GIAC GCIH: Mastering Cyber Security Incident Response

Learn to gather website information with Netcraft's site report and permission-aware lookups on testfire.net. Analyze IP data, DNS, MX, DMARC and site technologies like Apache Tomcat and Java servlets.

Learn to view dns records with nslookup by querying ipv4 and ipv6 addresses, mx records, and name servers, and inspect srv records and dns timing data.

Learn to gather information on a target organization by analyzing YouTube video metadata with tools like mattw.io, extracting published dates, channel info, descriptions, thumbnails, and views via YouTube API.

Learn how to obtain a word list from a target website using the cewl tool, adjust depth and minimum word length, enable verbose output, and save results with permission.

Demonstrates Windows Server SNMP enumeration with Kali Linux and SNMP check, revealing system details, routing, ports, processes, and storage, using a unique community string.

Explores exploiting Windows 7 64-bit with the Eternal Blue exploit via Metasploit, highlighting target requirements, potential blue screen or reboot outcomes, and gaining admin privileges.

Learn how to install and use Beef browser exploitation framework on Kali Linux to hijack browsers and create phishing pages for social engineering against a target on the same subnet.

Demonstrates using Zedfish to clone login pages, host a fake Facebook login, harvest usernames and passwords, and capture the victim’s public IP for incident handling analysis.

Learn to find web application vulnerabilities with NICTO on a Kali Linux and Metasploitable lab, and generate reports highlighting XSS risks and outdated Apache 2.2.8, with written permission required.

Learn how to tamper post data in a web application using Tamper IE, with permission, by altering a post request for a shopping cart test and understanding get versus post.

Perform banner grabbing on a web server with HTTP print to identify Apache and PHP 8.3.14 on a Windows 10 WAMP WordPress setup, port 80, and save output.

Learn how to locate hidden directories on a website using dir-buster in Kali Linux, including setting target URLs, selecting extensions, and generating a report for ethical testing with permission.

Learn how to prevent banner grabbing on an IIS web server by adjusting run-time settings, disabling the exposed banner, and applying the changes.

Explore how capture and display filters in Wireshark selectively monitor traffic, filter ARP and HTTP queries, and inspect unencrypted data and HTTP responses.

Capture packets with tshark in wireshark by listing interfaces with -D, selecting the wifi interface, writing to a pcap file, and limiting capture to the first 100 packets.

Export http objects using wireshark by capturing http traffic from a target site, filtering by ip address, and saving images, html files, and source code via export objects.

Learn to secure an Android device with Sophos Intercept X for mobile, enabling web filtering, app reputation, scheduled scans, and device protections like unknown sources control and screen lock.

Configure Cisco IOS login enhancement to block repeated login attempts after five tries in ten seconds, enforce a 30-second block, and log all successes and failures to a syslog server.

Obtain BIOS information using PowerShell and WMI by querying win32_bios, revealing BIOS name, version, manufacturer, and serial number with simple format-list filtering.

Discover how to view running and stopped services on Windows 11 with PowerShell, using get-service, where-object, and status filters, including the stop keyword.

Compute a Windows file hash with PowerShell’s get-filehash (sha-256) to verify integrity across local and server copies, detect changes, and safeguard assignments.

Perform live Windows investigation by securely capturing data from the victim machine to a forensics workstation using shared folders and mapped drives to collect system info and autoruns.

Learn how to conceal data in text using white space steganography with the snow tool, including compressing the message, assigning a password, and decrypting it securely.

Demonstrates bypassing Windows firewall with nmap, using Kali Linux and Windows hosts to test SYN scan, intense scan, and zombie scan techniques.