Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity (CBRTHD)
- Duration: 5 days (40 hours)
- Date: on request
Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity (CBRTHD)
This course will help:
- Gain knowledge and skills in proactive threat hunting across networks, endpoints, and datasets to identify malicious, suspicious, and risky activities that may evade existing security controls.
- Study the core concepts, methods, and processes used in threat investigations and threat hunting operations.
- Explore the capabilities of a wide range of Cisco cybersecurity products and platforms, as well as partner solutions, for threat analysis and defense.
- Prepare for the 300-220 CBRTHD exam
Course syllabus:
- Threat Hunting Theory
- Threat Hunting Concepts, Frameworks, and Threat Models
- Threat Hunting Process Fundamentals
- Threat Hunting Methodologies and Procedures
- Network-Based Threat Hunting
- Endpoint-Based Threat Hunting
- Endpoint-Based Threat Detection Development
- Threat Hunting with Cisco Tools
- Threat Hunting Investigation Summary: A Practical Approach
- Reporting the Aftermath of a Threat Hunt Investigation
You will learn:
- Define threat hunting and identify core concepts used to conduct threat hunting investigations
- Examine threat hunting investigation concepts, frameworks, and threat models
- Define cyber threat hunting process fundamentals
- Define threat hunting methodologies and procedures
- Describe network-based threat hunting
- Identify and review endpoint-based threat hunting
- Identify and review endpoint memory-based threats and develop endpoint-based threat detection
- Define threat hunting methods, processes, and Cisco tools that can be utilized for threat hunting
- Describe the process of threat hunting from a practical perspective
- Describe the process of threat hunt reporting
Pre-requisites:
To successfully complete this course, participants are recommended to have the following knowledge and skills:
General knowledge of networking and network security
The recommended skills can be acquired through the following Cisco training courses:
- Implementing and Administering Cisco Solutions (CCNA)
- Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)
- Performing CyberOps Using Cisco Security Technologies (CBRCOR)
Sign up for a course Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity (CBRTHD)