Summary

This course is designed to introduce and reinforce the core aspects of networking, which are essential in today's digital world. The curriculum begins with the basics of network types and topologies, moves into the mechanics of data transmission across networks, and examines the critical components that ensure secure and efficient communication. By the end of this course, students will possess a thorough understanding of network infrastructure. To strengthen this foundational knowledge, the following key components will be covered:

Definition and Types of Networks
Networking Models
Types of Network Components and their Roles
MAC/IP Addresses and Ports
Address Resolution Protocol (ARP)
Network Data Flow Process
DHCP and DORA Process
Role of DHCP Server and Client
IP Address Leasing
IP Address Conservation
Types of NAT
Port Address Translation (PAT)
DNS and DNS Hierarchy
DNS Resolution Process
Internet Architectures
Wireless Networks and Communication Frequencies
Mobile Hotspot
CIA Triad
Role and Types of Firewalls
Intrusion Detection and Prevention

This module is broken into sections with accompanying hands-on exercises to practice each of the tactics and techniques we cover.

As you work through the module, you will see example commands and command output for the various topics introduced. It is worth reproducing as many of these examples as possible to reinforce further the concepts presented in each section. You can do this in the target host provided in the interactive sections or your virtual machine.

You can start and stop the module at any time and pick up where you left off. There is no time limit or "grading," but you must complete all of the exercises and the skills assessment to receive the maximum number of cubes and have this module marked as complete in any paths you have chosen.

The module is classified as "Fundamental" but assumes an understanding of information security fundamentals.

Introduction to Networks

Welcome to Network Foundations! In this introductory module, we will explore the technology behind computer networking - also known as "networking" or "networks" - and why it is essential to our lives. We will mostly focus on two primary types of networks: Local Area Networks (LANs) and Wide Area Networks (WANs).

Understanding how devices are able to communicate with one another, from inside our homes to across the globe, is fundamental knowledge for those looking to enter the field of cyber security. The interconnectedness of almost every device in our world today sets the backdrop for the ever increasing demand for security professionals.

What is a Network?

A network is a collection of interconnected devices that can communicate - sending and receiving data, and also sharing resources with each other. These individual endpoint devices, often called nodes, include computers, smartphones, printers, and servers. However, nodes alone do not comprise the entire network. The table below shows some networking key concepts.

Concepts	Description
`Nodes`	Individual devices connected to a network.
`Links`	Communication pathways that connect nodes (wired or wireless).
`Data Sharing`	The primary purpose of a network is to enable data exchange.

Let's explain the above using a real-world example. Think of a group of friends chatting in a room. Each person represents a device (node), and their ability to talk and listen represents the communication links. The conversation is the data being shared.

Why Are Networks Important?

Networks, particularly since the advent of the Internet, have radically transformed society, enabling the multitude of possibilities that are now essential to our lives. Below are just a few of the benefits afforded to us by this incredible technology.

Function	Description
`Resource Sharing`	Multiple devices can share hardware (like printers) and software resources.
`Communication`	Instant messaging, emails, and video calls rely on networks.
`Data Access`	Access files and databases from any connected device.
`Collaboration`	Work together in real-time, even when miles apart.

Types of Networks

Networks vary in size and scope. The two primary types are Local Area Network (LAN) and Wide Area Network (WAN).

Local Area Network (LAN)

A Local Area Network (LAN) connects devices over a short distance, such as within a home, school, or small office building. Here are some of its key characteristics:

Characteristic	Description
`Geographical Scope`	Covers a small area.
`Ownership`	Typically owned and managed by a single person or organization.
`Speed`	High data transfer rates.
`Media`	Uses wired (Ethernet cables) or wireless (Wi-Fi) connections.

The following diagram shows how a home's Wi-Fi connects devices such as laptops, smartphones, and smart TVs, allowing them to share files and access the internet.

Wide Area Network (WAN)

A Wide Area Network (WAN) spans a large geographical area, connecting multiple LANs. Below are some of its key characteristics:

Characteristic	Description
`Geographical Scope`	Covers cities, countries, or continents.
`Ownership`	Often a collective or distributed ownership (e.g., internet service providers).
`Speed`	Slower data transfer rates compared to LANs due to long-distance data travel.
`Media`	Utilizes fiber optics, satellite links, and leased telecommunication lines.

The Internet is the largest example of a WAN, connecting millions of LANs globally.

Comparing LAN and WAN

Aspect	LAN	WAN
`Size`	Small, localized area	Large, broad area
`Ownership`	Single person or organization	Multiple organizations/service providers
`Speed`	High	Lower compared to LAN
`Maintenance`	Easier and less expensive	Complex and costly
`Example`	Home or office network	The Internet

How Do LANs and WANs Work Together?

