual
220 Hands-On Practical Labs
20 Refreshed Modules

The C|EH® v12 training program includes 20 modules covering various technologies, tactics,
and procedures, providing prospective ethical hackers with the core knowledge needed to
thrive in cybersecurity. Delivered through a carefully curated training plan that typically
spans five days, the 12th version of the C|EH® continues to evolve to keep up with the
latest OS, exploits, tools, and techniques. The concepts covered in the training program
are split 50/50 between knowledge-based training and hands-on application through our
cyber range.Every tactic discussed in training is backed by step-by-step labs conducted in a
virtualized environment with live targets, live tools, and vulnerable systems. Through our lab
technology, every participant will have comprehensive hands-on practice to learn and apply
their knowledge."

Introduction to Ethical Hacking
Cover the fundamentals of key issues in the information security world, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.
Foot Printing and Reconnaissance
Learn how to use the latest techniques and tools to perform foot printing and reconnaissance, a critical pre-attack phase of the ethical hacking process.
Scanning Networks
Learn different network scanning techniques and countermeasures.
Enumeration
Learn various enumeration techniques, such as Border Gateway Protocol (BGP) and Network File Sharing (NFS) exploits, and associated countermeasures.
Module 05: Vulnerability Analysis
Learn how to identify security loopholes in a target organization’s network, communication infrastructure, and end systems. Different types of vulnerability assessment and vulnerability assessment tools.
System Hacking
Learn about the various system hacking methodologies—including steganography, steganalysis attacks, and covering tracks—used to discover system and network vulnerabilities.
Malware Threats
Learn different types of malware (Trojan, virus, worms, etc.), APT and fileless malware, malware analysis procedure, and malware countermeasures.
Sniffing
Learn about packet-sniffing techniques and how to use them to discover network vulnerabilities, as well as countermeasures to defend against sniffing attacks.
Social Engineering
Learn social engineering concepts and techniques, including how to identify theft attempts, audit human-level vulnerabilities, and suggest social engineering countermeasures.
Denial-of-Service
Learn about different Denial of Service (DoS) and Distributed DoS (DDoS) attack techniques, as well as the tools used to audit a target and devise DoS and DDoS countermeasures and protections.
Session Hijacking
Understand the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.
Evading IDS, Firewalls, and Honeypots
Get introduced to firewall, intrusion detection system (IDS), and honeypot evasion techniques; the tools used to audit a network perimeter for weaknesses; and countermeasures.
Hacking Web Servers
Learn about web server attacks, including a comprehensive attack methodology used to audit vulnerabilities in web server infrastructures and countermeasures.
Hacking Web Applications
Learn about web application attacks, including a comprehensive web application hacking methodology used to audit vulnerabilities in web applications and countermeasures.
SQL Injection
Learn about SQL injection attacks, evasion techniques, and SQL injection countermeasures.
Hacking Wireless Networks
Understand different types of wireless technologies, including encryption, threats, hacking methodologies, hacking tools, Wi-Fi sedcurity tools, and countermeasures.
Hacking Mobile Platforms
Learn Mobile platform attack vector, android and iOS hacking, mobile device management, mobile security guidelines, and security tools.
IoT Hacking
Learn different types of IoT and OT attacks, hacking methodology, hacking tools, and countermeasures.
Cloud Computing
Learn different cloud computing concepts, such as container technologies and server less computing, various cloud computing threats, attacks, hacking methodology, and cloud security techniques and tools.
Session Hijacking
Understand the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.

With over 220 hands-on labs conducted in our cyber range environment, you will have the opportunity to practice every learning objective on live machines and vulnerable targets in the course. Pre-loaded with over 3,500 hacking tools and various operating systems, you will gain unprecedented exposure and hands-on experience with the most common security tools, latest vulnerabilities, and widely used operating systems in the industry. Our range is web accessible, making it easier for you to learn and practice from anywhere.

What’s Covered:

C|EH® v12 www.eccouncil.org/cehProve Your Skills and Abilities With
Online, Practical Examinations
The Certified Ethical Hacker® credential is trusted globally as the industry standard for
evaluating one’s understanding of ethical hacking and security testing. As an ANSI 17024
accredited examination, the 150-question, 4-hour proctored exam is recognized across
the globe as the original and most trusted tactical cyber security certification for ethical
hackers. Certification domains are carefully vetted through industry practitioners, ensuring
the certification maps to current industry requirements; this exam undergoes regular
psychometric evaluation and tuning to ensure a fair and accurate measure of the candidate’s
knowledge in the ethical hacking domain.

