PROPOSTA TÉCNICA E COMERCIAL

CYBERNETIC INTELLIGENCE IN
OPEN SOURCES
(OSINT)

VERSÃO 1.0 - FEVEREIRO DE 2021

2
Hello, Jonathan
How are you?

We are pleased with the inquiry about our training.

We hope that this proposal is suitable for your

needs. The duration of this proposal is 30 days

or until the promotional condition ends.

Sincerely,

Daryus Institute of Higher Education Paulista - IDESP

3
ABOUT US
Present in the market since 2005, the DARYUS Group is 100% Brazilian with operations in the areas of

consulting, education, and technologies for support in business, strategic, and risk management.

We have a skilled team, constantly evolving and with an analytical vision to assist the

clients to achieve success. We are leaders in training in the area of risk management,
information security, cybersecurity, and business continuity. We have already served more than 3 thousand

students in training and we have more than 22 classes formed in postgraduate and MBA courses.

Contribute with high-level consulting services, based

in exchanges of knowledge, experience, commitment
MISSION and quality so that our clients achieve their goals
and objectives.

Being a differential in the development trajectory of

companies and professionals in Business Continuity,
VISION IT Governance, Risk Management, and Security of
Information, as I believe that these subjects are part of
the business maturity required nowadays and that
will grow exponentially in the coming decades.

Ethics
Responsibility
VALORES Loyalty
Competence
Quality
Commitment

4
OUR TRAININGS
We offer extremely relevant courses for the growth of your career, in partnership with
the main international and national institutes. Our instructors are certified and have
extensive technical and teaching experience.

MBA AND POST-GRADUATION:

+MBA Management and Technology in Information Security
+MBA Risk Management and Business Continuity
MBA Project Management
+Postgraduate Specialization in Cyber Threat Intelligence
Postgraduate Degree in Business Process Management Improvement
Postgraduate Improvement in Information Technology Management
Postgraduate Specialization in Digital Forensic Expertise
Postgraduate Improvement in Cyber Threat Intelligence
Lato Sensu Postgraduate in Agile Business and IT Management
Postgraduate Lato Sensu in Internal Controls and Compliance Officer
Lato Sensu Postgraduate in Cyber Security

NATIONAL AND INTERNATIONAL TRAININGS

RISK MANAGEMENT BUSINESS CONTINUITY

Information Security Management (ISO

27001), Lead Security Auditor of Training of IT Continuity Analysts
Information (ISO 27001), Lead Implementer (ITDRA), Planner Training
in Data Privacy (ISO 27701), IT Continuity (ITDRP), Management of
Risk Management (ISO 31000), Analysis Business Continuity (GCN and BCLP) and
Vulnerability, Ethical Hacking, Training Lead Business Continuity Auditor
of Security Officer, Computational Forensics and (ISO 22301).
Secure Development.

PROCESS AND PROJECT MANAGEMENT IT GOVERNANCE AND MANAGEMENT

5
 Governance based on COBIT, Management of
Agile Project Management (AGILE Scrum), Management services based on ITIL, Lead Auditor (ISO
of Projects based on Prince 2, Quality 20000), Business Information Management
of Product and Service based on ISO 9001. ["BIM","Management Principles (ITMP)","Optimization"]
of Processes (Lean IT).

CONSULTING SERVICES
DARYUS is a recognized company specialized in Continuity consulting.

Business, Information and Cybersecurity, Governance and IT Management, Management by

Processes and Quality.

We help leading companies in various sectors achieve exceptional results by generating

VALUE, improving PRODUCTIVITY, QUALITY and reducing RISKS for the business.

BUSINESS CONTINUITY
• GAP 22301
• BCP
• RISK ANALYSIS
• BIA

Information Security
• GAP 27001
• VULNERABILITY ANALYSIS
• INFORMATION SECURITY POLICY
IMPLEMENTAÇÃO ISO 27001

GOVERNANCE AND MANAGEMENT OF ICT

• COBIT
• PDTIC
• ITIL IMPLEMENTATION
• GSTIC

PROCESS AND QUALITY MANAGEMENT

• GAP 9001 6
• ISO 9001 IMPLEMENTATION
• MAPPING AND MODELING OF PROCESSES
INFORMATION YOU NEED TO KNOW
Duração: 16 horas
June 8 and 9, 2021
Period: 09:00 AM to 06:00 PM
Mode: Online (Live)

PREREQUISITES
The student must have at least minimal knowledge in the Linux operating system.
basic programming.

As it is a 100% hands-on course, the student must use their own laptop according to the
minimum configurations listed at the end of this course presentation.

Necessary hardware:
Computer with i7 processor or higher, 8GB of memory or higher, 100GB of space
disk space, VMWare Workstation or VMWare Player

PÚBLICO-ALVO
This is for you who works with computer forensic investigation, risk management, and cyber security.

