VU23225 - Investigate Windows security features

Unit code:VU23225Study level:TAFE

Nominal hours

Location

Footscray Nicholson
Industry
Online
St Albans

Prerequisites

(Or equivalent to be determined by unit coordinator)
Co-requisites
(Corequisite units must be studied concurrently with this unit)

Overview

This unit describes the performance outcomes skills and knowledge required to investigate the fundamentals of Windows security features.
It requires the ability to comprehend the basic architecture of Windows, identify security features such as log files, instrumentation and how a basic attack might occur. The unit includes tools to collect security data centrally and query it to identify potential threats.This unit applies to individuals working as cyber security technicians either alone or as part of a team.

Assessment

For Melbourne campuses

Assessment tasks will be designed to reinforce & extend knowledge and skill competence within set & controlled parameters in accordance with each units learning outcomes & performance criteria requirements, including the setting of work based practical application tasks designed to provide evidence of competence outcomes, within periodic and scheduled timelines.

Students will be expected to demonstrate the following required skills:
• identify the structure of the Windows operating structure
• exploit Windows vulnerabilities
• implement Windows operating system features to mitigate threats and malware interference.

Students will also be expected to demonstrate the following knowledge:
• Windows structure:
o file formats & layouts
o event logs
o registry
o program execution
• System administration privileges
• Windows Management Interface (WMI)
• Security Operation Centre (SOC) types
• Security Information Event Management (SIEM) features and
operation
• Windows log files
• Importing log files into a SIEM
• Threat hunting
• Mitigation strategies for types of incidents.

Required reading

The qualified trainer and assessor will provide teaching and learning materials as required in the form of workbooks produced by Victoria University and/or via the Victoria University e-learning system.