Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 21 hours
Course Outline
Fundamentals of Blue Team Operations
- Overview of Blue Team roles within the broader cybersecurity landscape.
- Exploring attack surfaces and current threat environments.
- Foundations of key security frameworks, including MITRE ATT&CK, NIST, and CIS.
Security Information and Event Management (SIEM)
- Core concepts of SIEM and effective log management.
- Configuration and setup of SIEM platforms.
- Techniques for analyzing security logs and identifying anomalies.
Network Traffic Analysis
- Comprehensive view of network traffic and packet-level analysis.
- Practical application of Wireshark for packet inspection.
- Identifying network intrusions and monitoring for suspicious behavior.
Threat Intelligence and Indicators of Compromise (IoCs)
- Basics of threat intelligence gathering.
- Methods for identifying and evaluating IoCs.
- Strategies and best practices for proactive threat hunting.
Incident Detection and Response
- Structure of the incident response lifecycle and relevant frameworks.
- Evaluating security incidents and implementing containment measures.
- Essentials of forensic investigation and malware analysis.
Security Operations Center (SOC) and Best Practices
- In-depth look at SOC structures and operational workflows.
- Leveraging scripts and playbooks to automate security tasks.
- Collaborative exercises involving Blue, Red, and Purple Teams.
Recap and Future Directions
Requirements
- Foundational knowledge of cybersecurity principles
- Proficiency in networking basics, including TCP/IP, firewalls, and IDS/IPS
- Practical experience with both Linux and Windows operating systems
Target Audience
- Security analysts
- IT administrators
- Cybersecurity professionals
- Network defense specialists
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.
