Service Hardening (SH)

Service Hardening is about configuring services to reduce their attack surface. By combining various low priority configuration issues, an attacker may be able to gain access and even elevate in a system without leaving much traces behind. Training focuses on practices that can be applied to almost any service – without modifying the program code.

Contents of the training:

This course is based on the most frequently occurring configuration security issues that our team has encountered over years of penetration testing.

  • The main topics covered are:
    • Public Key Certificates – chain verification, status, transparency
    • Reverse proxy – IP-address and certificate info forwarding
    • TLS – protocol, cipher suites, forward secrecy, CCA
    • SSH – host keys and SSHFP, agent forwarding
    • DNS – DoT/DoH, DNSSEC
    • E-mail – DKIM, SPF, DMARC
    • Logging – log tampering, creating meaningful logs

For each topic, first the theory is explained, based on this, the student will attack a service in a lab environment and finally, for selected topics, the student will harden that service to withstand such attack.

Target audience: developers, administrators, testers, security incident handlers and anyone else who has to deal with creating or maintaining services.
Learning method: Practical, lecture, hands-on-lab

More information from here.

Database administration with Microsoft SQL Server 2016 (MOC#20764, MOC#20765)

This five-day instructor-led course provides students who administer and maintain SQL Server databases with the knowledge and skills to administer a SQL server database infrastructure. Additionally, it will be of use to individuals who develop applications that deliver content from SQL Server databases.

Prerequisites:

  • Working knowledge of relational databases.
  • Working knowledge of Transact-SQL.
  • Some experience with database design.
  • This course is NOT recommended to junior developers.

Program:

  • Module 1: SQL Server Security
  • Module 2: Assigning Server and Database Roles
  • Module 3: Protecting Data with Encryption and Auditing
  • Module 4: Backing up SQL Server Databases
  • Module 5: Restoring SQL Server 2016 Databases
  • Module 6: Automating SQL Server Management
  • Module 7: Configuring Security for SQL Server Agent
  • Module 8: Introduction to managing SQL Server by using PowerShell
  • Module 9: Tracing Access to SQL Server with Extended events
  • Module 10: Importing and Exporting Data
  • Module 11: SQL Server 2016 Components
  • Module 12: Installing SQL Server 2016
  • Module 13: Upgrading SQL Server to SQL Server 2016
  • Module 14: Working with Databases
  • Module 15: Performing Database Maintenance
  • Module 16: Database Storage Options
  • Module 17: Planning to Deploy SQL Server on Microsoft Azure
  • Module 18: Migrating databases to Azure SQL Database
  • Module 19: Deploying SQL Server on a Microsoft Azure Virtual Machine
  • Module 20: Managing databases in the Cloud

Target audience:The primary audience for this course is individuals who administer and maintain SQL Server databases. The secondary audiences for this course are individuals who develop applications that deliver content from SQL Server databases.
Learning methods: Practical exercise.
Assesment methods: Execution of independent work.
Assesment form: Independent practical tasks on relevant topics.

More information:

  • Coffee breaks and lunch in restaurant “Lusikas” are included in the price.
  • Free Microsoft certification exam within the period of 6 months after finishing the course

Implementing a SQL Data Warehouse (MOC#20767)

This four-day instructor-led course provides students with the knowledge and skills to provision a Microsoft SQL Server database. The course covers SQL Server provision both on-premise and in Azure, and covers installing from new and migrating from an existing install.

Prerequisites:

  • Basic knowledge of the Microsoft Windows operating system and its core functionality.
  • Working knowledge of relational databases.
  • Some experience with database design.

Program:

  • Module 1: Introduction to Data Warehousing
  • Module 2: Planning Data Warehouse Infrastructure
  • Module 3: Designing and Implementing a Data Warehouse
  • Module 4: Columnstore Indexes
  • Module 5: Implementing an Azure SQL Data Warehouse
  • Module 6: Creating an ETL Solution
  • Module 7: Implementing Control Flow in an SSIS Package
  • Module 8: Debugging and Troubleshooting SSIS Packages
  • Module 9: Implementing a Data Extraction Solution
  • Module 10: Enforcing Data Quality
  • Module 11: Using Master Data Services
  • Module 12: Extending SQL Server Integration Services (SSIS)
  • Module 13: Deploying and Configuring SSIS Packages
  • Module 14: Consuming Data in a Data Warehouse

Target audience: The primary audience for this course are database professionals who need to fulfill a Business Intelligence Developer role. They will need to focus on hands-on work creating BI solutions including Data Warehouse implementation, ETL, and data cleansing.
Learning methods: Practical exercise.
Assesment methods: Execution of independent work.
Assesment form: Independent practical tasks on relevant topics.

