Training Content

Threat Hunting – The Concept
16 Topics
Concept – Topic 1 – Threat Hunting Basics
Concept – Topic 2 – Defining Hypotheses for Threat Detection
Concept – Topic 3 – Types of Threat Hunting
Concept – Topic 4 – Mapping Attackers
Concept – Topic 5 – Diamond-Shaped Model
Concept – Topic 6 – Threat Hunting Model
Concept – Topic 7 – Maturity Model
Concept – Topic 8 – The Pyramid of Pain
Concept – Topic 9 – The Hunting Loop
Concept – Topic 10 – Threat Intelligence Lifecycle
Concept – Topic 11 – Recording the Hunt
Concept – Topic 12 – The Accuracy Of Data
Concept – Topic 13 – Considering the Outcomes
Concept – Topic 14 – The MaGMA model
Concept – Topic 15 – Focused Hunting applying Threat Intelligence
Concept – Topic 16 – Emulating Attackers
Introduction to Incident Response
7 Topics
Incident Response Concept: Topic 1 – Introduction
Incident Response Concept: Topic 2 – Process
Incident Response Concept: Topic 3 – Preparation
Incident Response Concept: Topic 4 – Detection and Analysis
Incident Response Concept: Topic 5 – Containment, Eradication, and Recovery
Incident Response Concept: Topic 6 – Post-Incident Activity
Verifying SIEM Findings
NIST – The National Institute of Standards and Technology
21 Topics
NIST 800-53: #1 Security and Privacy Controls for Information Systems and Organizations
NIST 800-53: #2 Access Control
NIST 800-53: #3 Awareness and Training
NIST 800-53: #4 Audit and Accountability
NIST 800-53: #5 Assessment, Authorization, and Monitoring
NIST 800-53: #6 Configuration Management
NIST 800-53: #7 Contingency Planning
NIST 800-53: #8 Identification and Authentication
NIST 800-53: #9 Incident Response
NIST 800-53: #10 Maintenance
NIST 800-53: #11 Media Protection
NIST 800-53: #12 Physical And Environmental Protection
NIST 800-53: #13 Planning
NIST 800-53: #14 Program Management
NIST 800-53: #15 Personnel Security
NIST 800-53: #16 Personally Identifiable Information Processing and Transparency (PIIPT)
NIST 800-53: #17 – Risk Assessment
NIST 800-53: #18 – System and Services Acquisition
NIST 800-53: #19 System and Communications Protection
NIST 800-53: #20 System and Information Integrity
NIST 800-53: #21 Supply Chain Risk Management
Intro in Exploitation Of Windows
3 Topics
Windows – Topic 1 – Windows Exploitation
Windows – Topic 2 – Types of Popular vulnerabilities
Windows – Topic 3 – Tooling
Data Privacy
3 Topics
Data Privacy – Topic 1 – Major Concepts
Data Privacy – Topic 2 – Guidelines
Data Privacy – Topic 3 – What Concerning for You?
MITRE ATT&CK Solution
15 Topics
Introduction to MITRE ATT&CK®
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defence Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Impact