Kurs-ID: ETH_CBRF
Kurs CBRFIR
Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CyberOps
The course is a 5-day training consisting of a series of lectures and videos that build your Digital Forensics and Incident Response (DFIR) and cybersecurity knowledge and skills. The course prepares you to identify and respond to cybersecurity threats, vulnerabilities, and incidents.
Additionally, you will be introduced to digital forensics, including the collection and examination of digital evidence on electronic devices and learn to build the subsequent response threats and attacks. Students will also learn to proactively conduct audits to prevent future attacks.
The Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CyberOps (CBRFIR) v1.0 course also prepares you to take the 300-215 CBRFIR exam.
Dieses Training findet in Kooperation mit ExperTeach statt.
Anfrage stellenSeminarinhalte
- Introducing Incident Response and Forensic Analysis
- Describing Digital Forensics and Incident Response (DFIR) Guidelines and Associations
- Examining Threats and Vulnerability Frameworks
- Describing the Analytical Mindset
- Preparing for Incident Response and Responding to Threats
- Identifying Sources of Evidence
- Gathering Intelligence
- Examining Digital Forensics and Incident Response Tools
- Describing Detection and Analysis
- Describing Investigation and Detection
- Describing Digital Forensics
- Describing Breach Containment and Eradication
- Describing Post-Incident Activities
Kursthemen
Das Training CBRFIR ist folgenden Themen zugeordnet:
Zielgruppe
This course is designed for the following roles:
- SOC analysts, Tiers 1–2
- Threat researchers
- Malware analysts
- Forensic analysts
- Computer Telephony Integration (CTI) analysts
- Incident response analysts
- Security operations center engineers
- Security engineers
Voraussetzungen
Before taking this course, you should have:
- Familiarity with network and endpoint security concepts and monitoring
- Experience with network intrusion analysis
- An understanding of security policies and procedures
- Experience with risk management
- Experience with traffic and logs analysis
- Familiarity with APIs
- 2–3 years’ experience working in a Security Operations Center (SOC) environment (experience Tier 1, or new Tier 2)
These recommended Cisco learning offerings may help students meet these prerequisites:
- Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)
- Performing CyberOps Using Cisco Security Technologies (CBRCOR)
- Splunk Fundamentals 1