Endpoints and Systems

Cisco via Coursera

Go to class Write review

Details

Go to class

Provider

Coursera
Pricing

Paid Course
Languages

English
Certificate

Certificate Available
Effort

5 weeks, 4 hours a week
Sessions

Self-Paced
Level

Intermediate
Subtitles

English, German, Hindi, Pashto, Russian, Korean, Portuguese, Italian, French, Chinese, Spanish, Arabic, Vietnamese, Japanese, Indonesian, Farsi

Found in

Part of

Cybersecurity Operations Fundamentals

Overview

Google, IBM & Meta Certificates – 40% Off

One Coursera Plus subscription covers most Professional Certificates on Coursera.

Unlock All Certificates

The three most used endpoint operating systems are Windows, Linux, and Mac. When investigating security incidents, security analysts often encounter these operating systems running on servers or user end hosts. If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you understand basic Windows operations principles. By the end of the course, you will be able to: •By the end of the course, you will be able to: • Describe the history of the Windows operating system and vulnerabilities. • Describe the Windows OS architecture and components. • Describe Windows processes, threads, and handles. • Describe virtual memory allocation in the Windows OS.• Describe Windows services and how they are used. • Describe the functionality of Windows NTFS. • Describe the Windows NTFS structure. • Describe Windows domains and local user accounts. • Describe the Windows graphical user interface and its use. • Describe how to perform tasks in Windows which may require administrator privileges.• Describe the Windows command line interface use and features. • Describe the features of the Windows PowerShell. • Describe how the net command is used for Windows administration and maintenance. •Describe how to control Windows startup services and execute a system shutdown. • Describe how to control Windows services and processes that are operating on a host. • Describe how to monitor Windows system resources with the use of Windows Task Manager. • Describe the Windows boot process, starting services, and registry entries. • Describe how to configure Windows networking properties. •Use the netstat command to view running networking functions. •Access Windows network resources and perform remote functions. •Describe the use of the Windows registry. •Describe how the Windows Event Viewer is used to browse and manage event logs. • Use the Windows Management Instrumentation to manage data and operations on Windows-based operating systems.• Understand common Windows server functions and features. • Describe commonly used third-party tools to manage to manage Windows operating systems. • Explore the Windows operating system and services. The knowledge and skills that students are expected to have before attending this course are: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.

Syllabus

Understanding Windows Operating System Basics, Part 1: Core Architecture and Accounts
- This module introduces learners to the Windows operating system from the perspective of a cybersecurity analyst working in a security operations environment. Learners will explore Windows foundations such as operating system history, architecture, processes, threads, memory, and services to understand how Windows systems operate. The module also covers the NTFS file system, user and domain accounts, the Windows GUI, and running programs with administrative privileges. By the end of the module, learners will be able to explain core Windows architecture and administration concepts and use basic Windows tools to manage users, files, and system resources.
Understanding Windows Operating System Basics, Part 2: Tools, Monitoring, and Networking
- This module continues learners' exploration of the Windows operating system from the perspective of a cybersecurity analyst working in a security operations environment. Learners will use the Windows command line, PowerShell, and common administrative commands to manage Windows hosts, and will learn how to control startup services, monitor system resources, and manage running services and processes. The module also covers key system components such as the boot process, the registry, and Windows Management Instrumentation. Networking topics include Windows network configuration, netstat, and access to remote and shared resources. The module concludes by introducing common Windows server functions and third-party tools used in administration and investigation. By the end of the module, learners will be able to use common Windows tools to support system administration, monitoring, and security analysis tasks.
Understanding Linux Operating System Basics, Part 1: Architecture, File System, and Processes
- In this module, learners build foundational Linux knowledge for cybersecurity and systems work. They will examine Linux history, architecture, the file system, file management and permissions, storage, and system initialization. By the end of the module, learners will be able to navigate a Linux system, interpret core operating system structures and behaviors, and manage files, permissions, and administrative access.
Understanding Linux Operating System Basics, Part 2: Shell, Networking, and Services
- This module continues learners' foundational Linux knowledge for cybersecurity and systems work. Learners will examine shell and command-line concepts, networking, service management, software installation, and common Linux-based services. By the end of the module, learners will be able to use common administrative and networking tools, explain how Linux runs software, and describe how Linux components and services support operational and security tasks.
Understanding Endpoint Security Technologies
- In this module, learners examine common endpoint security technologies used to protect systems from malware and unauthorized activity. Topics include host-based firewalls, antivirus and host intrusion prevention systems, application allow/block lists, host-based malware protection, sandboxing, and file integrity checking. Learners also review the roles of built-in Windows security tools such as Windows Defender and Windows Firewall. By the end of the module, learners will be able to explain the purpose of key endpoint security controls, compare how they help detect or prevent threats, and identify how these tools support security monitoring and incident response.