Cyber Security Training in Évora

This instructor-led, live training in Évora (online or onsite) is designed for advanced-level cybersecurity professionals, AI engineers, and IoT developers who aim to implement robust security measures and resilience strategies for Edge AI systems.

Upon completion of this training, participants will be able to:

• Identify security risks and vulnerabilities in Edge AI deployments.
• Deploy encryption and authentication techniques to protect data.
• Design resilient Edge AI architectures capable of withstanding cyber threats.
• Apply secure AI model deployment strategies within edge environments.

This instructor-led, live training in Évora (online or onsite) is designed for cybersecurity professionals and data scientists at an intermediate level who wish to leverage LLMs to strengthen cybersecurity measures and threat intelligence.

Upon completing this training, participants will be able to:

• Grasp the role of LLMs in cybersecurity.
• Implement LLMs for threat detection and analysis.
• Utilize LLMs for security automation and response.
• Integrate LLMs with existing security infrastructure.

This instructor-led live training in Évora (online or onsite) is designed for intermediate-level IT auditors who wish to effectively incorporate AI tools into their audit practices.

By the end of this training, participants will be able to:

• Understand the fundamental concepts of artificial intelligence and its application within IT auditing.
• Leverage AI technologies, including machine learning, NLP, and RPA, to enhance the efficiency, accuracy, and scope of audits.
• Conduct risk assessments using AI tools to facilitate continuous monitoring and proactive risk management.
• Incorporate AI into the planning, execution, and reporting phases of audits, thereby improving overall IT audit effectiveness.

This instructor-led live training in Évora (online or onsite) is designed for intermediate to advanced cybersecurity professionals and technical leads who wish to learn how to deploy AI models to strengthen security workflows, automate threat detection and response, and conduct predictive analysis.

Upon completion of this training, participants will be able to:

• Grasp the role of AI in modern cyber security.
• Construct machine learning models for anomaly and threat detection.
• Deploy AI to automate incident response and security operations.
• Assess the ethical and operational implications of AI in cybersecurity.

This instructor-led live training in Évora (available online or onsite) targets intermediate-level analysts aiming to effectively analyze, secure, and protect their organization's data and networks from cyber threats.

By the conclusion of this training, participants will be able to:

• Gain a comprehensive understanding of the current cybersecurity landscape.
• Learn and apply industry-standard cybersecurity frameworks (e.g., NIST, ISO/IEC 27001) and best practices to enhance their organization's security posture.
• Implement effective network security measures, including configuring firewalls, VPNs, IDS/IPS systems, and applying encryption techniques to protect data at rest and in transit.
• Identify, analyze, and respond to cybersecurity incidents using threat intelligence, SIEM tools, and incident response plans.

This instructor-led, live training in Évora (online or onsite) is designed for advanced cyber security professionals aiming to understand Cyber Threat Intelligence and develop the skills to effectively manage and mitigate cyber threats.

Upon completion of this training, participants will be able to:

• Comprehend the fundamental concepts of Cyber Threat Intelligence (CTI).
• Evaluate the contemporary cyber threat landscape.
• Gather and process intelligence data.
• Conduct advanced threat analysis.
• Utilize Threat Intelligence Platforms (TIPs) to automate threat intelligence workflows.

The Certified Incident Handler course delivers a structured methodology for effectively and efficiently managing and responding to cybersecurity incidents.

Designed as an instructor-led live training session (available online or onsite), this programme targets intermediate-level IT security professionals seeking to acquire the tactical skills and knowledge required to plan, classify, contain, and manage security incidents.

Upon completion of this training, participants will be able to:

• Comprehend the incident response lifecycle and its distinct phases.
• Carry out incident detection, classification, and notification procedures.
• Effectively apply containment, eradication, and recovery strategies.
• Develop post-incident reports and continuous improvement plans.

Course Format

• Interactive lectures and discussions.
• Practical application of incident handling procedures within simulated scenarios.
• Guided exercises focused on detection, containment, and response workflows.

Customization Options

• To arrange customized training tailored to your organization's specific incident response procedures or tools, please contact us.

Bug Bounty: Advanced Techniques and Automation delves into high-impact vulnerabilities, automation frameworks, reconnaissance techniques, and the tooling strategies employed by elite bug bounty hunters.

This instructor-led, live training (available online or onsite) is designed for intermediate to advanced security researchers, penetration testers, and bug bounty hunters aiming to automate their workflows, scale their reconnaissance efforts, and uncover complex vulnerabilities across multiple targets.

