During the 2 day hands-on course experience the participants should form a good understanding of current attacker tool-set, attack types and methods. By experiencing the attacker mindset and point of view via hands-onexercises the participants not only will gain much higher appreciation for attack threats, but will be much more alert and better prepared for their own IT systems defence and security testing.

(veel …)

Web Application Security (WAS) is an eye-opening practical security course for anyone involved with development, testing and upkeeping of web applications on a daily basis.

Training days: 9-10 & 16-17 November 2026

Training duration: a total of 4 days of highly practical information heavily mixed with hands-on labs: two days of Server-Side attacks (directly attacking the server itself) and two days of Client-Side attacks (attacks that incorporate the victim’s browser).

Target audience: WebApp deve8lopers, testers, QA, maintainers, team leads, project leads, web server or hosting providers / administrators, information security specialists and managers.

Teaching aids: Any operating system computer with permissions to install and configure applications.

Server-Side attacks module (2 days):

• Security, security related terminology
• Factors for calculating risk
• Information sources
• The HTTP protocol and communication, using intercepting proxies
• Web application architectures – REST vs “oldschool”
• Building a defense (user input, input validation, encoding, sanitization, defense layers)
• Authentication (passwords and hashes; rules, common misunderstandings and mythsrelated to passwords)
• Authorization (lacking access controls)
• Unintended information leakage (using search engines, metadata from files)
• Business logic issues
• SQL injection – detection, query and database structure identification, blind and partially blind attacks, incorrect defenses and bypasses
• Command injection
• Web server configuration issues
• Path traversal
• File inclusion attacks (LFI, LFI2RCE)
• File upload and processing (bypassing incorrect defenses, ZIP and XML features)
• Server-Side Request Forgery (SSRF)
• XML eXternal Entity (XXE)

Client-Side attacks module (2 days):

• Browser security policies and terminology
• Cross-Site Script (XSS) – what it is and what it is not
• Web Content Injection attacks (HTML injection, JavaScript injection)
• URL encoding, URL manipulation
• Referrer, Referrer-Policy
• Content Execution Attacks
• Web Content Execution from uploaded files (HTML, XMl, SVG)
• Serving files, Content-Disposition header
• Using 3rd party content
• HTTP response headers (Content-Security-Policy (CSP), X-Content-Type-Options, StrictTransport-Security)
• Browser storages
• Cookies, setup and parameter nuances
• Web Storage API
• Session, session hijacking and session fixation attacks
• Client-Side Request Forgery attacks
• Cross-Origin Resource Sharing (CORS), CORS-safelisted and pre-flight requests, related headers
• UI Redress Attacks (ClickJacking)

Training methods: Our course employs a dynamic blend of theoretical concepts and hands-on application. Through interactive lectures, engaging discussions, and immersive labs, participants actively experience web application security. Everyone, regardless of their background, will successfully complete the labs, either independently or with guidance from our expert instructors. By placing you in the attacker’s shoes within our dedicated lab environment, we transform theoretical knowledge into practical skills. Instructors leverage real-world case studies and storytelling from penetration tests to provide a vivid and relatable learning experience. This approach ensures that participants not only grasp the intricacies of security principles but also gain the practical know-how to navigate and secure real-world scenarios.

Ideology of this training: At the core of our course is the belief that understanding the offensive side is paramount to effective defense. The “Attack to Defend” motto encapsulates this ideology, emphasizing the importance of practical knowledge. We go beyond traditional approaches, challenging outdated terms and providing insights into cutting-edge techniques. The course is designed not just to teach security principles but to instill a proactive mindset, empowering you to anticipate and thwart potential threats.

Intended outcome: By the end of this course, participants will possess the expertise to architect inherently secure software, integrating robust defense mechanisms seamlessly into the development process.Security will be ingrained as a proactive element, enabling participants to identify vulnerabilities early and build resilient applications from the ground up. Whether you’re a security enthusiast, developer, or IT professional, this program equips you to confidently create digital landscapes where security is not an addition but an integral part of the development lifecycle.

Graduation Criteria: A graduate of the training receives a certificate if he performs all the practical exercises given during the training.  Participants who have not achieved the learning outcomes will be issued a certificate of participation in the training upon request.

Curriculum group: 0612 Database and network design and management.

More information read from here.

