Trellix FIRE-TH: Advanced Cyber Threat Services Threat Hunting

Trellix FIRE-TH: Advanced Cyber Threat Services Threat Hunting

Kursbeschreibung

  • Kurs-ID:MCAF_ACTS
  • Kursdauer:4 Tage
  • Uhrzeit:09:30 - 17:00 Uhr, 09:00 - 17:00 Uhr, 09:00 - 17:00 Uhr

The Forensics and Incident Response Education (FIRE) course offered by Foundstone® Services is a defensive weapon to help you normalize your environment after a negative event has occurred. Hackers and disgruntled employees are using sophisticated tools and backdoor programs to steal your intellectual property and expose sensitive information.

And they can cover their tracks in the process. In this course, we provide you with the forensic techniques to identify, respond to, and recover from both an insider and outsider attack. This comprehensive, technically detailed course enables you to successfully respond to incidents and reinforces your security posture.

Zielgruppe

This course is intended for beginning threat hunters, information security personnel, auditors, SOC analysts, and consultants responsible for improving organizational security and detecting data breaches.

Voraussetzung für die Schulung

Participants should have a basic understanding of Unix/Linux, and Windows, computer forensics, and TCP/IP networking for the course to be fully beneficial.

Kursinhalte

Course Goals and Objectives:

At the end of this course, students should be able to identify anomalies and uncover threats in their environments.
This course is designed to enable students to hunt effectively for threats in network, application, and endpoint alerts and data, and apply critical reasoning skills to stay focused and avoid pitfalls.

Trainingsinhalte:

  • Introductions
  • Course Goals
  • Course Objectives
  • Threat Hunting Overview
  • Analytical/Critical Thinking
  • Attack Based Methodologies
  • Data Based Methodologies
  • Hunting with Network Tools
  • Hunting with Endpoint Tools
  • Hunting with Application Tools
  • Augmenting with Threat Intelligence
  • Threat Hunting Capstone

Termin finden

Keine Termine verfügbar