Upon completion of this training, participants will be able to:

• Automate reconnaissance and scanning processes for multiple targets.
• Leverage cutting-edge tools and scripts used in bounty automation.
• Identify complex, logic-based vulnerabilities that go beyond standard scans.
• Construct custom workflows for subdomain enumeration, fuzzing, and reporting.

Course Format

• Interactive lectures and discussions.
• Hands-on application of advanced tools and scripting for automation.
• Guided labs focused on real-world bounty workflows and advanced attack chains.

Course Customization Options

• To request customized training for this course based on your bounty targets, automation requirements, or internal security challenges, please contact us to arrange.

This instructor-led, live training in Évora (online or onsite) is designed for duty managers and operational leaders at an intermediate level who aim to develop strong cyber resilience strategies to protect their organisations from cyber threats.

By the conclusion of this training, participants will be able to:

• Grasp the fundamentals of cyber resilience and their significance to duty management.
• Create incident response plans to ensure operational continuity.
• Identify potential cyber threats and vulnerabilities within their environment.
• Implement security protocols to reduce risk exposure.
• Coordinate team responses during cyber incidents and recovery phases.

This instructor-led, live training in Évora (online or onsite) is aimed at experienced developers who wish to gain a comprehensive understanding of Python programming and its applications in cybersecurity.

By the end of this training, participants will be able to:

• Use Python programming for defensive cybersecurity.
• Understand and use Python for ethical offensive techniques and digital forensics tasks.
• Recognize legal and ethical considerations surrounding offensive cybersecurity and vulnerability disclosure.

This instructor-led, live training in Évora (online or onsite) is aimed at security professionals who wish to learn how to troubleshoot Palo Alto Networks' next-generation firewalls.

By the end of this training, participants will be able to:

• Understand the architecture of the next-generation firewall.
• Investigate and troubleshoot networking issues using firewall tools.
• Analyze advanced logs to resolve real-life scenarios.

This instructor-led, live training in Évora (online or onsite) is targeted at intermediate-level cybersecurity professionals seeking to deepen their understanding of GRC frameworks and apply them to secure and compliant business operations.

Upon completion of this training, participants will be able to:

• Comprehend the core components of cybersecurity governance, risk, and compliance.
• Perform risk assessments and formulate risk mitigation strategies.
• Implement compliance measures and manage regulatory obligations.
• Develop and enforce security policies and procedures.

This instructor-led, live training in Évora (online or onsite) is designed for security professionals who wish to learn the fundamentals of managing Palo Alto Networks' next-generation firewalls.

By the end of this training, participants will be able to:

• Configure and manage essential firewall features of Palo Alto Networks.
• Manage security and NAT policies.
• Implement threat prevention strategies.
• Monitor network threats and traffic.

User session recording technology captures, monitors, and audits user activity on IT systems, providing insights for security, compliance, and forensic investigations.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level IT and security professionals who wish to implement user session recording solutions to enhance monitoring, compliance, and accountability.

By the end of this training, participants will be able to:

• Understand the principles of user session recording.
• Deploy and configure session recording solutions.
• Analyze and audit recorded sessions for compliance.
• Integrate session recording with security monitoring systems.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

The CCSK Foundation course begins with foundational concepts, gradually increasing in complexity as it explores all 16 domains of the CSA Security Guidance, recommendations from the European Union Agency for Network & Information Security (ENISA), and an overview of the Cloud Controls Matrix.

This is a Cloud Security Alliance (CSA) authorized course, and NobleProg is an official CSA Training Partner.

The course is delivered by CSA Authorized CCSK Instructors.
All attendees receive:

• official CSA CCSK Foundation course certificates
• official CCSK Foundation Student Handbooks
• 1 CCSK exam voucher and 1 re-attempt exam voucher

This course covers the most current version of the CCSK exam - currently version 4.1.

Who is it for:

This qualification is designed for security professionals seeking to grasp the technical and business dimensions of their role, as well as anyone aspiring to work in security architecture.

• System Administrators aiming to transition into security architecture roles
• Technical architects looking to specialise in security architecture

Additionally, this certificate provides a complimentary certification for individuals who have attained or are pursuing CCP status in Information Assurance.

What will I learn:

Upon completion, candidates will be able to:

• Analyze the business environment and identify information risks relevant to the systems.
• Describe and implement security design principles.
• Identify information risks emerging from potential solution architectures.
• Design alternative architectures or countermeasures to mitigate identified information risks.
• Ensure that proposed architectures and countermeasures effectively address the identified information risks.
• Apply standard security techniques and architectures to mitigate security risks.
• Develop new architectures that mitigate risks associated with emerging technologies and business practices.
• Provide consultancy and advice to clarify Information Assurance and architectural challenges.
• Configure ICT systems in compliance with approved security architectures.

