Training Content

Introduction to Incident Response
8 Topics
Incident Response Concept: Topic 1 – Introduction
Incident Response Concept: Topic 2 – Process
Incident Response Concept: Topic 3 – Preparation
Incident Response Concept: Topic 4 – Detection and Analysis
Incident Response Concept: Topic 5 – Containment, Eradication, and Recovery
Incident Response Concept: Topic 6 – Post-Incident Activity
Verifying SIEM Findings
Incident Response Concept: Topic 7 – Demonstrate your Knowledge
NIST – The National Institute of Standards and Technology
22 Topics
NIST 800-53: #1 Security and Privacy Controls for Information Systems and Organizations
NIST 800-53: #2 Access Control
NIST 800-53: #3 Awareness and Training
NIST 800-53: #4 Audit and Accountability
NIST 800-53: #5 Assessment, Authorization, and Monitoring
NIST 800-53: #6 Configuration Management
NIST 800-53: #7 Contingency Planning
NIST 800-53: #8 Identification and Authentication
NIST 800-53: #9 Incident Response
NIST 800-53: #10 Maintenance
NIST 800-53: #11 Media Protection
NIST 800-53: #12 Physical And Environmental Protection
NIST 800-53: #13 Planning
NIST 800-53: #14 Program Management
NIST 800-53: #15 Personnel Security
NIST 800-53: #16 Personally Identifiable Information Processing and Transparency (PIIPT)
NIST 800-53: #17 – Risk Assessment
NIST 800-53: #18 – System and Services Acquisition
NIST 800-53: #19 System and Communications Protection
NIST 800-53: #20 System and Information Integrity
NIST 800-53: #21 Supply Chain Risk Management
NIST 800-53: Ep.21 – Demonstrate your Knowledge
Wireshark
9 Topics
Intro To Wireshark
Wireshark Display Filters: Introduction
Wireshark Display Filters: In Depth
Wireshark Display Filters: Combining
Wireshark statistics
Wireshark: stream/object Extraction
Wireshark TLS
Tshark
Demonstrate Your Skills: Wireshark
Packet Analysis
18 Topics
Intro to Wireshark
Packet Capture Basics
Understanding Wireshark: TLS handshake
Wireshark Display Filters: An Introduction
Wireshark Display Filters: Filters In Depth
Wireshark Statistics
Traffic Analysis: Device Information
Wireshark: Stream/Object Extraction
Traffic Analysis: Malware
Packet Capture: Key Extraction
Wireshark TLS
ngrep
Tshark
tcpdump
BPF Syntax
Wireshark Display Filters: Combining Filters
Demonstrate Your Skills: Packet Analysis
Demonstrate Your Skills: Wireshark
Yara
12 Topics
Yara: Ep.1
Yara: Ep.2
Yara: Ep.3
Yara: Ep.4
Yara: Ep.5
Yara: Ep.6
Yara: Ep.7
Yara: Ep.8
Yara: Ep.9
Yara: Ep.10
Tuning Yara Rules
Yara: Sodinokibi
Elastic Stack
10 Topics
Introduction to the Elastic Stack – eCommerce Data
Introduction to the Elastic Stack – Flight Data
Introduction to the Elastic Stack – Web Logs
Elastic Stack – Beats: Filebeat
Elastic Stack – Beats: Auditbeat
Elastic Stack – Beats: Metricbeat
Elastic Stack – Beats: Packetbeat
Elastic Stack – Beats: Heartbeat
Elastic Stack – Beats: Winlogbeat
Demonstrate Your Skills: Elastic Stack – Multi-Beat Investigation