COURSE OBJECTIVES
Empower you to build the step-by-step of an information gathering, containing the structure
de:

Information storage
Collection
Analysis

7
BENEFIT
We are currently in the Information Age and one cannot underestimate the vital role that OSINT
performs in different areas of intelligence. The use of this model has several benefits,
among the main ones are:
Lower risk: using publicly available information to gather intelligence does not have
risk compared to other forms of intelligence, such as the use of espionage satellites, for
example.
•Effective cost: collecting OSINT is generally cheaper compared to other sources of
intelligence. For example, using human sources or satellite spying to collect data is expensive.
Small businesses with limited intelligence budgets can explore OSINT sources.
at minimal costs.
Easy accessibility: they are always available and updated, and can be used anywhere.
intelligence context; all you need are the necessary skills/tools to
collect and analyze OSINT properly.

SUMMARY
You consume a lot of content about Cyber Intelligence and still don't understand how to collect it.
results and put them into practice? Don't know how to use information that can be collected
to increase intelligence activity?

Open Source Intelligence (OSINT) has become a necessity for all types of
organizations, both governmental and business, as one could understand their
potential to accelerate growth. With this, intelligence organizations are increasing
your investments and training in OSINT.

In this course, you will learn a step-by-step guide on how to use the OSINT technique effectively.
practice and thus build a basic structure for collecting intelligence from open sources
(OSINT).

Furthermore, you will have the opportunity for an extensive dialogue and exchange of experiences with an instructor with
more than 20 years of experience in cyber intelligence, working with analysis and prevention of
cyber threats and frauds and dissemination of educational content on the subject for
professionals and companies.

8
PROGRAM CONTENT
Introduction to Cyber Intelligence - OSINT

• Introduction
• Defining your avatar
• Setting up an OSINT platform
• Creation of a storage, indexing, and search structure for collected data
• Uso de navegadores e extensões
• Use of the TOR network
• Use of VPNs
• Use of cloud servers

Search, Collection and Analysis of Information

• Understanding habits
• Defining sources of information
• Defining collection strategies
• Busca por pessoas, e-mails e usernames

Search in Social Media, Images and Geolocation

• Collecting information from public Twitter profiles
• Collecting information on Paste sites
• Collecting GEO-referenced information (Instagram and Twitter)
• Reverse image search
• Mapping of people and positions by LinkedIn

Search for Technical Information

• Domains
• IPs
• DNS
• HASHES
• CloudStorage

Deep web
• Freenet
• I2P - Invisible Internet Project
• TOR

9
 ◼ To gain access to the classes, it is necessary for the student
tenhaconta on YouTube.
RECORDED CLASSES
◼ It is also the student's obligation to be
in person or virtually in the classroom for
monitoring of content and maintenance of
frequency.
Recorded classes are a resource
additional and are made available to
◼ DARYUS is not responsible for any failures.
students via YouTube within up to 2 business days in the recording system as it is an additional resource and
after the end of the class, staying does not commit to recording the classes in any case
available for up to 30 days. student has hired this service or if the teacher
do not authorize the recording of the content for the reason of
confidentiality and security.
◼ Students who choose classes in the modality
remote attendees will receive the course certificate
digital format.

The administration of the course is carried out by the company

IDESP - Daryus Institute of Higher Education of São Paulo
CNPJ: 25.532.710/0001-93 | Inscrição Estadual: isenta
Avenida Paulista, 967, 9º andar Bela Vista, São Paulo, SP, CEP 01311-918.

10
INVESTMENT
Total course value Value with discount
R$ 1,997.00 R$ 1.290,00

PAYMENT PLANS

CONTRACTED SERVICE - COURSE VALUE

QUANTITY TOTAL VALUE
UNITARY
Course R$ 1.997,00 01 R$ 1,997.00
Course with discount R$ 01 R$
Expenses + other costs (+) -
FIDELITY Discount DARYUS Education
Total value with discounts R$ 1.290,00

There is a need for confirmation of the spot, which only occurs with the approval of the proposal and issuance of the
first invoice. We ask that the blocking request be made 30 days in advance to avoid the
unavailability of date.

11
 SERVICE TRAINING CONTRACT

IDESP - Daryus Institute of Higher Education Paulistaregistered with the CNPJ under number25.532.710/0001-
93located at Avenida Paulista, No. 967, 9th floor, Bela Vista, São Paulo, SP, ZIP Code 01311-918, in this act
represented by its legal representative Nadia Amalia Guimarães D’Addario, hereinafter referred to as
CONTRATADA, e de outro lado o ALUNO denominado CONTRATANTE, têm entre si justo e contratado o
what follows:

1. Object: provision of educational training services, as described in the content

technical and commercial proposal.