Today, numerous programming languages enable code compilation for .NET and ASP.NET frameworks. While this environment offers robust security development tools, developers must master architecture-level and coding-level techniques to implement effective security measures, prevent vulnerabilities, and mitigate their exploitation.

This course aims to equip developers with hands-on skills to prevent untrusted code from executing privileged actions, protect resources via strong authentication and authorization, manage remote procedure calls and sessions, and explore various functional implementations. A dedicated section covers the configuration and hardening of .NET and ASP.NET environments for enhanced security.

A concise introduction to cryptographic fundamentals establishes a practical baseline for understanding the purpose and operation of various algorithms, setting the stage for exploring cryptographic features available in .NET. This is followed by an examination of recent cryptographic vulnerabilities, including those affecting specific algorithms and protocols, as well as side-channel attacks.

The course introduces various vulnerabilities, beginning with common programming issues in .NET, such as input validation errors, error handling flaws, and race conditions. Special attention is given to XML security, while the segment on ASP.NET-specific vulnerabilities addresses unique threats, including ViewState attacks and string termination attacks.

Participants attending this course will

• Understand the core concepts of security, IT security, and secure coding
• Learn to utilize the security features inherent in the .NET development environment
• Gain practical knowledge of cryptography
• Understand recent attacks targeting cryptosystems
• Learn about recent vulnerabilities in .NET and ASP.NET
• Identify typical coding mistakes and learn how to avoid them
• Acquire practical skills in using security testing tools
• Access resources and further readings on secure coding practices

Audience

Developers

This instructor-led, live training in Évora (online or onsite) focuses on network security from a software security perspective. Participants will learn about common network attacks and defenses across OSI layers, with a strong emphasis on application-layer threats such as session hijacking and denial-of-service (DoS) attacks.

By the end of this training, participants will be able to:

• Understand key concepts in IT security and secure coding.
• Identify and mitigate network threats at different OSI layers.
• Apply cryptographic methods in real-world scenarios.
• Implement and configure security protocols securely.
• Recognize and address cryptographic vulnerabilities and exploits.
• Access resources for ongoing secure coding practices.

This course equips PHP developers with essential skills to protect their applications against modern Internet-based threats. It explores web vulnerabilities through practical PHP examples, extending beyond the OWASP Top Ten to address various injection attacks, script injections, session handling flaws, insecure direct object references, file upload issues, and more. PHP-related vulnerabilities are categorized into standard types such as missing or improper input validation, incorrect error and exception handling, misuse of security features, and time- or state-related problems. Specific examples include open_basedir circumvention, denial-of-service attacks via magic floats, and hash table collision attacks. In each case, participants will learn key techniques and functions to mitigate these risks.

A significant emphasis is placed on client-side security, addressing vulnerabilities in JavaScript, Ajax, and HTML5. The course introduces several PHP security extensions, including hash, mcrypt, and OpenSSL for cryptography, as well as Ctype, ext/filter, and HTML Purifier for input validation. Best practices for hardening are covered in the context of PHP configuration (php.ini), Apache, and general server settings. Additionally, the course provides an overview of security testing tools and techniques for developers and testers, including security scanners, penetration testing, exploit packs, sniffers, proxy servers, fuzzing tools, and static source code analyzers.

Both the introduction of vulnerabilities and configuration practices are reinforced with hands-on exercises. These demonstrate the impact of successful attacks, show how to implement mitigation strategies, and introduce the use of various extensions and tools.

Participants attending this course will

• Gain a solid understanding of security concepts, IT security, and secure coding principles
• Learn about web vulnerabilities beyond the OWASP Top Ten and how to prevent them
• Understand client-side vulnerabilities and adopt secure coding practices
• Develop a practical grasp of cryptography
• Learn to utilize various PHP security features effectively
• Identify common coding errors and understand how to avoid them
• Stay informed about recent vulnerabilities in the PHP framework
• Acquire practical experience with security testing tools
• Access resources and further reading on secure coding practices

Audience

Developers

NobleProg is an official ISACA COBIT® Training Partner. COBIT® is a framework for the enterprise governance and management of information and technology (I&T) that supports enterprise goal achievement.

