information technology
play

INFORMATION TECHNOLOGY TRACK Russell Brown Chapter 13 Standing - PowerPoint PPT Presentation

NACTT STAFF SYMPOSIUM SERIES INFORMATION TECHNOLOGY TRACK Russell Brown Chapter 13 Standing Trustee - Phoenix, AZ Allan Reininger System Manager - San Antonio, TX Chapter 13 Standing Trustee - Mary Viegelahn Carl Brooks System Manager -


  1. NACTT STAFF SYMPOSIUM SERIES INFORMATION TECHNOLOGY TRACK Russell Brown Chapter 13 Standing Trustee - Phoenix, AZ Allan Reininger System Manager - San Antonio, TX Chapter 13 Standing Trustee - Mary Viegelahn Carl Brooks System Manager - Detroit, MI Chapter 13 Standing Trustee - Tammy Terry Tom O’Hern Program Manager, ICF International, Baltimore, MD STACS - Standing Trustee Alliance for Computer Security STAFF SYMPOSIUM - IT TRACK SESSION 6 - BUERRITO BOWL - MIXED HOT TOPICS 1 4/15/2015

  2. IT Track Outline Day 1 Session 1 (9:00 - 10:30) - HOW TO KEEP YOUR TRUSTEE HAPPY FROM AN IT PERSPECTIVE  Session 2 (10:45 - 12:15) - A RIVERWALK THROUGH YOUR NETWORK  Lunch (12:15-1:30) Session 3 (1:30 – 3:00) - DESKTOP & SERVER MANAGEMENT  Session 4 (3:15 – 4:45) - THE CLOUD – WHO REALLY UNDERSTANDS IT?  DAY 2 Session 5 (8:30 - 10:00) - DISASTER RECOVERY – YOUR WORST FEAR COMES TRUE  Session 6 (10:15 - 11:45) - BUERRITO BOWL - MIXED HOT TOPICS  List of Reference Material STAFF SYMPOSIUM IT TRACK SESSION 6 - BUERRITO BOWL - MIXED HOT TOPICS 2 4/15/2015

  3. Sess ssion Focal Po Points ts  STACS Service and Features  Tools Demo  Virtual Desktop Solutions STAFF SYMPOSIUM - IT TRACK SESSION 6 - BUERRITO BOWL - MIXED HOT TOPICS 3 4/15/2015

  4. STACS Features  Internet Vulnerability Scanning (biweekly)  Quarterly War-dialing  Onsite Assessment (within 3 years or as needed)  Emergency Onsite (within 24 hours if needed)  Security Support Center ◦ 866-STACS.NET or support@stacs.net ◦ Incident Response and Recovery Assistance (onsite/offsite) ◦ Vulnerability remediation ◦ Technical Consultation and guidance ◦ Security Impact of Physical, Technical, Operational changes to IT / data STAFF SYMPOSIUM IT TRACK SESSION 6 - BUERRITO BOWL - MIXED HOT TOPICS 4 4/15/2015

  5. STACS Features  Training ◦ Technical library ◦ Onsite and online webinar ◦ New Training Portal (1 user license included)  Optional Services (Contact STACS for Pricing)  Onsite scanning appliance ($/YR) ◦ Additional Training Portal licenses  Video Library Only (~$/yr)  MS & Net+ Classware (~$/yr)  MS & Net+ Classware and library (~$/yr) ◦ Onsite/remote technical support*** STAFF SYMPOSIUM IT TRACK SESSION 6 - BUERRITO BOWL - MIXED HOT TOPICS 6 4/15/2015

  6. Tools in Action (Session 6 Demo) Network Discovery Local Discovery  What network am I on?  What’s my IP, name, domain…? ◦ www.whatsmyip.org ◦ hostname -a ◦ ipconfig – a  Public addresses, domain? ◦ whoisbyip, whoisbydomain  What networks? ◦ route  DNS/ISP ◦ netstat – rn ◦ nslookup SOA, MX  What services?  Network systems & services? ◦ netstat – rn, -ban ◦ Nmap, ping  How do I get there? ◦ tracert (traceroute) ◦ ping and arp STAFF SYMPOSIUM IT TRACK SESSION 6 - BUERRITO BOWL - MIXED HOT TOPICS 6 4/15/2015

  7. Tools in Action (Session 6 Demo) Analysis Network Troubleshooting  Testing Service Ports  When Ping doesn’t help ◦ telnet ip_address portnumber  Use Wireshark & Telnet ◦ http://ip_address:portnumber/ ◦ Run wireshark on client & server ◦ https://ip_address:portnumber/ ◦ Telnet to IP and service port ◦ Use application, ex: remote desktop ◦ Analyze 3-way handshake for  Practical Use Case  Delivery of SYN ◦ Test: see if you filter VPN access to the LAN  Receipt of SYN-ACK ◦ Remote infected computer attached to a  PUSH of data VPN can access all system and service on  RST – forced reset the LAN unless the firewall limits the  FIN – normal finish access to specific systems and services. ◦ Analyze the data transfered ◦ Example: Only allow RDP (3389/tcp) to the terminal server. STAFF SYMPOSIUM IT TRACK SESSION 6 - BUERRITO BOWL - MIXED HOT TOPICS 7 4/15/2015

  8. Tools in Action (Session 6 Demo) Windows Tools Application Troubleshooting  Process Explorer (Procexpl.exe)  API Monitor ◦ Sysinternals tools from Microsoft ◦ www.rohitab.com ◦ May need to install symbol library ◦ A task manager on steroids. from Microsoft. ◦ Find running processes, see what ◦ Monitor execution of processes. files, registry keys and service ◦ Application Programming Interfaces ports a process uses. See which (API) are the function librarys a services each srvhost.exe process program uses to perform tasks like uses. talking to hardware, network, display ◦ Add columns to graph I/O, CPU, to the screen, etc. ◦ Useful for finding for finding process Netowork usage over time errors that prevent a process from starting or continuing to run. STAFF SYMPOSIUM IT TRACK SESSION 6 - BUERRITO BOWL - MIXED HOT TOPICS 8 4/15/2015

  9. Virtual Desktops Presentation by Allen Reininger STAFF SYMPOSIUM - IT TRACK SESSION 6 - BUERRITO BOWL - MIXED HOT TOPICS 9 4/15/2015

  10. ������������������� ����������������������������������

  11. ������������� ������������������������������������������������� ������������������������������������������������������ ����� �����������������������������!���������������"�� ���������� ������������������������������������������ �������������������������������" #��������$���������������������������������������������� ���������������������������������������������������� ���� �����������������%���������������� ������������� ������������������������������������" �����������$���������������������������������������� ��������$�����������������������������%������������ �������������������� ���������������������������������� �����������������������������������&������������������� ����������������"

  12. ������������������������������������������������������ ���������������������������������������������������������" ��������������������������������'������������������� ����������������������������������������$����������������� ������������������������ �������������������������������� ������������������������" ���������������������������� ��������������������������� ����������������$������������������������������������������� ����������������$������������������������������������������� ����������������������'����������������������������������� ���������������������������������"

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend


More recommend