Common Job Roles for C|EH
Windows 11 Windows Server 2022
Parrot Security Windows Server 2019
Android Ubuntu Linux
• Mid-Level Information Security Auditor
• Cybersecurity Auditor
• Security Administrator
• IT Security Administrator
• Cyber Defense Analyst
• Vulnerability Assessment Analyst
• Warning Analyst
• Information Security Analyst 1
• Security Analyst L1
• Infosec Security Administrator
• Cybersecurity Analyst level 1, level 2, & level 3
• Network Security Engineer
• SOC Security Analyst
• Security Analyst
• Network Engineer
• Senior Security Consultant
• Information Security Manager
• Senior SOC Analyst
• Solution Architect
• Cybersecurity Consultan

iLearn (Self-Study)
This solution is an asynchronous, self-study environment in a video streaming format

Live Online
This solution offers "Live Online" training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

What is the C|EH® v12?
Hackers are here. Where are you?
The Certified Ethical Hacker (C|EH® ) is an industry renowned, globally
recognized credential. In its 12th version, the C|EH® offers the most
comprehensive ethical hacking program with training, practice,
certification, and competition all integrated into one course that can
change your cybersecurity career trajectory. This one-of-a-kind
certification provides extensive hands-on training, labs, assessment,
mock engagement (practice), and global hacking competitions to ensure
that learners are at the top of their game with the most in-demand skills.
Our exclusive learning framework, Learn | Certify | Engage | Compete,
prepares students for the certification exam and the industry's most
robust, in-depth, hands-on lab and practice range experience of any
cybersecurity program available.

C|EH® v12 Course Content - 3000+  Pages of Student Manual
3500+ Hacking & Security Tools
519 Attack Techniques
1900+ Pages of Lab Manual
220 Hands-On Practical Labs
20 Refreshed Modules

The C|EH® v12 training program includes 20 modules covering various technologies, tactics,
and procedures, providing prospective ethical hackers with the core knowledge needed to
thrive in cybersecurity. Delivered through a carefully curated training plan that typically
spans five days, the 12th version of the C|EH® continues to evolve to keep up with the
latest OS, exploits, tools, and techniques. The concepts covered in the training program
are split 50/50 between knowledge-based training and hands-on application through our
cyber range.Every tactic discussed in training is backed by step-by-step labs conducted in a
virtualized environment with live targets, live tools, and vulnerable systems. Through our lab
technology, every participant will have comprehensive hands-on practice to learn and apply
their knowledge."

Introduction to Ethical Hacking
Cover the fundamentals of key issues in the information security world, including the basics of ethical hacking, information security controls, relevant laws, and standard procedures.
Foot Printing and Reconnaissance
Learn how to use the latest techniques and tools to perform foot printing and reconnaissance, a critical pre-attack phase of the ethical hacking process.
Scanning Networks
Learn different network scanning techniques and countermeasures.
Enumeration
Learn various enumeration techniques, such as Border Gateway Protocol (BGP) and Network File Sharing (NFS) exploits, and associated countermeasures.
Module 05: Vulnerability Analysis
Learn how to identify security loopholes in a target organization’s network, communication infrastructure, and end systems. Different types of vulnerability assessment and vulnerability assessment tools.
System Hacking
Learn about the various system hacking methodologies—including steganography, steganalysis attacks, and covering tracks—used to discover system and network vulnerabilities.
Malware Threats
Learn different types of malware (Trojan, virus, worms, etc.), APT and fileless malware, malware analysis procedure, and malware countermeasures.
Sniffing
Learn about packet-sniffing techniques and how to use them to discover network vulnerabilities, as well as countermeasures to defend against sniffing attacks.
Social Engineering
Learn social engineering concepts and techniques, including how to identify theft attempts, audit human-level vulnerabilities, and suggest social engineering countermeasures.
Denial-of-Service
Learn about different Denial of Service (DoS) and Distributed DoS (DDoS) attack techniques, as well as the tools used to audit a target and devise DoS and DDoS countermeasures and protections.
Session Hijacking
Understand the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.
Evading IDS, Firewalls, and Honeypots
Get introduced to firewall, intrusion detection system (IDS), and honeypot evasion techniques; the tools used to audit a network perimeter for weaknesses; and countermeasures.
Hacking Web Servers
Learn about web server attacks, including a comprehensive attack methodology used to audit vulnerabilities in web server infrastructures and countermeasures.
Hacking Web Applications
Learn about web application attacks, including a comprehensive web application hacking methodology used to audit vulnerabilities in web applications and countermeasures.
SQL Injection
Learn about SQL injection attacks, evasion techniques, and SQL injection countermeasures.
Hacking Wireless Networks
Understand different types of wireless technologies, including encryption, threats, hacking methodologies, hacking tools, Wi-Fi sedcurity tools, and countermeasures.
Hacking Mobile Platforms
Learn Mobile platform attack vector, android and iOS hacking, mobile device management, mobile security guidelines, and security tools.
IoT Hacking
Learn different types of IoT and OT attacks, hacking methodology, hacking tools, and countermeasures.
Cloud Computing
Learn different cloud computing concepts, such as container technologies and server less computing, various cloud computing threats, attacks, hacking methodology, and cloud security techniques and tools.
Session Hijacking
Understand the various session hijacking techniques used to discover network-level session management, authentication, authorization, and cryptographic weaknesses and associated countermeasures.