Cyber Security involves the application of technologies, controls, and processes to safeguard computer systems, servers, networks, devices, applications, and data against malicious cyber attacks.

This instructor-led, live training (available online or onsite) is designed for individuals who wish to learn how to protect internet-connected systems from various cyber threats.

By the end of this training, participants will be able to:

• Understand the core concepts of Cyber Security.
• Identify and comprehend different types of Cyber Security threats.
• Learn the processes and best practices for protecting internet-connected systems from cyber attacks.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and practice sessions.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request customized training for this course, please contact us to arrange.

This instructor-led, live training in Évora (online or onsite) is designed for IT professionals seeking to learn and apply the fundamentals of cybersecurity practices, processes, and tools within their organizations.

By the end of this training, participants will be able to:

• Grasp cybersecurity concepts, definitions, architecture, and principles.
• Acquire skills to secure and protect digital assets (networks, systems, applications, and data).
• Deploy security models, frameworks, operational techniques, and incident handling procedures.
• Assess and mitigate the impact of cyber attacks, risks, threats, and vulnerabilities.
• Gain insights into cybersecurity challenges associated with emerging technologies.

This instructor-led, live training in Évora (online or on-site) is designed for software engineers and IT professionals who wish to deepen their knowledge of CyBOK and strengthen their theoretical and practical cyber security skills.

Upon completion of this training, participants will be able to:

• Grasp the core concepts, definitions, and principles of cyber security.
• Develop in-depth cyber security expertise by applying the CyBOK knowledge areas.
• Acquire comprehensive foundational knowledge to effectively implement the CyBOK framework.
• Support community and organizational initiatives to prioritize data security and privacy.
• Explore opportunities to obtain specializations and credentials relevant to cyber security roles.

This course is designed for individuals who need to gather intelligence or evidence from the Dark Web. This typically includes those employed in government or law enforcement, but it may also be relevant to the private sector.

Designed for leaders and managers, this course offers a comprehensive overview of the critical issues and activities within cybersecurity.

Participants will gain insights into various topics that expand their understanding and refine their executive decision-making capabilities concerning cybersecurity threats.
 

Upon completion of this training, participants will be able to:

• Understand the implications of internet and social network privacy
• Recognise Personally Identifiable Information (PII) and its significance
• Learn methods to secure online assets
• Understand how to safeguard the privacy of business users
• Gain knowledge of cyber laws that protect privacy

Format of the Course

• Interactive lectures and discussions
• Extensive exercises and practice sessions
• Hands-on implementation in a live-lab environment

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This instructor-led, live training in Évora (online or onsite) is aimed at security engineers and system administrators who wish to use FortiGate NGFW's advanced security-driven network systems to protect their organization from internal and external threats.

By the end of this training, participants will be able to:

• Install and configure the preferred FortiGate NGFW software and hardware model.
• Operate and employ FortiGate NGFW to improve the efficiency of system administration tasks.
• Manage various forms of external and internal threats using FortiGate features.
• Integrate FortiGate security fabric with the entire IT infrastructure to provide quick automated protection.
• Ensure long-term protection from attacks with independent and continuous FortiGate threat intelligence.
• Troubleshoot the most common firewall system setup errors relevant to FortiGate NGFWs.
• Implement Fortinet security solutions in other enterprise applications.

This course empowers participants to scan, test, exploit, and secure their own systems. It provides an in-depth understanding and practical experience with essential modern security frameworks. Participants will explore the functioning of perimeter defenses and progress to scanning and attacking their own networks, ensuring no real network is compromised. The curriculum covers how intruders escalate privileges and outlines the steps necessary to secure systems, including Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows, and Virus Creation.

This instructor-led, live training in Évora (online or onsite) is aimed at intermediate-level system administrators and IT professionals who wish to install, configure, manage, and secure LDAP directories using OpenLDAP.

By the end of this training, participants will be able to:

• Understand the structure and operation of LDAP directories.
• Install and configure OpenLDAP for various deployment environments.
• Implement access control, authentication, and replication mechanisms.
• Use OpenLDAP with third-party services and applications.

This instructor-led, live training in Évora (online or onsite) is aimed at system administrators who wish to use OpenDJ to manage their organization's user credentials in a production environment.

By the end of this training, participants will be able to:

• Install and configure OpenDJ.
• Maintain an OpenDJ server, including monitoring, troubleshooting, and optimizing for performance.
• Create and manage multiple OpenDJ databases.
• Backup and migrate an OpenDJ server.

Target Audience:

System and Network Administrators, as well as any professionals interested in defensive network security technologies.