2. Classes will be held on the school's premises in person,

location defined and/or located by her, or agreed upon by the parties, or in the live online mode, provided that
meet minimum safety and comfort requirements according to the current laws and regulations in the country.

3. From the registration: send the acceptance of the proposal duly signed and fill out the registration form.
website www.daryus.com.br.

4. Declaration of prerequisite fulfillment: in the case of trainings that require prerequisite(s)

for the completion of the registration, the CONTRACTING PARTY declares to be aware that they have the prerequisite(s)
necessary for its execution, as per proposal.

5. Declaration of understanding of the proposal: the CONTRACTING PARTY declares to have read and understood everything
proposta, seus detalhes, requisitos, informações para pagamentos, informações para pagamentos de taxas
charged and required by the institutes, annual fees and proposed payment methods, and accepts the same,
returning to the proposal, an integral and attached part of this contract.

6. Mandatory identification: the identification of the CONTRACTOR to those responsible is mandatory.

first day of class presenting an official document with a photo. In the case of companies that will send
employees or collaborators, it is necessary to send the list at least 3 days in advance with
names, positions, emails, phone numbers, and ID of each student.

7. Material: In the case of digital material, the file will be sent to the student within three days.
advance notice before the start of the course. In the case of physical materials, the student will collect them on the first day of training.
If the student enrolls within a period of less than three days, they are aware that the delivery of the digital material will be
performed within 24 business hours after enrollment.
Note: The digital materials will be sent in cloud format, with the zip extension, and it will be necessary to
the student has the tool that can open this file format and download it
considering the deadline of 5 (five) days. After this period, a new material fee will be charged,
equivalent to R$120.00 (one hundred and twenty reais).

8. Attendance: the student must attend at least 80% of the class hours to obtain the
certificate, proving this through a signature on the attendance list provided by the teachers and/or
assistants on all school days or confirmed attendance through tools and technologies of classes
online with the training instructor. Absence from classes will be considered as a class taught, not
therefore, there will be a refund of the amounts paid or replacement of these classes. If the CONTRACTING PARTY
needs to be absent for health reasons or force majeure, he may request the transfer to a
another later class. This will be evaluated and accepted upon presentation of the respective certificate for
verify such a situation.

12
9. Regarding the certificate: the student who has 80% attendance will receive it within 48 business hours after the
training the digital certificate in the registered email.

10. The exam: Must be scheduled in advance, according to the availability of time and date.
of the Contracted, with the scheduling being the sole responsibility of the Contracting Party. The exam can only be
scheduled after the total payment of the amounts due and made within a maximum period of 7 days after
the end of the training. For promotional cases, the exam must be conducted on the day of the training,
unconditionally. Those who wish can purchase the anywhere voucher for an additional cost, for execution.
within 12 (twelve) months at a location external to DARYUS. (The anywhere voucher is valid for 12 months)
starting from the acquisition date of the same, and after the validation of the voucher code on the EXIN website, the candidate
You will have 21 days to take the exam. Do not wait to use the voucher by the maximum deadline, due to the difference.
of the time zone of the EXIN Institute which is located in another country.

10.1. On the rescheduling of the exam: If the candidate does not show up at the location of the exam application on
the stipulated day and time and does not have a certificate provided by law, must bear 7% (seven percent) of
value of the exam for a new scheduling. The CONTRACTED PARTY may reschedule the exam when:
• There is a case of force majeure or that poses a risk to students and/or support staff on site;
• There is a prohibition of the location or the CONTRACTED PARTY by agencies, federal public bodies or
judicial impediment, where there is a need for interruption. In this case, when possible, the
exam will be rescheduled.
• There are infrastructure problems that prevent the exam from being conducted with quality.
necessary.
• By fortuitous event or force majeure.
• Nos casos em que o Instituto responsável estiver com site em manutenção ou qualquer situação
that prevents the application.

10.2. Regarding Failure in Examinations: In the event of failure in the examinations, comply with the regulations of
respective Institute for a new attempt.

10.3. Exam Certificates: It is the responsibility of the Institute to send the certificate. The sending
it will be done by email, through a personal account, provided at the time of purchase within 72 business hours after
approval.

11. Payment: agreed as per commercial proposal.

12. On the charges and delays of services: 2% fine after due date plus late fees for
day of 0.33% on the total amount.

13. Regarding quorum: in the event that the minimum quorum is not reached:

• The course may be canceled or postponed due to lack of quorum, up to 72 hours in advance.
scheduled date for its start.
• In the event of cancellation by the CONTRACTED PARTY, 100% will be automatically refunded.
of the amount paid, by means of a deposit in the bank account indicated by the student within 10 business days
after the information of the bank details.

