From threat actors to their techniques and motivations, you’ll learn core threat intelligence concepts such as the pyramid of pain, the MITRE ATT&CK framework, and intelligence sharing.

• Introduction to Threat Intelligence
• Threat Actors and APTs
• Operational Threat Intelligence
• Tactical Threat Intelligence
• Strategic Threat Intelligence
• Malware and Global Campaigns

Sometimes we need to dig deeper, and that’s where forensics comes into play. Using special tools we can learn more about files, browsing history, and memory dumps to build up a timeline of events.

• Introduction to Digital Forensics
• Forensics Fundamentals
• Digital Evidence Collection
• Windows Investigations
• Linux Investigations
• Volatility
• Autopsy

SIEM is at the heart of what SOC analysts do. Pulling data from across the organisation, correlating it, and alerting on suspicious or malicious activity. You’ll learn how to conduct log analysis and investigate security events and incidents.

• Introduction to SIEM
• Logging
• Aggregation
• Correlation
• Using Splunk SIEM

When a security event evolves into a security incident, it’s a race against the clock to limit the damage caused by the attack. Incident responders don’t just investigate reactively, they also work to implement defences to protect the organisation.

• Introduction to Incident Response
• Preparation Phase
• Detection and Analysis Phase
• Containment, Eradication, and Recovery Phase
• Lessons Learned
• MITRE ATT&CK