Sobre o curso Implementing Cisco Cybersecurity Operations (SECOPS)
Carga horária: 40 horas (5 dias)
Currículo, objetivos do curso, ementa e informações gerais (em inglês)
Course Prerequisites
It is recommended, but not required, to have the following skills and knowledge before attending this course:
- Skills and knowledge equivalent to those learned in Interconnecting Cisco Networking Devices Part 1 (ICND1
- Working knowledge of the Windows operating system
- Working knowledge of Cisco IOS networking and concepts
Course Description
This course allows learners to understand how a Security Operations Center (SOC) functions and the introductory-level skills and knowledge needed in this environment. It focuses on the introductory-level skills needed for a SOC Analyst at the associate level. Specifically, understanding basic threat analysis, event correlation, identifying malicious activity, and how to use a playbook for incident response.
Course Objectives
Upon completion of this course, you will be able to:
- Define a SOC and the various job roles in a SOC
- Understand SOC infrastructure tools and systems
- Learn basic incident analysis for a threat centric SOC
- Explore resources available to assist with an investigation
- Explain basic event correlation and normalizatio
- Describe common attack vectors
- Learn how to identifying malicious activity
- Understand the concept of a playbook
- Describe and explain an incident respond handbook
- Define types of SOC Metrics
- Understand SOC Workflow Management system and automation
Job Roles
- Security Operations Center – Security Analyst
- Computer/Network Defense Analysts
- Computer Network Defense Infrastructure Support Personnel
- Future Incident Responders and Security Operations Center (SOC) personnel.
- Students beginning a career, entering the cybersecurity field.
- Cisco Channel Partners
Faça seu treinamento com os melhores
Pagamentos no PagSeguro com segurança e flexibilidade em até 12 vezes
Ementa do Curso
- Module 1: SOC Overview
- Lesson 1: Defining the Security Operations Center
- Lesson 2: Understanding NSM Tools and Data
- Lesson 3: Understanding Incident Analysis in a Threat-Centric SOC
- Lesson 4: Identifying Resources for Hunting Cyber Threats
- Module 2: Security Incident Investigations
- Lesson 1: Understanding Event Correlation and Normalization
- Lesson 2: Identifying Common Attack Vectors
- Lesson 3: Identifying Malicious Activity
- Lesson 4: Identifying Patterns of Suspicious Behavior
- Lesson 5: Conducting Security Incident Investigations
- Module 3: SOC Operations
- Lesson 1: Describing the SOC Playbook
- Lesson 2: Understanding the SOC Metrics
- Lesson 3: Understanding the SOC WMS and Automation
- Lesson 4: Describing the Incident Response Plan
- Lesson 5: Appendix A—Describing the Computer Security Incident Response Team
- Lesson 6: Appendix B—Understanding the use of VERIS
Atividades práticas em laboratórios:
- Guided Lab 1: Explore Network Security Monitoring Tools
- Discovery 1: Investigate Hacker Methodology
- Discovery 2: Hunt Malicious Traffic
- Discovery 3: Correlate Event Logs, PCAPs, and Alerts of an Attack
- Discovery 4: Investigate Browser-Based Attacks
- Discovery 5: Analyze Suspicious DNS Activity
- Discovery 6: Investigate Suspicious Activity Using Security Onion
- Discovery 7: Investigate Advanced Persistent Threats
- Discovery 8: Explore SOC Playbooks
Conheça mais sobre a nossa visão sobre as certificações da Cisco aqui!
Valores do Investimento
- Reais (BRL): R$ 6.500,00
- Cisco Learning Credits (CLC): 17
OBS: preços válidos para treinamentos presenciais na cidade do Rio de Janeiro ou para treinamentos VILT (Online/WebEx).
Próximos Treinamentos Implementing Cisco Cybersecurity Operations (SECOPS)
abril 2024
Sem Treinamentos / Eventos
maio 2024
Sem Treinamentos / Eventos