Local Area Networks (LANs) can connect to Wide Area Networks (WANs) to access broader networks beyond their immediate scope. This connectivity allows for expanded communication and resource sharing on a much larger scale.

For instance, when accessing the Internet, a home LAN connects to an Internet Service Provider's (ISP's) WAN, which grants Internet access to all devices within the home network. An ISP is a company that provides individuals and organizations with access to the Internet. In this setup, a device called a modem (modulator-demodulator) plays a crucial role. The modem acts as a bridge between your home network and the ISP's infrastructure, converting digital signals from your router into a format suitable for transmission over various media like telephone lines, cable systems, and fiber optics. This connection transforms a simple local network into a gateway to the resources available online.

In a business setting, companies link multiple office LANs via WANs to achieve unified communication and collaboration across different geographic locations. By connecting these LANs through a WAN, employees in various offices can share information, access centralized databases, and work together in real-time, enhancing productivity within the organization.

Let's consider the following scenario to illustrate how LANs and WANs work together. At home, our devices—such as laptops, smartphones, and tablets—connect to our home router, forming a LAN. This router doesn't just manage local traffic; it also communicates with our ISP's WAN. Through this connection to the WAN, our home network gains the ability to access websites and online services hosted all over the world. This seamless integration between the LAN and WAN enables us to reach global content and interact with services beyond our local network.

Sign Up / Log In to Unlock the Module

Please Sign Up or Log In to unlock the module and access the rest of the sections.

Sections

Introduction to Networks PREVIEW
Network Concepts
Components of a Network
Network Communication
Dynamic Host Configuration Protocol (DHCP)
Network Address Translation (NAT)
Domain Name System (DNS)
Internet Architecture
Wireless Networks
Network Security
Data Flow Example
Skills Assessment

Relevant Paths

This module progresses you towards the following Paths

Junior Cybersecurity Analyst

The Junior Cybersecurity Analyst Job Role Path is the first step to enter and gain practical, hands-on experience in the cybersecurity field. This path covers essential cybersecurity concepts and builds a foundational understanding of operating systems, offensive and defensive tools, attack tactics, log analysis, and methodologies employed by penetration testers and security operations centers. Students will explore key principles while gaining practical experience in both offensive and defensive cybersecurity assessments, including the basics of penetration testing and security analysis. This job role path equips you with the skills and mindset needed to launch a career in cybersecurity, offering a well-rounded foundation in both offensive and defensive techniques that reflects the evolving demands of real-world cybersecurity operations.

Easy

315 Sections

Required: 810

Reward: +250

20 Modules included

Introduction to Information Security

Fundamental

24 Sections

Reward: +10

This theoretical module provides a comprehensive introduction to the foundational components of information security, focusing on the structure and operation of effective InfoSec frameworks. It explores the theoretical roles of security applications across networks, software, mobile devices, cloud environments, and operational systems, emphasizing their importance in protecting organizational assets. Students will gain an understanding of common threats, including malware and advanced persistent threats (APTs), alongside strategies for mitigating these risks. The module also introduces the roles and responsibilities of security teams and InfoSec professionals, equipping students with the confidence to advance their knowledge and explore specialized areas within the field.

Network Foundations

Fundamental

12 Sections

Reward: +10

This course introduces the basic concepts essential to understanding the world of networking. Students will learn about various network types such as LANs and WANs, discuss fundamental networking principles including the OSI and TCP/IP models, and explore key network components like routers and servers. The course also covers important topics such as IP addressing, network security, and internet architecture, providing a comprehensive overview of networking that is crucial for any IT professional.

Introduction to Networking

Fundamental

21 Sections

Reward: +10

As an information security professional, a firm grasp of networking fundamentals and the required components is necessary. Without a strong foundation in networking, it will be tough to progress in any area of information security. Understanding how a network is structured and how the communication between the individual hosts and servers takes place using the various protocols allows us to understand the entire network structure and its network traffic in detail and how different communication standards are handled. This knowledge is essential to create our tools and to interact with the protocols.

Linux Fundamentals

Fundamental

30 Sections

Reward: +10

This module covers the fundamentals required to work comfortably with the Linux operating system and shell.

Introduction to Bash Scripting

Easy

10 Sections

Reward: +10

This module covers the basics needed for working with Bash scripts to automate tasks on Linux systems. A strong grasp of Bash is a fundamental skill for anyone working in a technical information security role. Through the power of automation, we can unlock the Linux operating system's full potential and efficiently perform habitual tasks.

Windows Fundamentals

Fundamental

14 Sections

Reward: +10

This module covers the fundamentals required to work comfortably with the Windows operating system.

