Course Overview

The endpoint is often the last line of defense against malicious threat actors. OSSEC provides an open source solution that provides defenders with a powerful correlation and analysis engine to provide real time alerting and active response. 

This course provides learners with an overview of how OSSEC provides a variety of solutions to address your unique use cases. We will highlight the various OSSEC features and their abilities to detect and mitigate an active intrusion. This course will walk you through how to install, configure and validate that the OSSEC controls are responding to intrusion attempts. 

By the end of the course, you will have a deep understanding of how HIDS is a necessary component to protecting your organization’s assets. You will be capable of installing and configuring OSSEC and managing your OSSEC deployment across your enterprise.

What You Will Learn

  • Gain an understanding of how threat actors target end points.
  • Learn to install OSSEC on various platforms.
  • Understand how OSSEC can be used to protect endpoints from common attacks.
  • Learn to deploy OSSEC in an enterprise for centralized management.
  • Gain an understanding of OSSEC rules and exceptions.

Program Curriculum

  • OSSEC HIDS Place in Cybersecurity
  • OSSEC Architecture and Agents
  • Differences Between OSSEC Clients
  • $7 Million Cybersecurity Scholarship by EC-Council
  • Chapter 1 Lab
  • Chapter 1 Quiz

  • Virtual Environment
  • OSSEC Server Installation
  • Chapter 2 Quiz

  • OSSEC Server Installation
  • OSSEC Windows Agent Installation
  • Ubuntu Agent Installation
  • Chapter 3 Lab
  • Chapter 3 Quiz

  • Understanding Rules Analysis Process
  • Understanding Events and Rules
  • OSSEC Rule Analysis
  • Chapter 4 Lab
  • Chapter 4 Quiz

  • Integrity Check
  • Rootkit Detection
  • Integrity Demo
  • Chapter 5 Quiz

  • OSSEC Automation
  • Active Response Demo
  • Chapter 6 Lab
  • Chapter 6 Quiz

  • Compliance
  • Chapter 7 Quiz

  • Putting It All Together
  • Chapter 8 Lab
Load more modules

Instructor

Timothy McLaurin

Timothy McLaurin is a Doctor of Science working as an Information Security Professional. He is CISSP, CISM, PMP, and ITIL Certified with over 15 years of IT experience with a wide variety of specialization in securing fully operational production environments. He has extensive experience in deploying and managing secure operating environments ensuring NIST compliance. He has engineered solutions for secure unclassified network access with an emphasis on allowing the least privileges and extensive auditing capabilities.

Join over 1 Million professionals from the most renowned Companies in the world!

certificate

Empower Your Learning with Our Flexible Plans

Invest in your future with our flexible subscription plans. Whether you're just starting out or looking to enhance your expertise, there's a plan tailored to meet your needs. Gain access to in-demand skills and courses for your continuous learning needs.

Monthly Plans
Annual Plans
Save 20% with our annual plans!

Pro

Ideal for continuous learning, offering extensive resources with 600+ courses and diverse Learning Paths to enhance your skills.

$ 499.00
Billed annually or $59.00 billed monthly

What is included

  • 700+ Premium Short Courses
  • 50+ Structured Learning Paths
  • Validation of Completion with all courses and learning paths
  • New Courses added every month
Early Access Offer

Pro +

Experience immersive learning with Practice Labs, CTF Challenges, and exclusive EC-Council certifications for comprehensive skill-building.

$ 599.00
Billed annually or $69.00 billed monthly

Everything in Pro and

  • 800+ Practice Lab exercises with guided instructions
  • 150+ CTF Challenges with detailed walkthroughs
  • New Practice Labs and Challenges added every month
  • 3 Official EC-Council Essentials Certifications¹ (retails at $897!)
    Exclusive Bonus with Annual Plans

¹This plan includes Digital Forensics Essentials (DFE), Ethical Hacking Essentials (EHE), and Network Defense Essentials (NDE) certifications. No other EC-Council certifications are included.

Related Courses

1 of 8