This course prepares participants to effectively detect, analyze, and respond to cybersecurity incidents using operational security techniques, tools, and processes.
Module 1: Introduction to Cybersecurity Operations
Module 2: Threat Intelligence and Threat Hunting
Module 3: Security Monitoring and Detection
Log analysis
SIEM tools
Module 4: Incident Response Framework
Incident response lifecycle
Best practices
Module 5: Incident Containment and Eradication
Containment strategies
Malware removal
Module 6: Recovery and Lessons Learned
Restoring systems
Incident review and reporting
Module 7: Tools and Technologies
Endpoint detection and response (EDR)
Automated incident response tools
Security Analysts
SOC Team Members
Incident Responders
IT Security Professionals