|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/300-220-cbrthd-threat-hunting-and-defending-questions/
课程评论：没有评论
课程名称：300-220 CBRTHD - 威胁猎杀和防御问答2025 课程概述：ITCertify Zone推出的“使用思科技术进行威胁猎杀和防御的课程（CyberOps v1.0 300-220）”，旨在帮助考生为CyberOps专业认证考试（300-220）做好准备。该课程强调利用思科技术进行高级威胁猎杀和防御策略。 课程内容： 1. 威胁猎杀基础（20%）：了解威胁猎杀成熟度模型、MITRE ATT&CK等威胁建模框架，以及自动化在安全运营中心（SOC）活动中的作用。分析日志以区分高级持续威胁并有效使用威胁情报。 2. 威胁建模技术（10%）：学习选择适当的威胁建模方法，应用MITRE ATT&CK战术，并使用网络杀戮链优先排序攻击。掌握结构化和非结构化威胁猎杀方法。 3. 威胁行为者归因技术（20%）：通过日志分析识别攻击战术、技术和程序的能力。识别检测高级威胁的关键工件，并区分恶意行为者与渗透测试者。 4. 威胁猎杀技术（20%）：利用脚本语言进行威胁检测，进行云原生猎杀，分析终端工件以发现未检测的威胁。识别指挥与控制通信，并利用代码级分析工具进行漏洞评估。 5. 威胁猎杀流程（20%）：了解内存驻留攻击，应用逆向工程识别妥协，检测当前检测机制的缺口。开发有效的运行手册，推荐适当的工具和配置，并基于全面评估提出补救策略。 6. 威胁猎杀结果（10%）：通过整合多个产品提高数据可见性，诊断分析不足，并建议缓解策略。使用演示工具有效沟通发现并推动环境内的必要变更。 适合人群：本课程面向安全专业人员、网络管理员、IT专家及有志于成为威胁猎手的人员，旨在提升其在威胁检测和防御方面的技能。特别适合希望加深对网络安全实践和保障网络基础设施理解的个人。 通过ITCertify Zone的专业培训，掌握威胁猎杀和防御的基本知识和技能，准备迎接现代网络安全环境的挑战。
ITCertify Zone offers the "Conducting Threat Hunting and Defending using Cisco Technologies for CyberOps v1.0 (300-220)" course, tailored to prepare candidates for the CyberOps Professional Certification (300-220) exam. This program emphasizes advanced threat hunting and defense strategies utilizing Cisco technologies.Course Overview:Threat Hunting Fundamentals (20%): Understand the Threat Hunting Maturity Model, threat modeling frameworks like MITRE ATT & CK, and the role of automation in Security Operations Center (SOC) activities. Analyze logs to differentiate advanced persistent threats and effectively use threat intelligence.Threat Modeling Techniques (10%): Learn to select appropriate threat modeling methodologies, apply MITRE ATT & CK tactics, and prioritize attacks using the Cyber Kill Chain. Gain proficiency in both structured and unstructured threat hunting approaches.Threat Actor Attribution Techniques (20%): Develop skills in identifying attack tactics, techniques, and procedures through log analysis. Recognize critical artifacts for detecting advanced threats and distinguish between malicious actors and penetration testers.Threat Hunting Techniques (20%): Use scripting languages for threat detection, conduct cloud-native hunts, and analyze endpoint artifacts to uncover undetected threats. Identify command-and-control communications and utilize code-level analysis tools for vulnerability assessments.Threat Hunting Processes (20%): Understand memory-resident attacks, apply reverse engineering to identify compromises, and detect gaps in current detection mechanisms. Develop effective runbooks, recommend appropriate tools and configurations, and propose remediation strategies based on thorough assessments.Threat Hunting Outcomes (10%): Improve data visibility through the integration of multiple products, diagnose analytical deficiencies, and suggest mitigation strategies. Use presentation tools to effectively communicate findings and drive necessary changes within the environment.Who Should Enroll:This course is intended for security professionals, network administrators, IT specialists, and aspiring threat hunters aiming to enhance their skills in threat detection and defense. It's particularly beneficial for individuals seeking to deepen their understanding of cybersecurity practices and secure network infrastructures.Equip yourself with the essential knowledge and skills for effective threat hunting and defense, and prepare to meet the challenges of modern cybersecurity landscapes with ITCertify Zone's expert-led training.
