Incident Responder — career path

Learn

• PathFollow the CompTIA Security+ (SY0-701) path — the entry certification for every blue-team role

Learn

• CourseBlue Team Boot Camp: Defending Against Hackers 🔒 StationX Unlimited
  6 sections · 60 lectures

  1. Training Overview 2
  2. Section 1: Introduction 3
  3. Section 2: Risk Analysis and Threat Intelligence 6
  4. Section 3: Endpoint Security 26
  5. Section 4: Network Security 13
  6. Section 5: Log Aggregation and Correlation 10
• CourseSOC for Blue Teams 🔒 StationX Unlimited
  11 sections · 21 lectures

  1. Training Overview 2
  2. Section : Introduction to Cyber Defense 2
  3. Section : Understanding Adversary Tactics 2
  4. Section : Roles and Responsibilities in Cyber Operations 1
  5. Section : Cyber Threat Landscape and Frameworks 2
  6. Section : Log Analysis and Threat Detection 2
  7. Section : Introduction to Malware Analysis 3
  8. Section : Malware Analysis Techniques and Tactics 2
  9. Section : Malware Analysis Process 1
  10. Section : Network and File-Based Malware Analysis 3
  11. Audio Version of Training 1

Practise

• Labs+Security Operations Practitioner — 15 labs 🔒 StationX Labs+
  • Design, Defend, and Respond Across an End-to-End Security Architecture [Expert]
  • Enforce Segmentation and Approved Access Paths [Guided]
  • Establish a Windows Hardening and Security Logging Baseline [Guided]
  • Establish centralized logging by onboarding hosts and validating monitoring readiness [Guided]
  • Govern, Detect, Hunt, and Respond Through an Integrated Security Operations Sprint [Advanced]
  • Governance and Compliance Evidence Collection [Guided]
  • Harden a JumpBox for Secure Administration [Guided]
  • Hunt Threats Using Intelligence and Rule-Based Detection [Guided]
  • Implement TLS and Certificate Controls for a Service [Guided]
  • Integrated Hardening Sprint A: Segment, Harden, and Secure Services [Advanced]
  • Prioritize Risks and Implement One Remediation [Guided]
  • Reduce DVWA Exposure by Using Compensating Controls [Guided]
  • Secure Privileged Access and Auditing in Active Directory [Guided]
  • Threat Modeling to Controls: Identify Risks and Implement Mitigations [Guided]
  • Triage, Contain, and Automate Incident Response [Guided]

Learn

• PathFollow the CompTIA CySA+ (CS0-003) path — the incident-response, SIEM and vulnerability-management labs live on this path

Learn

• CourseDigital Forensics for Pentesters - Hands-on Learning 🔒 StationX Unlimited
  18 sections · 67 lectures

  1. Training Overview 2
  2. Course Overview 1
  3. Building Your Forensics Lab Environment Using VirtualBox 6
  4. New Course Content 6
  5. Troubleshooting VirtualBox 2
  6. Introduction to Autopsy 4
  7. Kali forensic Mode 4
  8. CSI Linux Investigator 3
  9. Digital Forensics Case Management 1
  10. Open-source intelligence (OSINT) 3
  11. Using Shodan to Search for Vulnerable devices 3
  12. Computer Forensics 9
  13. Reverse Engineering and Malware Analysis 5
  14. Malware Hunting with Sysinternal Tools 3
  15. Stenography 2
  16. Network forensics Using Wireshark 7
  17. Practice What You learned 5
  18. Audio Version of Training 1
• CourseMaster Wireshark 3 in 5 Days 🔒 StationX Unlimited
  6 sections · 34 lectures

  1. Training Overview 2
  2. Day One 3
  3. Day Two 8
  4. Day Three 7
  5. Day Four 7
  6. Day Five 7

Practise

• LabsNetwork Forensics — 15 labs 🔒 StationX Unlimited
  • Analyze Browser-based Heap Spray Attack
  • Automated in-Depth Packet Decoding
  • Clonezilla_Network
  • Identifying Intrusion and Mitigating Attacks with RHEL Server
  • Identifying Malicious Callbacks
  • Identifying Malicious Network Connections
  • Incident Detection and Identification
  • Nexpose: Analysis & Reporting (Executive, High Risk and Recommendation Reporting)
  • Parse Files Out of Network Traffic
  • Searching for Indicators of Compromise
  • Setting up Filters and Queries in Kibana
  • Use pfTop to Analyze Network Traffic
  • Verify Attributes of Identified SilentBanker Intrusion
  • Verify Attributes of Intrusion Through Additional Analysis
  • Windows Event Log Manipulation via Windows Event Viewer
• LabsForensic Investigations and Evidence Handling — 13 labs 🔒 StationX Unlimited
  • Analyze Packed Executable to Identify Attack Vector and Payload
  • Analyze and Update a Company BCP/BIA/DRP/CIRP
  • BCP DRP and Test Planning
  • Creating a Case in Autopsy
  • Creating a Case in OSF
  • Creation of BCP and DRP
  • FTK Analysis & Reporting
  • FTK Enterprise Fundamentals and Mobile Investigation
  • Metadata Extraction Lab
  • Open Source Password Cracking
  • Password Cracking with PRTK
  • Registry Analysis
  • Virtualization

Learn

• CourseIntroduction to Malware Analysis for Incident Responders 🔒 StationX Unlimited
  7 sections · 24 lectures

  1. Training Overview 2
  2. Introduction 1
  3. Malware Concepts: Building a solid foundation upon which to learn 4
  4. Malware Analysis: Foundational concepts before begin working with malware 3
  5. Setting Up the Analysis Environment (FlareVM) 5
  6. Conducting the Analysis 8
  7. Conclusion 1

Practise

• LabsMalware Analysis & Reverse Engineering — 18 labs 🔒 StationX Unlimited
  • Advanced Techniques for Malware Recovery
  • Analysis and Recommendation Report
  • Analyze DoomJuice Infection to Identify Attack Vector and Payload
  • Analyze Malicious Activity in Memory Using Volatility
  • Analyze and Classify Malware
  • Conduct Root Cause Analysis for System Crashes
  • Detect Embedded Shellcode in a Microsoft Office Document
  • Dynamic Malware Analysis
  • Fundamentals of Malware Analysis
  • Linux Analysis
  • Log Analysis
  • MAC Analysis
  • