Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Introduction to Blue Team Operations
- Overview of the Blue Team and its significance in cybersecurity
- Examining attack surfaces and the current threat landscape
- Familiarization with security frameworks (MITRE ATT&CK, NIST, CIS)
Security Information and Event Management (SIEM)
- Foundations of SIEM and log management
- Deployment and configuration of SIEM platforms
- Reviewing security logs to identify anomalies
Network Traffic Analysis
- Comprehending network traffic and packet examination
- Employing Wireshark for detailed packet inspection
- Identifying network intrusions and suspicious behavior
Threat Intelligence and Indicators of Compromise (IoCs)
- Basics of threat intelligence
- Recognizing and evaluating Indicators of Compromise (IoCs)
- Techniques and best practices for threat hunting
Incident Detection and Response
- The incident response lifecycle and established frameworks
- Evaluating security incidents and deploying containment measures
- Essentials of forensic investigation and malware analysis
Security Operations Center (SOC) and Best Practices
- Exploring SOC architecture and operational workflows
- Streamlining security operations through scripting and playbooks
- Fostering collaboration between Blue Team, Red Team, and Purple Team exercises
Summary and Next Steps
Requirements
- Fundamental comprehension of cybersecurity concepts
- Proficiency with networking basics (TCP/IP, firewalls, IDS/IPS)
- Operational experience with Linux and Windows operating systems
Target Audience
- Security analysts
- IT administrators
- Cybersecurity specialists
- Network defenders
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.