More information:

  • Coffee breaks and lunch in restaurant “Lusikas” are included in the price.
  • Free Microsoft certification exam within the period of 6 months after finishing the course

Turvauuenduste haldus andmekeskuses

Serverite turvauuenduste haldus on võtme tähtsusega turvariskide maandamisel. Üks parimaid töövahendeid selleks on Microsofti Azure Update Management, mille kaudu on võimalik hallata nii Windowsi kui ka Linuxi põhiste serverite turvauuendusi ning uuendamise protsessi. Töötoa käigus mängib Kaido Järvemets koos osalejatega läbi turvauuenduste teenuse kasutuselevõtmise alates planeerimisest kuni logide ja mõõdikuteni.

Töötoa eesmärk on anda piisavad tehnilised teadmised, et osaleja saaks omal käel Azure Update Managementi teenuse esimeste serverite uuendamiseks tööle pandud.

Töötoas pühendume eelkõige järgnevale:

  • Turvauuenduste halduse planeerimine
  • Teenuste paigaldamine Azure
    • Azure Update Management
    • Log Analytics
    • Azure Automation
  • Agentide paigaldamine
    • PowerShell
    • Käsitsi
  • RunBookide loomine ja käivitamine Azure Automationi jaoks
  • Kuidas panna turvauuenduste paigaldusele skriptide käivitamisi (Pre/Post Runbooks)
  • Raporteerimine

Koolituse oodatav tulemus:

  • Oskad planeerida turvauuenduste paigaldust serveritele
  • Oskad paigaldada turvauuenduste haldusega seotuid teenuseid Azure
    • Azure Update Management
    • Log Analytics
    • Azure Automation
  • Oskad luua RunBooke Azure Automation jaoks

Sihtgrupp: süsteemi administraatorid

Hind sisaldab: Kohvipause koolituskeskuses ja ühist lõunat restoranis “Lusikas”

Specification by Example

Specification by example (also called Acceptance-test driven development, ATDD) is a collaborative approach to defining requirements and business-oriented functional tests for software products based on capturing and illustrating requirements using realistic examples instead of abstract statements.

With specification by example, requirements and tests become one, expressed as concrete, realistic examples.

Agenda:

  • Specification by example
  • Behaviour driven development (BDD)
  • Agile testing
  • Agile requirements
  • Impact mapping
  • Collaboration

Target audience:

  • testers
  • business analysts
  • developers
  • product owners working Scrum or Kanban projects and based on Gojko Adzic’s books Specification by Example and Bridging the Communication Gap.

Learning methods: Practical exercise, independent work.

Assesment methods: Execution of independent work.

Assesment form: Independent practical tasks on relevant topics.

Price includes coffee breaks and lunch in restaurant Lusikas.

More information here

Product Owner Key Skills:User Stories, Impact mapping

  • Have you struggled to split user stories into small but valuable chunks?
  • Do you have problems prioritising stories or getting a commitment from business stakeholders on what they want to achieve?
  • Do you have issues deciding when a story is done or how many other stories you really need to achieve a business objective?
  • Are you managing large amounts of stories that are problematic to estimate, prioritise or plan for?

If so, join this interactive workshop and bring your product owners and business sponsors to learn how to get the most out of user stories.

Gojko Adzic will present several simple yet incredibly effective ways industry-leading teams apply to make their user stories much more effective. Come to learn how to ensure that things coming into your work stream are defined well, split to be small enough but valuable, and achieve the big benefits of adaptive planning and that you can expect from great user stories.

Intended audience:

This is a seminar for a broad audience of anyone involved in iterative (agile/lean/scrum/kanban) delivery with user stories.

  • Business sponsors will learn how to ensure their organisation benefits more from agile team delivery capability, and how to steer product management and delivery better to achieve strategic goals faster.
  • Analysts and Product owners will learn how to link between business sponsors and teams more effectively, how to select and prioritise stories and features to achieve better impacts
  • Developers and testers will learn how to engage with business stakeholders and product owners to get better direction and focus delivery on things that really matter

Learning methods: Practical exercise, independent work.

Assesment methods: Execution of independent work.

Assesment form: Independent practical tasks on relevant topics.

Price includes coffee breaks and lunch in restaurant Lusikas.

More information here

 

Ettekande koostamise jätkukursus (MS PowerPoint)

Koolituse eesmärgiks on arendada osaleja MS PowerPoint’i oskusi nii, et kursuse tulemusena oskab osaleja luua kujunduspõhju ja vormistada pilkupüüdvamaid esitlusi.

