این دوره به چه افرادی توصیه می‌شود؟

• تحلیل‌گران و محققین امنیت سایبری
• کارشناسان ارشد ارزیابی امنیت/تست نفوذ/تیم قرمز
• افراد فعال در زمینه‌ی Bug Bounty سیستمی
• برنامه‌نویسان سیستمی
• مشاورین امنیت سایبری

برای حضور در این دوره چه دانش‌هایی باید داشته باشم؟

• آشنایی ابتدایی با مفاهیم و ساختار کلی سیستم‌عامل 
• آشنایی ابتدایی با زبان برنامه‌نویسی C یا C++

سرفصل‌های دوره

Chapter 1: System Architecture

1.1 Windows Versions

1.2 Windows 10 and Future versions

1.3 Tools

1.4 Processes and Threads

1.5 Virtual Memory

1.6 The Stack

1.7 User mode vs. Kernel mode

1.8 Objects and Handles

1.9 Architecture Overview

1.10 Key Components

1.11 User/kernel transitions

1.12 APIs: Win32, Native, .NET, COM, WinRT

1.13 Introduction to WinDbg

Chapter 2: Processes & Jobs

2.1 Process basics

2.2 Creating and terminating processes

2.3 Process Internals & Data Structures

2.4 The loader

2.5 DLL explicit and implicit linking

2.6 Process and thread attributes

2.7 Protected processes and PPL Process

2.8 Process creation callback

2.9 UWP Processes

2.10 Minimal and Pico processes

2.11 Jobs

2.12 Nested jobs

Chapter 3: Threads

3.1 Thread basics

3.2 Creating and terminating threads

3.3 Processor Groups

3.4 Thread Priorities

3.5 Thread Scheduling

3.6 Thread Stacks

3.7 Thread States

3.8 CPU Sets

3.9 Thread Synchronization

Chapter 4: PE File Structure

4.1 Basic Structure

4.2 The DOS Header

4.3 The PE Header

4.4 The Data Directory

4.5 The Section Table

4.6 The PE File Sections

4.7 The Export Section

4.8 Loader functionality

4.9 DLL load callbacks

Chapter 5: Hooking

5.1 Assembly introduction

5.2 Calling convention in x86 and x64

5.3 Basic API Hooking

5.4 Inline Hooking

5.5 Trampolines

5.6 IAT Hooking

Chapter 6: Objects and Handles

6.1 Windows Objects

6.2 Object namespace

6.3 Object headers

6.4 Process handle tables

6.5 Handle duplication

6.6 Object callbacks

6.7 Object reference counting

6.8 Type objects

Chapter 7: Security

7.1 Tokens

7.2 Security identifiers (SID)

7.3 Privileges

7.4 Security descriptors

7.5 Access control lists

7.6 Integrity levels

7.7 Access checks

7.8 Impersonation

Chapter 8: Services Infrastructure

8.1 Service architecture

8.2 Service control manager

8.3 Service configuration

8.4 SVCHost.exe

8.5 Service SIDs

8.6 Trusted Installer

8.7 Logon sessions

8.8 Session isolation