Hi all,

Same depending on Finances and time..

 -January- Python programming (Viewing the Google Class & reading Python for beginners)

 -Feb CCIE Sec Written (prepared for v3 but awaiting v4 material from ipexpert)

 -SANS 503: Intrusion detection in-depth: (Company sponsored ) Date not confirmed

 - OSCP completion... (Long pending since 2011)

 -CCIE SEC LAB (Company Sponsored Training)

Awesome.. thnx

I was looking for the review of 503 as well as some similar courses.
I have been working with Firewalls, VPN and IDS/IPS, SIEM for quite a time but always feel I need a bit more knowledge in Intrusion analysis, log analysis.

So wanted to know what exactly 503 offers and if any other similar courses.

My goal is to be able to identify Intrusion or malicious activity.

@docrice
 I saw the review and seems nice. Do they offer IPv6 analysis as well?
 I am good with TCP/IP so might go straight for 558 i think or if something similar I can find.


Thanks all.

Hey

I am looking for a review for this course and if any other courses are offered by some other institutes.

SANS:
SEC503: Intrusion Detection In-Depth


Pratik

I tired the first module on python it seems good.
Thanks for sharing.

Lol. It was more of I tried for couple months to get the refund ($95) but then was too busy traveling and working to chase up. It was only due to this forum that kick started again.


The good news is today Thomas gave me a refund and my account is settled with hackingdojo.

Thanks Thomas for sorting this out.

Thomas found my subscription details which were requested last April. Hence he setup lifetime access for me to the material for the Mukyu / Shodan. My initial subscription was only for few months I think.

 Which I really appreciate.

However it has been a year and I have already learnt those things, so paying them again is of no use to me. So I have requested Thomas to give me access to advanced levels or provide a refund.

My only reason to post the updates is to let everyone know that Thomas is replying and he is doing what he can.


Pratik

Just to let everyone know that Thomas responded me regarding my queries for refunds etc. He has requested me for some detail and he will check internally.

Leaving the Yet issue of refund at a debate.
I am not debating wether the money should be a refund or not but what Yet is trying to say is the way HackingDojo deals with this kind of situations is not correct.

What about my issue?
I didnt even get to start the course. I waited for course confirmation details and nothing came. All the refund emails were ignored.

Had a similar experience.
I joined for pay monthly. The guy took the first months money and just   emailed me to get my background. Once sent my information got no reply for the course timings and after getting tired of chasing him for couple weeks I started requesting  for refunds. Till this date there has been no emails from him and He has blocked me on Skype etc.

 The amount wasnt as big as yours but its some money that I will never see it back.

Strongly agree with you. Its not just limited to Penetration Testing but also to the Infosec education being offered.

Apart from the being good at the skills you are offering, one major think is marketing. Security being a tough competition, as many skilled people offering their service, marketing is a Big Must. There must be something to make you stand out shining from the competition.
I would spend majority of my capital 'initially' in marketing, because only when you sell u earn and u learn.

 Start with 'FREE' we all love it when its free. Look at everything around as case study,

 Metasploit- Started as free (still community version is free) but then added certain Pro products which make a 'buck'

 SecurityTube- Started as providing infosec education at no cost and still does provide a huge set of topics for free. Once successful started infosec certifications at a low price, again making a buck.

All those guys might have not started the project to make money initially but we all know how over the years some of free products have developed into industry must haves.


 

 Always plan long term and always innovate.


Just my 2cents.

I have attached some notes which were given to me by a colleague and i have added a bit to it while I am trying to learn assembly.


let me know if you find these useful. 

Sites affected due to Internet Registry admin error or the registry iteself got hacked?

http://www.theregister.co.uk/2012/10/10/google_and_yahoo_ie_hit_by_domain_hijack/

 A brief forensics by sophos
 http://nakedsecurity.sophos.com/2012/10/09/google-disappears-for-irish-internet-users-but-was-it-a-nameserver-hack-or-admin-screwup/


This is a big issue if as such the Ireland Registry got hacked.
Does anyone have more information on this?

Would this be a social engineering attack or really a loop hole in the registry infrastructure?

Once you read a little basic of python. You can enrol for Securitytube python scripting expert course.. its about $250 and the course starts from basic and goes advanced; course is aimed to target ethical hacking/networking aspects of python.


http://securitytube-training.com/certifications/securitytube-python-scripting-expert/