• In the event of postponement and upon the student's express request addressed to the e-
[email protected], 80% of the amount paid will be refunded, also via deposit in
bank account indicated by the student within 10 business days after providing the bank details.
• The CONTRACTOR is not responsible for any other amounts that may have arisen.
expenses incurred by the student, regardless of the reason, such as airfare or bus tickets,
fuel, accommodation, etc., due to the cancellation or postponement of the course.
13
14. Regarding the course withdrawal: the withdrawal will only be accepted by the CONTRACTED PARTY and will be valid if made
in writing and signed with a receipt protocol, under the following conditions:

• Up to 7 days before the course, 80% of the amount paid by the CONTRACTOR will be refunded.
• Up to 3 days before the start of the course, 20% of the amount paid by the CONTRACTOR will be refunded.
• after the start of classes, the student who does not participate in the in-person or live online course will not have
refund of amounts, according to previous clauses.
In the case of receiving the material before the student's withdrawal, the penalty amount will be deducted in addition to the fee.
the amount of R$120.00 (one hundred and twenty reais) additional.

15. Regarding the cancellation of the exam and voucher anywhere: in case of cancellation after purchasing the exam, it will be
20% discount off the amount paid by the CONTRACTOR. In case of withdrawal from the voucher purchase.
anywhere, if it has already been acquired by the CONTRACTOR, there will be no refund of amounts.
In case of a purchase process, 20% of the value will be discounted.

16. Regarding rescheduling: the CONTRACTOR may reschedule the training(s) for a future date.
since I informed the CONTRACTOR 10 (ten) days in advance of the start of the training or
before receiving the course confirmation email. After this deadline, it will be considered a withdrawal.
The CONTRACTING PARTY may reschedule the training only once, within a period of 12 months. In case
in case of cancellation of the training by the CONTRACTING PARTY after rescheduling, the school will not provide a refund
of paid values.

17. Regarding the cancellation of the class: the CONTRACTED PARTY may cancel the class in advance or at
beginning or during the course when:

• there is the death of the teacher or a close relative that prevents him from continuing to teach. In this
In case, the CONTRACTED PARTY reserves the right to replace it at the moment or in the event of its impediment.
action to reschedule the course date in agreement with all the present students.
• there is a force majeure reason or one that poses a risk to students and/or support staff on site.
• there is an interdiction of the location or of the CONTRACTED PARTY by agencies, federal public bodies or
judicial impediment, where there is a need for interruption. In this case, when possible, the
the course will be rescheduled.
• there are infrastructure problems that prevent the course from being conducted with quality
necessary. In this case, when possible, the course will be rescheduled.
• by fortuitous event or force majeure.
• due to lack of quorum according to clause 10.

18. On joint liability: in the case where the CONTRACTING PARTY is a company and sends its
partners for the course(s), this is jointly responsible for any damages caused by
your sent items in computer equipment, audio or any training instrument placed on
willingness for the execution and the quality of it. The CONTRACTOR and its delegates for the course
they also recognize that the manuals, work forms and dynamics or exercises, software, brands,
logos, symbols and/or distinctive signs are duly protected and are the copyrights of the school,
companies of the Group or partners involved, which may never be reproduced and/or copied without the
express consent of the CONTRACTED PARTY, under penalty of being considered an act of unfair competition,
therefore liable to be framed under the Industrial Property Code and the Penal Code
Brazilian, in addition to being subject to respond for losses and damages.

14
19. Regarding the use of image: the CONTRACTING PARTY declares that they are aware and authorizes the use of their
image and of works developed by him in his academic activities for institutional disclosure
by the CONTRACTED PARTY, inside or outside its premises, on any media, at any time, through
photographic records, filmed, digital, or on any other basis, as long as it does not harm or expose
negatively the CONTRACTING PARTY. In the case of a company, the use of its logo in materials is authorized.
for dissemination such as presentations, brochures, and websites of the CONTRACTOR, provided that it respects their
Visual identity and logos provided by the contracting party, and do not expose it negatively. In case of
CONTRACTING PARTY may request that a testimonial about the course be published if they have and wish for it.
to the CONTRACTED, as long as it does not expose her negatively.

20. Of the agreement: the parties commit to addressing the present, and all information obtained in
due to this, as confidential and restricted to the parties, respecting the inherent confidentiality and
accepting it in full.

21. Foro: the parties choose the Forum of São Paulo to resolve any disputes that may arise.
come to arise in relation to this contract, waiving any other no matter how privileged
be.
22. Final Provisions: Omissive cases will be handled by the school's Academic Board.

São Paulo, _______ of _________________ of 2021.

CONTRACTED CLIENT

IDESP - Daryus Institute of Higher Education Paulista.

15