GIAC Security Essentials (GSEC)

Gain a broad view of security with the GSEC overview, covering password policies, monitoring, incident response, defensive and offensive security across Windows and Linux, and DoD 8570 certification prep.

Explore access control and password management concepts, including brute-force and dictionary attacks, passphrases, password policies, and multi-factor authentication for stronger system security.

Embrace proactive active defense by deploying honeypots and honey nets like OpenCanary, analyzing attacker methods, and applying techniques such as changing defaults, encryption, obfuscation, and deceptive robots.txt.

Explore contingency planning by analyzing business continuity and disaster recovery, including risk assessment, business impact analysis, planning, testing, and maintenance to keep critical services running.

Explore the CIS critical security controls as a practical, prescriptive guide to strengthen cyber defense, focusing on basic, foundational, and organizational measures for any organization.

Discover the basics of cryptography, from substitution and rot ciphers to symmetric and asymmetric encryption, and explore steganography techniques for hiding messages in image files.

Explore how cryptography uses symmetric and asymmetric encryption, hashing, and key exchange to ensure confidentiality, integrity, and authentication, with algorithms like des, aes, blowfish, rsa, and sha-256.

Apply cryptography to real-world scenarios by using vpn encryption to shield web traffic, and by using gpg and pki concepts with x.509 certificates and certificate authorities for secure communications.

Adopt a defense in depth, layered strategy that secures both digital and physical presence with multiple countermeasures, from MFA and VPN to badges, locks, CCTV, and robust patching.

Design defensible networks from the ground up by identifying assets, conducting risk and vulnerability assessments, implementing physical security, network segmentation, dmz deployment, and continuous monitoring to keep threats at bay.

Explore endpoint security as an umbrella that protects laptops, desktops, and mobile devices through centralized management, antivirus, anti-malware, encryption, DLP, and firewalls, with IDS/IPS and agent-based monitoring.

Enforce Windows security across an Active Directory by editing and linking group policy objects to OUs, configuring password policies, lockout thresholds, and security settings.

Differentiate incident handling from incident response: handling focuses on planning and communication, while responders perform the technical investigation, containment, and eradication within a NIST-aligned framework.

Learn IT risk management fundamentals: identify assets, classify data, perform qualitative and quantitative risk assessments using ale, sle, and aro, and implement continuous monitoring, change management, and risk appetite decisions.

Learn the Linux file system layout, key directories, and how permissions, ownership, and access controls govern file security; practice using chmod, chown, and SSH keys to manage authentication and services.

Explore linux hardening and securing, including regular updates, backups, encryption, strong passwords, least privilege, disabling unnecessary services, with firewall, logging, monitoring, antivirus, and using hardening guides for CIS/SANS standards.

Establish baselines and monitor Linux systems for anomalies by analyzing ports and services, bandwidth, resource usage, and logs with Nmap, Darkstat, Netstat, Htop, and Snort.

Learn to harden Linux security using antivirus like ClamAV and Sophos, IDS/IPS such as Snort and Suricata, firewalls with iptables or UFW, and vulnerability scanners like OpenVAS and Nessus.

Enable comprehensive log management and SIEM analysis to detect breaches, audit access, and troubleshoot issues across Windows event viewer, Linux /var/log, and Apache logs.

Explore common attack methods, including injection attacks (code, command, SQL), denial of service and distributed denial, password attacks, man-in-the-middle, phishing, eavesdropping, ARP spoofing, and malware.

Learn practical mitigation strategies for injection attacks, denial of service, phishing, and eavesdropping, with secure coding practices, encryption, password policies, MFA, and defense in depth.

Learn how network security devices protect environments, focusing on firewalls, ACLs, and stateful inspection, with practical demonstrations of iptables on Linux and Windows firewall, and notes on UTMs, IDS/IPS.

Delve into the OSI and TCP/IP protocol stacks, from physical and data link to application layers, and analyze TCP, UDP, IP, DHCP, DNS and HTTP/HTTPS for network connectivity and addressing.

Secure Windows network services by using IPsec with IKEv2 for VPN tunnels, hardening IIS with authentication and SSL, and restricting remote desktop access.

Security policies provide clear guidelines, gain buy-in, align practices with the CIA triad, and define scope, exemptions, and reporting while supporting ongoing revision for evolving environments, including full disc encryption.

Explore virtualization and cloud security risks, including VM sprawl, golden image misconfigurations, and unauthorized hypervisor access. Learn to strengthen access controls, multi-tenancy risks, and secure data deletion in cloud environments.

Explore common web application vulnerabilities, from CGI misconfigurations and command execution to insecure sessions and token weaknesses, and learn secure practices with cookies, JWTs, and encryption.

Explore vulnerability scanning and penetration testing through recon, asset protection, and CIA triad concepts, learning to assess vulnerabilities, threats, and risks with automated scanners like Nessus and OpenVAS.

Explore Windows access controls by mastering NTFS and share permissions, inheritance, and effective access to secure folders, files, printers, and registry settings.

Explore how to plan, deploy, and manage Windows updates in large enterprise environments using WSUS, including domain controller setup, group policy, synchronization from Microsoft, and test vs production rollout.

Audit Windows systems to detect indicators of compromise using file and system auditing, alternate data streams, and recovery tools, then investigate incidents with forensics tools like Autopsy to preserve evidence.

Manage Windows security infrastructure by distinguishing desktop and server editions, implementing local and Active Directory accounts, and organizing permissions with groups and policy controls to enforce least privilege.

Explore wireless network basics, including 802.11 standards, 2.4 GHz and 5 GHz bands, and secure practices like WPA2, WPA, MAC filtering, and guarding against rogue access points and evil twins.