Performing CyberOps Using Cisco Security Technologies (CBRCOR)

Voraussetzungen

Although there are no mandatory prerequisites, to fully benefit from this course, you should have the following knowledge:

• Familiarity with UNIX/Linux shells (bash, csh) and shell commands
• Familiarity with the Splunk search and navigation functions
• Basic understanding of scripting using one or more of Python, JavaScript, PHP or similar.

Recommended Cisco offering that may help you prepare for this course:

• Implementing and Administering Cisco Solutions (CCNA) v2.1
• Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Zielgruppe

Although there are no mandatory prerequisites, the course is particularly suited for the following audiences:

• Cybersecurity engineer
• Cybersecurity investigator
• Incident manager
• Incident responder
• Network engineer
• SOC analysts currently functioning at entry level with a minimum of 1 year of experience

Detaillierter Kursinhalt

• Understanding Risk Management and SOC Operations
• Understanding Analytical Processes and Playbooks
• Investigating Packet Captures, Logs, and Traffic Analysis
• Investigating Endpoint and Appliance Logs
• Understanding Cloud Service Model Security Responsibilities
• Understanding Enterprise Environment Assets
• Implementing Threat Tuning
• Threat Research and Threat Intelligence Practices
• Understanding APIs
• Understanding SOC Development and Deployment Models
• Performing Security Analytics and Reports in a SOC
• Malware Forensics Basics
• Threat Hunting Basics
• Performing Incident Investigation and Response