Introduction to Windows Command Line

Easy

23 Sections

Reward: +10

As administrators and Pentesters, we may not always be able to utilize a graphical user interface for the actions we need to perform. Introduction to Windows Command Line aims to introduce students to the wide range of uses for Command Prompt and PowerShell within a Windows environment. We will cover basic usage of both key executables for administration, useful PowerShell cmdlets and modules, and different ways to leverage these tools to our benefit.

Web Requests

Fundamental

8 Sections

Reward: +10

This module introduces the topic of HTTP web requests and how different web applications utilize them to communicate with their backends.

Introduction to Web Applications

Fundamental

17 Sections

Reward: +10

In the Introduction to Web Applications module, you will learn all of the basics of how web applications work and begin to look at them from an information security perspective.

Introduction to Penetration Testing

Fundamental

21 Sections

Reward: +10

In this module, we will get into the fundamentals of penetration testing, a critical aspect of cybersecurity theory that explains how professionals in the field operate and underscores the significance of penetration testing within cybersecurity practices.

Pentest in a Nutshell

Easy

24 Sections

Reward: +10

This module focuses on providing a detailed, guided simulation of a real penetration test, emphasizing the fine details of the penetration testing process. It guides you through each step, from reconnaissance to exploitation, mirroring the techniques and methodologies used by professional penetration testers. It offers hands-on experience in a controlled environment and aims to deepen understanding and sharpen skills essential for effective cybersecurity assessments.

Network Enumeration with Nmap

Easy

12 Sections

Reward: +10

Nmap is one of the most used networking mapping and discovery tools because of its accurate results and efficiency. The tool is widely used by both offensive and defensive security practitioners. This module covers fundamentals that will be needed to use the Nmap tool for performing effective network enumeration.

Footprinting

Medium

21 Sections

Reward: +20

This module covers techniques for footprinting the most commonly used services in almost all enterprise and business IT infrastructures. Footprinting is an essential phase of any penetration test or security audit to identify and prevent information disclosure. Using this process, we examine the individual services and attempt to obtain as much information from them as possible.

Hacking WordPress

Easy

16 Sections

Reward: +20

WordPress is an open-source Content Management System (CMS) that can be used for multiple purposes.

Using the Metasploit Framework

Easy

15 Sections

Reward: +10

The Metasploit Framework is an open-source set of tools used for network enumeration, attacks, testing security vulnerabilities, evading detection, performing privilege escalation attacks, and performing post-exploitation.

Intro to Network Traffic Analysis

Medium

15 Sections

Reward: +10

Network traffic analysis is used by security teams to monitor network activity and look for anomalies that could indicate security and operational issues. Offensive security practitioners can use network traffic analysis to search for sensitive data such as credentials, hidden applications, reachable network segments, or other potentially sensitive information "on the wire." Network traffic analysis has many uses for attackers and defenders alike.

Incident Handling Process

Fundamental

9 Sections

Reward: +10

Security Incident handling has become a vital part of each organization's defensive strategy, as attacks constantly evolve and successful compromises are becoming a daily occurrence. In this module, we will review the process of handling an incident from the very early stage of detecting a suspicious event, to confirming a compromise and responding to it.

Windows Event Logs & Finding Evil

Mini-Module

Medium

6 Sections

Reward: +20

This module covers the exploration of Windows Event Logs and their significance in uncovering suspicious activities. Throughout the course, we delve into the anatomy of Windows Event Logs and highlight the logs that hold the most valuable information for investigations. The module also focuses on utilizing Sysmon and Event Logs for detecting and analyzing malicious behavior. Additionally, we delve into Event Tracing for Windows (ETW), explaining its architecture and components, and provide ETW-based detection examples. To streamline the analysis process, we introduce the powerful Get-WinEvent cmdlet.

Security Monitoring & SIEM Fundamentals

Easy

11 Sections

Reward: +20

This module provides a concise yet comprehensive overview of Security Information and Event Management (SIEM) and the Elastic Stack. It demystifies the essential workings of a Security Operation Center (SOC), explores the application of the MITRE ATT&CK framework within SOCs, and introduces SIEM (KQL) query development. With a focus on practical skills, students will learn how to develop SIEM use cases and visualizations using the Elastic Stack.

Introduction to Threat Hunting & Hunting With Elastic

Mini-Module

Medium

6 Sections

Reward: +20

This module initially lays the groundwork for understanding Threat Hunting, ranging from its basic definition, to the structure of a threat hunting team. The module also dives into the threat hunting process, highlighting the interrelationships between threat hunting, risk assessment, and incident handling. Furthermore, the module elucidates the fundamentals of Cyber Threat Intelligence (CTI). It expands on the different types of threat intelligence and offers guidance on effectively interpreting a threat intelligence report. Finally, the module puts theory into practice, showcasing how to conduct threat hunting using the Elastic stack. This practical segment uses real-world logs to provide learners with hands-on experience.