With over 220 hands-on labs conducted in our cyber range environment, you will have the opportunity to practice every learning objective on live machines and vulnerable targets in the course. Pre-loaded with over 3,500 hacking tools and various operating systems, you will gain unprecedented exposure and hands-on experience with the most common security tools, latest vulnerabilities, and widely used operating systems in the industry. Our range is web accessible, making it easier for you to learn and practice from anywhere.

What’s Covered:

C|EH® v12 www.eccouncil.org/cehProve Your Skills and Abilities With
Online, Practical Examinations
The Certified Ethical Hacker® credential is trusted globally as the industry standard for
evaluating one’s understanding of ethical hacking and security testing. As an ANSI 17024
accredited examination, the 150-question, 4-hour proctored exam is recognized across
the globe as the original and most trusted tactical cyber security certification for ethical
hackers. Certification domains are carefully vetted through industry practitioners, ensuring
the certification maps to current industry requirements; this exam undergoes regular
psychometric evaluation and tuning to ensure a fair and accurate measure of the candidate’s
knowledge in the ethical hacking domain.

Common Job Roles for C|EH
Windows 11 Windows Server 2022
Parrot Security Windows Server 2019
Android Ubuntu Linux
• Mid-Level Information Security Auditor
• Cybersecurity Auditor
• Security Administrator
• IT Security Administrator
• Cyber Defense Analyst
• Vulnerability Assessment Analyst
• Warning Analyst
• Information Security Analyst 1
• Security Analyst L1
• Infosec Security Administrator
• Cybersecurity Analyst level 1, level 2, & level 3
• Network Security Engineer
• SOC Security Analyst
• Security Analyst
• Network Engineer
• Senior Security Consultant
• Information Security Manager
• Senior SOC Analyst
• Solution Architect
• Cybersecurity Consultan

iLearn (Self-Study)
This solution is an asynchronous, self-study environment in a video streaming format

Live Online
This solution offers "Live Online" training so that you can get the benefit of collaborating with your peers and gaining real-world skills, conveniently located in your backyard.

What is the C|EH® v12?
Hackers are here. Where are you?
The Certified Ethical Hacker (C|EH® ) is an industry renowned, globally
recognized credential. In its 12th version, the C|EH® offers the most
comprehensive ethical hacking program with training, practice,
certification, and competition all integrated into one course that can
change your cybersecurity career trajectory. This one-of-a-kind
certification provides extensive hands-on training, labs, assessment,
mock engagement (practice), and global hacking competitions to ensure
that learners are at the top of their game with the most in-demand skills.
Our exclusive learning framework, Learn | Certify | Engage | Compete,
prepares students for the certification exam and the industry's most
robust, in-depth, hands-on lab and practice range experience of any
cybersecurity program available.

C|EH® v12 Course Content - 3000+  Pages of Student Manual
3500+ Hacking & Security Tools
519 Attack Techniques
1900+ Pages of Lab Manual
220 Hands-On Practical Labs
20 Refreshed Modules

C|EH® v12 www.eccouncil.org/cehProve Your Skills and Abilities With
Online, Practical Examinations
The Certified Ethical Hacker® credential is trusted globally as the industry standard for
evaluating one’s understanding of ethical hacking and security testing. As an ANSI 17024
accredited examination, the 150-question, 4-hour proctored exam is recognized across
the globe as the original and most trusted tactical cyber security certification for ethical
hackers. Certification domains are carefully vetted through industry practitioners, ensuring
the certification maps to current industry requirements; this exam undergoes regular
psychometric evaluation and tuning to ensure a fair and accurate measure of the candidate’s
knowledge in the ethical hacking domain.