NICE

ENG 351 – Preparing the Risk Management Framework

20 Minutes

0.5 Credits

ENG 352 – Categorizing Systems and Information within the RMF

10 Minutes

0.25 Credits

ENG 353 – Selecting, Implementing and Assessing Controls within the RMF

20 Minutes

0.5 Credits

ENG 354 – Authorizing and Monitoring System Controls within the RMF

20 Minutes

0.5 Credits

ICS 310 – Protecting Information and System Integrity in Industrial Control System Environments

15 Minutes

0.25 Credits

LAB 131 – Identifying Improper Restriction of XML External Entity Reference

5 Minutes

0.25 Credits

LAB 132 – Identifying Exposed Services

5 Minutes

0.25 Credits

LAB 133 – Identifying Exposure of Sensitive Information Through Environmental Variables

5 Minutes

0.25 Credits

LAB 134 – Identifying Plaintext Storage of a Password

5 Minutes

0.25 Credits

LAB 135 – Identifying URL Redirection to Untrusted Site

5 Minutes

0.25 Credits

LAB 136 – Identifying Improper Neutralization of Script in Attributes in a Web Page

5 Minutes

0.25 Credits

LAB 137 – Identifying Improper Authorization

5 Minutes

0.25 Credits

LAB 138 – Identifying Authorization Bypass Through User-Controlled Key

5 Minutes

0.25 Credits

LAB 139 – Identifying Use of a Key Past its Expiration Date

5 Minutes

0.25 Credits

LAB 201 – Defending Java Applications Against Canonicalization

5 Minutes

.1 Credits

LAB 202 – Defending Python Applications Against Canonicalization

5 Minutes

.1 Credits

LAB 203 – Defending C# Applications Against Canonicalization

5 Minutes

.1 Credits

LAB 204 – Defending Node.js Applications Against Canonicalization

5 Minutes

.1 Credits

LAB 205 – Defending Java Applications Against XPath Injection

5 Minutes

.1 Credits

LAB 206 – Defending Python Applications Against XPath Injection

5 Minutes

.1 Credits

LAB 207 – Defending Node.js Applications Against XPath Injection

5 Minutes

.1 Credits

LAB 208 – Defending C# Applications Against XPath Injection

5 Minutes

.1 Credits

LAB 263 – Defending Java Applications Against Sensitive Information in Log Files

10 Minutes

.25 Credits

LAB 264 – Defending Python Applications Against Sensitive Information in Log Files

10 Minutes

.25 Credits

LAB 265 – Defending Node.js Applications Against Sensitive Information in Log Files

10 Minutes

.25 Credits

LAB 267 – Defending Java Applications Against Deserialization of Untrusted Data

10 Minutes

.25 Credits

LAB 268 – Defending Python Applications Against Deserialization of Untrusted Data

10 Minutes

.25 Credits

LAB 269 – Defending Node.js Applications Against Deserialization of Untrusted Data

10 Minutes

.25 Credits

LAB 271 – Defending Java Applications Against SSRF

10 Minutes

.25 Credits

LAB 272 – Defending Python Applications Against SSRF

10 Minutes

.25 Credits

LAB 273 – Defending Node.js Applications Against SSRF

10 Minutes

.25 Credits

LAB 275 – Defending Java Applications Against Command Injection

10 Minutes

0.25 Credits

LAB 276 – Defending Python Applications Against Command Injection

10 Minutes

0.20 Credits

LAB 277 – Defending Node.js Applications Against Command Injection

10 Minutes

0.25 Credits

LAB 279 – Defending Java Applications Against Dangerous File Upload

10 Minutes

0.25 Credits

LAB 280 – Defending Python Applications Against Dangerous File Upload

10 Minutes

0.25 Credits

LAB 281 – Defending Node.js Applications Against Dangerous File Upload

10 Minutes

0.25 Credits

LAB 283 – Defending Java Applications Against RegEx DoS

10 Minutes

0.25 Credits

LAB 284 – Defending Python Applications Against RegEx DoS

10 Minutes

0.20 Credits

LAB 285 – Defending Node.js Applications Against RegEx DoS

10 Minutes

0.25 Credits