1. IT Security – introduction
Core IT security concepts establish the framework for the rest of the program. Participants review fundamental issues, learn how risk management supports security decisions, and examine system hardening as a practical method for reducing the attack surface in administrative environments.
- basic issues,
- risk management,
- system hardening.
2. Endpoint and identity security using Microsoft software as an example
Microsoft-based environments illustrate how endpoint protection and identity security reinforce each other in practice. The section covers identity management, securing Microsoft Windows, and the processes used to detect incidents and coordinate their handling across user and device layers.
3. Network scan
Effective reconnaissance begins with identifying what is actually present and reachable in the environment. This section covers tools for network scanning, detection of active devices and discovery of exposed services, building the baseline needed for further verification and security assessment.
- tools for system reconnaissance,
- devices operating on the network,
- services operating on the network.
4. Vulnerability analysis
Vulnerability analysis connects technical findings with their operational significance. Participants work with assessment tools, learn how weaknesses are identified and interpreted, and use security level reports to prioritize remediation activities and support a more structured risk-based approach.
- tools,
- security level reports.
5. Wireless Network Security
Securing Wi-Fi infrastructure requires attention to configuration choices, access control and the radio environment itself. Here the program addresses the main risks affecting wireless networks and shows how administrators can reduce exposure by strengthening protection mechanisms and operational practices.
6. System security – breaking
By examining how system protections are bypassed, participants gain a clearer view of weak configurations and exposed attack paths. The focus is on practical techniques used to break through safeguards, with attention to how these methods inform hardening priorities and administrative controls.
7. Password cracking
Password cracking is presented from the perspective of attack methods, defensive assessment and wireless credentials. The section covers tools used to test password strength and explains how WEP and WPA2 keys can be targeted, providing context for stronger authentication and access policies.
- tools,
- WEP and WPA2 passwords.
8. Social engineering techniques
Attackers often bypass technical controls by manipulating trust, routine and urgency. This section examines common social engineering techniques, how they are used against administrators and users, and what procedural safeguards help reduce exposure to phishing, pretexting and related attacks.
9. Crisis management
When a security incident escalates, technical response must align with communication, escalation paths and service continuity. This part addresses decision-making under pressure, coordination during disruptions and the principles of restoring operations while limiting business and operational impact.
10. Training summary
Closing the course, participants consolidate the links between reconnaissance, exploitation, identity protection and incident handling. The summary organizes the main conclusions, highlights recurring risk patterns and helps translate the training content into practical priorities for daily administrative work.