Programm:

  • Tööd lihtsustavad kiirkorraldused
  • PowerPoint 2019/Office 365 uued võimalused
  • Töö esitlusega
    • slaidide grupeerimine (Section)
    • slaidide avanemine Zoom efektiga
  • Kujunduspõhja täiustamine või uue loomine (Slide Master)
    • slaidimallide lisamine, eemaldamine
  • Töö sisuslaididega
    • kujundusideed (Design Ideas) kasutamine
    • erinevad skeemid, ajateljed (SmartArt)
    • töö kujunditega (kujundite joondamine, järjestamine, grupeerimine, kujundite ühendamine, tükeldamine)
    • ikoonide, vektorgraafika ja 3D lisamine
    • töö piltidega, mõõtu viimine, paigutused
    • salvestatud video lisamine ja lõikamine
  • Efektid
    • liikumised (Morph), hüperlingid
  • Esinejavaade
  • Väljatrükitava reklaammaterjali kujundamine
  • Animeeritud veebibänneri loomine

Eelteadmised: koolitus on mõeldud neile, kes on PowerPointi kasutanud ja kel on soov oma oskusi täiendada

Sihtgrupp: koolitusele ootame kõiki, kes peavad koostama ja kujundama PowerPointi esitlusi

Hindamismeetod: iseseisev ülesanne

Hindamisülesanne: valmis ettekande muutmine atraktiivsemaks

Hind sisaldab kohvipause koolituskeskuses

Õppekavarühm: 0611 Arvutikasutus.

Lektori CV

Administering Microsoft SQL Server Databases (MOC#20462)

This four-day instructor-led course provides students with the knowledge and skills to maintain a Microsoft SQL Server 2014 database. The course focuses on teaching individuals how to use SQL Server 2014 product features and tools related to maintaining a database. Note: This course is designed for customers who are interested in learning SQL Server 2012 or SQL Server 2014. It covers the new features in SQL Server 2014, but also the important capabilities across the SQL Server data platform.

Prerequisities:

  • No need for previous programming skills.
  • Basic knowledge of the Microsoft Windows operating system and its core functionality.
  • Working knowledge of Transact-SQL.
  • Working knowledge of relational databases.
  • Some experience with database design.

Programm:

  • Module 1: Introduction to SQL Server 2014 Database Administration
  • Module 2: Installing and Configuring SQL Server 2014
  • Module 3: Working with Databases and Storage
  • Module 4: Planning and Implementing a Backup Strategy
  • Module 5: Restoring SQL Server 2014 Databases
  • Module 6: Importing and Exporting Data
  • Module 7: Monitoring SQL Server 2014
  • Module 8: Tracing SQL Server Activity
  • Module 9: Managing SQL Server Security
  • Module 10: Auditing Data Access and Encrypting Data
  • Module 11: Performing Ongoing Database Maintenance
  • Module 12: Automating SQL Server 2014 Management
  • Module 13: Monitoring SQL Server 2014 by Using Alerts and Notifications

Learning methods: Practical exercise.
Assesment methods: Execution of independent work.
Assesment form: Independent practical tasks on relevant topics.

More information:

  • Coffee breaks and lunch
  • Free Microsoft certification exam within the period of 6 months after finishing the course

Lecturer’s Linkedin

NEW! Team Excellence through Visualization

The goal for this training is to provide inspiration on how you as leader, scrum master or agile coach, can enhance collaboration, dialogue and engagement by visualizing processes, work and improvement work with whiteboards and post-its.

This training will help you and inspire you to see far beyond the simple “To do, Doing, Done” columns. You will learn tips, techniques, tools to create increased transparency, encourage collaboration, change behaviors and achieve increased productivity in the team through increased engagement and motivation.

The course is highly practical and interactive, and contains many exercises and discussions.

What I am going to get from this course:

  • Tips and trix for the team’s Scrum / Kanban board
  • How good visualization can increase commitment and motivation
  • Common pitfalls and mistakes

Target audience: Project Manager, Scrum Master, Agile Coach, Team Member or Product Owner.

More information:

  • Price includes coffee breaks and lunch in restaurant “Lusikas”
  • Read more about the course from here

 

 

Küljendamine edasijõudnule (Adobe Indesign CC baasil)

Koolituse eesmärgiks on arendada teadmisi mahukamate materjalide ja raamatute küljendamiseks.

Programm:

  • Programmi seadistused
  • Indesign CC versiooni uuendused
  • Tööd kiirendavad nipid
  • Interaktiivne PDF
  • PDF vormid
  • Publishing Online
  • Data merge
  • Mahuka dokumendi küljendamine
    • Pages, Master, Layers
    • Lehtede numeratsioon, sektsioonid, päised/jalused
    • Info sissetoomine – Place (Word, Excel, PDF, Photoshop, Illustrator)
      • Import options, Style mapping
      • Anchored objects
    • Tekstistiilid – (Paragraph, Character)
      • Nested styles
    • Sisukorra loomine ja kujundamine
    • Objektistiilid
    • Lahtri- ja tabelistiilid
    • Joonealused- ja ristviited
  • Raamatuloend (Book)
    • Raamatu dokumentide sünkroniseerimine
    • Raamatu numereerimine
    • Sisukord
    • Indeksid

Õppemeetodid: Praktiline harjutus, iseseisev töö

Hindamismeetod: Iseseisvate tööde sooritamine.

Hindamiskriteerium: Õpiväljundite saavutamist kontrollitakse läbi iseseisva praktilise töö.

Hind sisaldab kohvipause koolituskeskuses.