Re: CEH and Intense School

From: James Fields (jvfields@tds.net)
Date: Fri Nov 07 2003 - 21:47:15 EST


I did not clarify this in my earlier E-Mail, but I have actually taken the
course from Intense and passed the CEH. I also find it a bit funny how many
people put down the value of classroom lecture and lab work. For the
record, my instructor was Jack Koziol, author of a recent book on Snort IDS
(and an upcoming book on shell coding).

Also for the record - Hacking Exposed is a much better book than the one
supplied with the course, so if you're going to buy something, get that one.
However, the one supplied with the course has recently been chosen as the
official study guide for the CEH.

Finally, the Intense School course teaches the OSSTMM methodology - in fact
a large portion of class time is spent on this, and it provides the
structure for what is done. They were doing an OSSTMM-based course before
there was an official one sanctioned by ISECOM, and they do a good job
covering it.

----- Original Message -----
From: "Bartholomew, Brian J" <BartholomewBJ@state.gov>
To: "'Andrew Turner'" <andrewhturner@yahoo.com>;
<pen-test@securityfocus.com>
Sent: Friday, November 07, 2003 8:50 AM
Subject: RE: CEH and Intense School

> Andrew,
>
> I have taken the course and numerous others that compare, and by
> far, this course was the best. But, even though it was the best, don't go
> in there expecting to come out the Uber Kewl Haxor that they perceive in
> their ads. The course material was OK, but as stated in a previous email,
> the instructors friggin rock. Clement is definitely the best instructor I
> have had in a while.
>
> Put up against two other popular "Hacking" courses, this beats them
> hands down. The other two that I have sampled is Foundstone's Ultimate
> Hacking, and Ultimate Hacking Expert, and SANS Track 4 Incident Handling
and
> Hacker Exploits. All three of these were good courses, but not as
> structured. Also, the added benefit of gaining the CEH at the end of the
> course, as lame as it may sound, makes it better than the other three.
>
> Regarding the CEH...It is frowned upon by a lot of people as a
> cheesy certification glorifying script kiddies, but I have to say, it gets
> you money, and after all, isn't that what we are all about anyway?
>
> My suggestion is to take the course. Make sure you stay in a hotel
> and not at home, as classes run some nights past 2100. Also, make sure
you
> are up to date on the various methodologies and techniques employed by the
> bad guys so you can bring up questions that are relevant to today (i.e. -
> Don't ask about things like "Ping of Death" or "Stacheldracht"). Study
> wireless, as you will most likely spend an entire day on it. The biggest
> thing to remember is go in there with an open mind and you will love the
> course. If you go in expecting it to suck, you will be disappointed.
>
> Sorry for the rambling, but I am sick of people blasting a course
> that most of them haven't taken.
>
> P.S. - Sytex runs a good course too.
>
> Brian J. Bartholomew
> U.S. Dept of State, Bureau of Diplomatic Security
> Computer Incident Response Team
> (W) (571)345-2654
> (C) (202)369-6349
>
>
> -----Original Message-----
> From: Andrew Turner [mailto:andrewhturner@yahoo.com]
> Sent: Thursday, November 06, 2003 12:11 PM
> To: pen-test@securityfocus.com
> Subject: CEH and Intense School
>
>
> Greetings,
>
> I am considering taking the Ethical Hacking course
> tought by Intense School. Has anyone had experience
> with this training program? If so, I would be very
> interested in hearing your comments on the program.
>
> Thanks in Advance!
>
> --
> Andrew H. Turner, CISSP
>
>
> __________________________________
> Do you Yahoo!?
> Protect your identity with Yahoo! Mail AddressGuard
> http://antispam.yahoo.com/whatsnewfree
>
> --------------------------------------------------------------------------
-
> Network with over 10,000 of the brightest minds in information security
> at the largest, most highly-anticipated industry event of the year.
> Don't miss RSA Conference 2004! Choose from over 200 class sessions and
> see demos from more than 250 industry vendors. If your job touches
> security, you need to be here. Learn more or register at
> http://www.securityfocus.com/sponsor/RSA_pen-test_031023
> and use priority code SF4.
> --------------------------------------------------------------------------

--
>
> --------------------------------------------------------------------------
-
> Network with over 10,000 of the brightest minds in information security
> at the largest, most highly-anticipated industry event of the year.
> Don't miss RSA Conference 2004! Choose from over 200 class sessions and
> see demos from more than 250 industry vendors. If your job touches
> security, you need to be here. Learn more or register at
> http://www.securityfocus.com/sponsor/RSA_pen-test_031023
> and use priority code SF4.
> --------------------------------------------------------------------------
--
>
---------------------------------------------------------------------------
Network with over 10,000 of the brightest minds in information security
at the largest, most highly-anticipated industry event of the year.
Don't miss RSA Conference 2004! Choose from over 200 class sessions and
see demos from more than 250 industry vendors. If your job touches
security, you need to be here. Learn more or register at
http://www.securityfocus.com/sponsor/RSA_pen-test_031023
and use priority code SF4.
----------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:42 EDT