This five-day, fast-paced course provides comprehensive training to install, configure, and manage a VMware NSX® environment. This course covers key features and functionality offered in the NSX 4.0.0.1 and NSX 4.0.1 releases, including the overall infrastructure, logical switching, logical routing, networking and security services, firewalls and advanced threat prevention, and more.

Prerequisites:

• Good understanding of TCP/IP services and protocols
• Knowledge and working experience of computer networking, including switching and routing technologies (L2 through L3) and L2 through L7 firewall
• Knowledge and working experience with VMware vSphere® environments
• Knowledge and working experience with Kubernetes or VMware vSphere® with VMware Tanzu® environments

Program:

• Course Introduction
• VMware Virtual Cloud Network and VMware NSX
• Preparing the NSX Infrastructure
• NSX Logical Switching
• NSX Logical Routing
• NSX Bridging
• NSX Firewalls
• NSX Advanced Threat Prevention
• NSX Services
• NSX User and Role Management
• NSX Federation

Target audience: Experienced security administrators or network administrators
Learning methods: Practical exercise, independent work.
Assesment methods: Execution of independent work.
Assesment form: Independent practical tasks on relevant topics.

More information:

• Read more about the course from here.

Õppekavarühm: 0613 Tarkvara ja rakenduste arendus ning analüüs.

Lecturer’s Linkedin

This five-day training course provides you with the knowledge, skills, and abilities to achieve competence in troubleshooting the VMware vSphere® 8 environment. This course increases your skill level and competence in using the command-line interface, VMware vSphere® Client™, log files, and other tools to analyze and solve problems.

Program:

• • Introduction to Troubleshooting
  • Troubleshooting Tools
  • Troubleshooting Virtual Networking
  • Troubleshooting Storage
  • Troubleshooting vSphere Clusters
  • Troubleshooting Virtual Machines
  • Troubleshooting vCenter Server and ESXi

By the end of the course, you should be able to meet the following objectives:

• Describe troubleshooting principles and procedures
• Use the vSphere Client, the command line, and log files to configure, diagnose, and correct problems in vSphere
• Explain the key vSphere log files from troubleshooting perspective
• Describe the benefits and capabilities of VMware Skyline
• Identify the networking issues by examining the reported symptoms, and troubleshoot the reported problems
• Identify the storage issues by examining the reported symptoms, and troubleshoot the reported problems
• Troubleshoot vSphere cluster failure scenarios and analyze possible causes
• Diagnose common VMware vSphere® High Availability (vSphere HA) problems and provide solutions
• Trouble virtual machine problems, including migration problems, snapshot problems, and connectivity problems
• Identify VMware ESXi™ host and VMware vCenter Server® problems, analyze failure scenarios, and find resolutions
• Troubleshoot performance problems with vSphere components

More information:

• Read more about the course here.

Õppekavarühm: 0613 Tarkvara ja rakenduste arendus ning analüüs.

Lecturer’s Linkedin

This five-day course teaches you advanced skills for configuring and maintaining a highly available and scalable virtual infrastructure. Through a mix of lecture and hands-on labs, you configure and optimize the VMware vSphere 8 features that build a foundation for a truly scalable infrastructure. You also discuss when and where these features have the greatest effect. Attend this course to deepen your understanding of vSphere and learn how its advanced features and controls can benefit your organization.

(veel …)

This five-day course features intensive hands-on training that focuses on installing, configuring, and managing VMware vSphere® 8, which includes VMware ESXi™ 8 and VMware vCenter Server® 8. This course prepares you to administer a vSphere infrastructure for an organization of any size.
This course is the foundation for most of the other VMware technologies in the software-defined data center.

Program:

• Course Introduction
• vSphere and Virtualization Overview
• Installing and Configuring ESXi
• Deploying and Configuring vCenter
• Configuring vSphere Networking
• Configuring vSphere Storage
• Deploying Virtual Machines
• Managing Virtual Machines
• Deploying and Configuring vSphere Clusters
• Managing the vSphere Lifecycle

Target audience:  System administrators, system engineers.
Learning methods: Practical exercise, independent work.
Assesment methods: Execution of independent work.
Assesment form: Independent practical tasks on relevant topics.

More information:

• Read more about the class from here

Õppekavarühm: 0613 Tarkvara ja rakenduste arendus ning analüüs.

