Course Outline
Introduction to Blue Team Operations
- Overview of the Blue Team and its role in cybersecurity.
- Understanding attack surfaces and threat landscapes.
- Introduction to security frameworks (MITRE ATT&CK, NIST, CIS).
Security Information and Event Management (SIEM)
- Introduction to SIEM and log management.
- Setting up and configuring SIEM tools.
- Analyzing security logs and detecting anomalies.
Network Traffic Analysis
- Understanding network traffic and packet analysis.
- Using Wireshark for packet inspection.
- Detecting network intrusions and suspicious activity.
Threat Intelligence and Indicators of Compromise (IoCs)
- Introduction to threat intelligence.
- Identifying and analyzing IoCs.
- Threat hunting techniques and best practices.
Incident Detection and Response
- Incident response lifecycle and frameworks.
- Analyzing security incidents and containment strategies.
- Forensic investigation and malware analysis fundamentals.
Security Operations Center (SOC) and Best Practices
- Understanding SOC structure and workflows.
- Automating security operations with scripts and playbooks.
- Blue Team collaboration with Red Team and Purple Team exercises.
Summary and Next Steps
Requirements
- Fundamental understanding of cybersecurity concepts.
- Familiarity with networking fundamentals (TCP/IP, firewalls, IDS/IPS).
- Practical experience with Linux and Windows operating systems.
Audience
- Security analysts.
- IT administrators.
- Cybersecurity professionals.
- Network defenders.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 3900 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (2)
Clarity and pace of explanations
Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response
It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.
