Catalogue · MOD-DEF-02

Network Security & Hardening

A well-segmented, hardened network is the first line of defence. This module teaches you to build it: deny-all segmentation, system hardening, detection (IDS/IPS), decoys and first steps toward Zero Trust.

Defence (Blue) Praticien 6 bricks 8 labs ≈ 17 h 5 real cases

Objectives

• Segment and filter a network (deny-all) • Harden systems per CIS benchmarks • Deploy network detection (IDS/IPS) • Introduce a Zero Trust architecture

Module bricks

BRQ-DEF-005 — Network segmentation (pfSense) (1 lab(s))
BRQ-DEF-006 — System hardening (CIS/GPO) (2 lab(s))
BRQ-DEF-007 — Real-time IDS/IPS deployment (Suricata) (1 lab(s))
BRQ-DEF-008 — Decoys & honeypots (Cowrie) (1 lab(s))
BRQ-DEF-009 — Zero Trust (intro) (1 lab(s))
BRQ-DEF-010 — Wi-Fi security & proxy (aircrack-ng) (2 lab(s))

Order this module View full catalogue