Vulnerability Assessment and Management (VAM) | CMD+CTRL Security

 Home/  Course Catalog/ NICE Work Roles/Vulnerability Assessment and Management (VAM)

Vulnerability Assessment and Management (VAM)

Conducts assessments of threats and vulnerabilities; determines deviations from acceptable configurations, enterprise or local policy; assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and nonoperational situations.

Courses

View All Courses

LAB 639 – Using an Exploit Framework via Command Line Interface (NEW)

15 Minutes

0.3 CPE

LAB 638 – Using Mimikatz (NEW)

15 Minutes

0.3 CPE

LAB 633 – Using an Exploit Framework for Web Application Scanning (NEW)

30 Minutes

0.6 CPE

LAB 629 – Using an Exploit Framework for SNMP Scanning

15 Minutes

0.3 CPE

LAB 628 – Using an Exploit Framework for SMB Version Scanning

15 Minutes

0.3 CPE

LAB 627 – Using an Exploit Framework for Port Scanning

15 Minutes

0.3 CPE

LAB 626 – Using an Exploit Framework for SQL Injection

30 Minutes

0.6 CPE

DES 250 – Secure Software Acceptance and Deployment

25 Minutes

0.5 CPE

API 351 – Securing Kubernetes in the Build and Release Stages

25 Minutes

0.5 CPE

LAB 616 – ATT&CK: Host Vulnerability Scanning

15 Minutes

.25 CPE

LAB 620 – ATT&CK: Advanced Exploit of Remote Services

30 Minutes

.25 CPE

LAB 625 – ATT&CK: Advanced Exploit of Public-Facing Application

30 Minutes

.25 CPE

COD 268 – Mitigating TypeScript Application Vulnerabilities

30 Minutes

.5 CPE

COD 304 – Principles of C++ Memory Safety

25 Minutes

.5 CPE

COD 305 – C++ Secure Memory Management

30 Minutes

.5 CPE

COD 306 – C++ Memory Safety: Debugging Tools and Techniques

20 Minutes

.5 CPE

DES 364 – Mitigating Low-Code/No-Code Authentication and Secure Communication Failures

20 Minutes

.5 CPE

COD 215 – Mitigating .NET Application Vulnerabilities

25 Minutes

.5 CPE

LAB 619 – ATT&CK: Exfiltration Over C2 Channel

30 Minutes

.6 CPE

LAB 617 – ATT&CK: Testing for Plaintext Secrets in Files

12 Minutes

.25 CPE

LAB 618 – ATT&CK: Log Analysis

12 Minutes

.25 CPE

API 251 – Implementing Web Application and API Protection (WAAP)

35 Minutes

0.75 CPE

DES 361 – Mitigating LCNC (Low-Code/No-Code) Account Impersonation

20 Minutes

.5 CPE

DES 362 – Mitigating LCNC (Low-Code/No-Code) Authorization Misuse

20 Minutes

.5 CPE

LAB 613 – ATT&CK: Testing for Vulnerability Identification Using Vulnerability Databases

12 Minutes

0.25 CPE

LAB 612 – ATT&CK: Testing for Network Services Identification

12 Minutes

0.25 CPE

LAB 611 – ATT&CK: File and Directory Discovery

12 Minutes

0.25 CPE

LAB 610 – ATT&CK: File and Directory Permissions Modification

12 Minutes

0.25 CPE

LAB 637 – ATT&CK: Valid Accounts

12 Minutes

0.25 CPE

LAB 636 – ATT&CK: Data from Local System

12 Minutes

0.25 CPE

LAB 634 – ATT&CK: Create Account

12 Minutes

0.25 CPE

LAB 632 – ATT&CK: Network Share Discovery

12 Minutes

0.25 CPE

LAB 631 – ATT&CK: Network Service Discovery

12 Minutes

0.25 CPE

SDT 310 – Testing for Security Logging and Monitoring Failures

10 Minutes

0.25 CPE

LAB 113 – Identifying Cryptographic Failures

5 Minutes

0.25 CPE

SDT 309 – Testing for Vulnerable and Outdated Components

10 Minutes

0.25 CPE

SDT 308 – Testing for Software and Data Integrity Failures

10 Minutes

0.25 CPE

SDT 307 – Testing for Server-Side Request Forgery (SSRF)

10 Minutes

0.25 CPE

SDT 306 – Testing for Security Misconfiguration

10 Minutes

0.25 CPE

SDT 305 – Testing for Broken Access Control

10 Minutes

0.25 CPE

SDT 304 – Testing for Insecure Design

10 Minutes

0.25 CPE

SDT 303 – Testing for Cryptographic Failures

10 Minutes

0.25 CPE

SDT 302 – Testing for Identification and Authentication Failures

10 Minutes

0.25 CPE

SDT 301 – Testing for Injection

10 Minutes

0.25 CPE

TST 304 – Penetration Testing for AWS Cloud

20 Minutes

0.5 CPE

TST 305 – Penetration Testing for Azure Cloud

20 Minutes

0.5 CPE

TST 303 – Penetration Testing for Google Cloud Platform

20 Minutes

0.5 CPE

ATK 201 – Using the MITRE ATT&CK Framework

15 Minutes

.25 CPE

COD 319 – Preventing Vulnerabilities in Android Code in Java

30 Minutes

.6 CPE

DSO 301 – Orchestrating Secure System and Service Configuration

20 Minutes

0.5 CPE

TST 302 – Application Penetration Testing

45 Minutes

1 CPE

TST 301 – Infrastructure Penetration Testing

45 Minutes

1 CPE

TST 351 – Penetration Testing for TLS Vulnerabilities

12 Minutes

.25 CPE

TST 352 – Penetration Testing for Injection Vulnerabilities

12 Minutes

.25 CPE

TST 353 – Penetration Testing for SQL Injection

12 Minutes

.25 CPE

TST 354 – Penetration Testing for Memory Corruption Vulnerabilities

12 Minutes

.25 CPE

TST 355 – Penetration Testing for Authorization Vulnerabilities

12 Minutes

.25 CPE

TST 356 – Penetration Testing for Cross-Site Scripting (XSS)

12 Minutes

.25 CPE

TST 357 – Penetration Testing for Hardcoded Secrets

12 Minutes

.25 CPE

TST 358 – Penetration Testing Wireless Networks

12 Minutes

.25 CPE

TST 359 – Penetration Testing Network Infrastructure

12 Minutes

0.25 CPE

TST 360 – Penetration Testing for Authentication Vulnerabilities

12 Minutes

.25 CPE

TST 202 – Penetration Testing Fundamentals

25 Minutes

.5 CPE

COD 309 – Securing ASP.NET MVC Applications

20 Minutes

0.4 CPE

ENG 311 – Attack Surface Analysis & Reduction

25 Minutes

.5 CPE

ENG 211 – How to Create Application Security Design Requirements

15 Minutes

0.25 CPE

COD 318 – Protecting Data on Android in Java

30 Minutes

.6 CPE

COD 303 – Mitigating C Code Vulnerabilities

20 Minutes

.4 CPE

COD 202 – Secure C Run-Time Protection

15 Minutes

0.3 CPE

COD 256 – Creating Secure Ruby on Rails Foundations

45 Minutes

1 CPE