Conducting Threat Hunting and Defending using Cisco Technologies for CyberOps

• Security Operations Center staff
• Security Operations Center (SOC) Tier 2 Analysts
• Threat Hunters
• Cyber Threat Analysts
• Threat Managers
• Risk Managements

The knowledge and skills you are expected to have before attending this training are:

• General knowledge of networks
• Cisco CCNP Security certification

These skills can be found in the following Cisco Learning Offerings:

• Implementing and Administering Cisco Solutions (CCNA) v2.1
• Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)
• Performing CyberOps Using Cisco Security Technologies (CBRCOR)
• Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CyberOps (CBRFIR)

• Define threat hunting and identify core concepts used to conduct threat hunting investigations
• Examine threat hunting investigation concepts, frameworks, and threat models
• Define cyber threat hunting process fundamentals
• Define threat hunting methodologies and procedures
• Describe network-based threat hunting
• Identify and review endpoint-based threat hunting
• Identify and review endpoint memory-based threats and develop endpoint-based threat detection
• Define threat hunting methods, processes, and Cisco tools that can be utilized for threat hunting
• Describe the process of threat hunting from a practical perspective
• Describe the process of threat hunt reporting

Zertifizierung