Lecturer’s Linkedin

This five-day course features intensive hands-on training that focuses on installing, configuring, and managing VMware vSphere® 8, which includes VMware ESXi™ 8 and VMware vCenter Server® 8. This course prepares you to administer a vSphere infrastructure for an organization of any size.
This course is the foundation for most of the other VMware technologies in the software-defined data center.

Program:

• Course Introduction
• vSphere and Virtualization Overview
• Installing and Configuring ESXi
• Deploying and Configuring vCenter
• Configuring vSphere Networking
• Configuring vSphere Storage
• Deploying Virtual Machines
• Managing Virtual Machines
• Deploying and Configuring vSphere Clusters
• Managing the vSphere Lifecycle

Target audience:  System administrators, system engineers.
Learning methods: Practical exercise, independent work.
Assesment methods: Execution of independent work.
Assesment form: Independent practical tasks on relevant topics.

More information:

• Read more about the class from here

Õppekavarühm: 0613 Tarkvara ja rakenduste arendus ning analüüs.

Lecturer’s Linkedin

The Veeam® Backup & Replication™ v13: Configure, Manage and Recover training course is a four-day technical course focused on teaching IT professionals the skills to configure, manage and support a Veeam Backup & Replication v13 solution. With extensive hands-on labs, the class enables administrators and engineers to effectively protect and manage data in an ever-changing technical and business environment, bringing tangible benefit to business in the digital world. This course is based on Veeam Backup & Replication v13, part of Veeam Data Platform

(veel …)

Koolituse eesmärk: 2. augustil 2024 jõustus tehisintellekti käsitlev määrus (EL) 2024/1689, mida hakati osaliselt rakendama juba alates 2. veebruarist 2025

Koolitus annab osalejatele vajalikud teadmised kehtivatest IT-sektori õiguslikest nõuetest, isikuandmete kaitse üldmääruse EL/2016/679 (IKÜM) ning  tehisintellekti üldmääruse EL/2024/1689 (TI-määrus) tingimustes.

Koolitusele on oodatud:

• IT-spetsialistid (arendajad, süsteemiadministraatorid), kes peavad oma töös arvestama õiguslike regulatsioonidega.
• IT-ettevõtete juhid ja tellijad, kes soovivad mõista TI  kasutamisele kehtestatud õigusalaseid nõudeid.

Lisaks kõik ülejäänud, kellel on teema vastu huvi.

Varasem õigusalane haridus pole vajalik. Kasuks tulevad baasteadmises IT-süsteemidest ja andmetöötlusest.

Soovituslik lugemine: Isaac Asimovi novell „The Machine That Won the War“, 1961 („Masin, mis võitis sõja“, eesti keeles 1976, kogumik Lilled Allgernonile)

Õppevahendid: Veebis osalemise puhul on vaja veebibrauseriga arvutit  koos Zoomi rakendusega.

Programm:

Õigusnormi selgitus

• õigusnormide omavaheline seos
• õigusnormi tõlgendamine

TI-määrus

• kohaldamisala
• keelatud kasutusviisid
• suure riskiga tehisintellektisüsteemid
  • esitatavad nõuded
  • pakkujate ja juurutajate ning muude osaliste kohustused
  • läbipaistvuskohustused
• üldotstarbelised tehisintellektimudelid
  • liigitamine
  • pakkujate kohustused
  • süsteemse riskiga üldotstarbeliste tehisintellektimudelite pakkujate kohustused
• turustamisjärgne seire intsidentidest teatamine

Ülevaade privaatsusõiguse õiguslikust reguleerimisest:

• millised on isiku õigused ja kohustused isikuandmete töötlemisel
• isikuandmete töötlemise regulatsioonid rahvusvahelisel ja siseriiklikul tasandil
• isikuandmete töötleja õigused ja kohustused isikuandmete töötlemisel
• IKÜM isikuandmete kasutamisest uuringutest
• IT lahenduste vastavus IKÜM nõuetele
• kuidas on võimalik isikuandmeid töödelda, viia läbi uuringuid, ilma IKÜM nõudeid rikkumata
• ainult isikuandmete töötlemisele omastest erisustest võrreldes andmeturbega laiemalt. Andmete kaitse (data security) ja isikandmete kaitse (personal data protection) ühisosa ja erinevused.

