|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/cyber-threat-intelligence/
课程评论：没有评论
**Coursera 课程总结：网络威胁情报 (Cyber Threat Intelligence)** 本课程由 Christopher Nett 设计，旨在帮助 IT 专业人士掌握网络威胁情报 (CTI)，从而构建更具威胁感知能力的防御体系。课程从 CTI 的基础概念入手，循序渐进地深入到高级主题，全面覆盖了当前网络安全领域的核心知识。 **课程核心内容与收益：** * **SOC 基础:** 了解安全运营中心 (SOC) 的基本结构及其在网络安全中的关键作用。 * **Azure 基础:** 掌握 Microsoft Azure 基础设施的关键知识。 * **零信任基础:** 学习零信任安全模型的原理和实践。 * **情报收集与分析:** 探索收集和分析数据以预测和预防威胁的方法，赋能情报驱动的安全决策。 * **CTI 核心技术:** 深入了解 CTI 的核心技术，识别潜在威胁，并在其造成影响前进行防御。 * **CTI 相关框架:** 学习并掌握各种能够提升 CTI 流程有效性的框架。 * **MITRE ATT&CK:** 深入研究这个全球通用的、关于攻击者战术和技术的知识库。 * **威胁行为者与 APT:** 识别网络战中的常见威胁行为者和高级持续性威胁 (APT)。 * **CTI 工具:** 获得使用 CTI 收集和分析工具的实践经验。 * **CTI 平台:** 熟悉专门用于管理和实践 CTI 的平台。 * **人工智能与 CTI:** 探索人工智能在加强威胁检测方面的应用。 * **案例研究:** * **MISP 在 Azure 上的应用:** 分析如何在 Azure 上实施 MISP 威胁情报平台来管理 CTI。 * **利用 ATT&CK 研究 APT41:** 学习如何使用 MITRE ATT&CK 框架研究 APT41 的战术、技术和过程 (TTPs)。 * **在 Microsoft Sentinel 中应用 CTI:** 学习 CTI 在增强 Microsoft Sentinel 威胁检测能力方面的实际应用。 * **构建 CTI 项目:** 从一个全面的蓝图学习如何在组织内建立一个成功的 CTI 项目。 通过本课程的学习，您将成为一名精通 CTI 的专业人士，具备在网络安全领域开展前沿职业所需的技能。
Cyber Threat Intelligence (CTI) by Christopher Nett is a meticulously organized Udemy course designed for IT professionals aiming to master CTI to empower threat-informed defenses. This course systematically guides you from the basis to advanced concepts of CTI.By mastering CTI, you're developing expertise in essential topics in today's cybersecurity landscape. Through this course, you'll develop expertise in CTI, a comprehensive topic widely recognized for understanding tactics, techniques and procedures of adversaries and defending against cyber threats. This deep dive into CTI equips you with the skills necessary for a cutting-edge career in cybersecurity.Key Benefits for you:SOC Basics: Understand the foundational structures of Security Operations Centers and their role in cybersecurity.Azure Basics: Gain essential knowledge of Microsoft Azure's infrastructure.Zero Trust Basics: Learn the principles of the Zero Trust security model.Intelligence: Explore the methods of collecting and analyzing data to predict and prevent threats.CTI: Delve into the core techniques of Cyber Threat Intelligence to identify potential threats before they impact.CTI Related Frameworks: Discover various frameworks that enhance the effectiveness of CTI processes.MITRE ATT & CK: Study this globally-accessible knowledge base of adversary tactics and techniques.Threat Actors and Advanced Persistent Threats: Identify common adversaries in cyber warfare.CTI Tools: Get hands-on experience with the tools that professionals use for CTI gathering and analysis.CTI Platforms: Familiarize yourself with platforms specifically designed for managing and operationalizing CTI.AI & CTI: Explore the intersection of Artificial Intelligence and CTI to enhance threat detection.Case Study I - MISP on Azure: Analyze how the MISP threat intelligence platform can be implemented on Azure to manage CTI.Case Study II: Researching APT41 with ATT & CK: Understand the approach to investigating the TTPs of APT41 using the MITRE ATT & CK framework.Case Study III: Leveraging CTI in Microsoft Sentinel: See practical applications of CTI in enhancing Microsoft Sentinel's threat detection capabilities.Case Study IV: Building a CTI Program: Learn from a comprehensive blueprint on setting up a successful CTI program within an organization.
