Cisco Conducting Threat Hunting and Defending using Cisco Technologies for CyberOps (CBRTHD)

About this course

Hunt threats proactively instead of waiting for alerts. Over five days you will learn threat hunting concepts, frameworks and threat models, apply hunting methodologies and procedures, and defend using Cisco security technologies.

What you'll learn

• Define threat hunting and identify core concepts used to conduct threat hunting investigations
• Examine threat hunting investigation concepts, frameworks, and threat models
• Define cyber threat hunting process fundamentals
• Define threat hunting methodologies and procedures
• Describe network-based threat hunting
• Identify and review endpoint-based threat hunting
• Identify and review endpoint memory-based threats and develop endpoint-based threat detection
• Define threat hunting methods, processes, and Cisco tools that can be utilized for threat hunting
• Describe the process of threat hunting from a practical perspective
• Describe the process of threat hunt reporting

Curriculum

Who it's for

SOC analysts, threat hunters and incident responders preparing for advanced CyberOps work.

Before you start

• General knowledge of networks
• Cisco CCNP Security certification
• Implementing and Administering Cisco Solutions (CCNA)
• Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)
• Performing CyberOps Using Cisco Security Technologies (CBRCOR)
• Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CyberOps (CBRFIR)