Õigusaktide andmebaasid

• Euroopa Liidu teataja kasutamine
• Riigi Teataja kasutamine
• kuidas leida omavahel seotud õigusakte
• muud andmebaasid

Õppemeetodid: Õppetöös saab osaleda klassiruumi tulles või liitudes koolitusega läbi veebikeskkonna Zoom.

Koolituse maht on 8 akadeemilist  tundi.

Hindamismeetod: Õpiväljundite saavutamist hinnatakse koolituse lõpus teadmiste testiga selleks ettevalmistatud õppekeskkonnas.

Hindamiskriteerium: Test loetakse positiivseks kui 51% vastustest on õiged.

Koolituse lõpetamine: Koolituse lõpetaja saab tunnistuse kui sooritab positiivselt koolituse lõpus tehtud teadmiste testi.  Osalejatele, kes õpiväljundeid saavutanud ei ole väljastatakse soovi korral tõend koolitusel osalemise kohta.

Hind sisaldab: Materjale

Õppekavarühm: 0612 Andmebaaside ja võrgu disain ning haldus.

Osalejad saavad praktilised teadmised ettevõtte infoturbe ja  infoturbestandardi ISO27001 rakendamise protsessist st juurutamisega kaasnevatest võimalustest ja väljakutstest.

Koolitusele on oodatud:

• Ettevõtete infoturbe ja IT-spetsialistid;
• Juhtkonna liikmed ja riskijuhtimise spetsialistid;
• Avaliku ja erasektori organisatsioonide esindajad, kes vastutavad andmete ja turvasüsteemide eest;
• Kõik, kes soovivad ennast kursi viia infoturbejuhtimise standardi ISO27001 juurutamise ja rakendamisega.

Elementaarne arusaam IT-süsteemidest ja andmeturbe põhimõtetest on soovitatav, kuid mitte nõutav.

Õppevahendid: Paber, pliiats või arvuti märkmete tegemiseks

Programm:
Koolitusel käsitletava teemad:

• Mis on infoturve, millega infoturve üldse tegeleb ja kellele seda vaja on?
• Miks eelistada infoturbe tagamiseks just ISO/IEC 27001 standardit?
• Kuidas jõuab üks ettevõte ISO/IEC 27001 nõuete rakendamiseni?
• Mida ja mis järjekorras me peaksime tegema, et saada ISO/IEC 27001 sertifikaat? Kaua see aega võtab ja mis see maksab?
• Võtmeterminite selgitamine:
  • käsitlusala,
  • kohaldusmäärang (standardis SoA ehk State Of Aplcability),
  • infoturbe juhtimise süsteem (ISMS).
• Olulised eeldused: infovarade ülevaade, infovarade riskid jne
• Protsessid, mis tuleb organisatsioonis käivitada ja kuidas neid käigus hoida
• Tehnilised protsessid ja infoturve
• Auditeerimine – mida see tähendab ja kuidas see toimub?

Õppemeetodid: Õppetöös saab osaleda klassiruumi tulles või liitudes koolitusega läbi veebikeskkonna Zoom.

Koolituse maht on 8 tundi 2 tund praktilisi harjutusi koolituskeskkonnas.

• Loengud ja praktilised näited
• Grupitööd ja arutelud
• Juhtumiuuringud ja praktilised harjutused

Hindamismeetod: Praktilised harjutused ja teadmiste test koolituse lõpus.

Hindamiskriteerium: Õpiväljundite saavutamist hinnatakse koolituse ajal läbi viidud tagasisidestatud praktiliste harjutuste ja lõpu testi põhjal. Lõputest peab olema sooritatud vähemalt 70% ulatuses.

Koolituse lõpetamine: Õpiväljundite saavutamise korral  saab koolituse lõpetaja tunnistuse. Osalejatele, kes õpiväljundeid saavutanud ei ole väljastatakse soovi korral tõend koolitusel osalemise kohta.

Hind sisaldab: Kohvipause koolituskeskuses ja ühist lõunasööki.

Õppekavarühm: 0612 Andmebaaside ja võrgu disain ning haldus.

Kliendi tagasisided:

„Koolitus andis hea esmase ülevaate ISO 27001 sertifitseerimise juures olulistele punktidele“

„Hästi korraldatud, infovahetus toimus kiiresti, koolitus oli sisuline ja kasulik.“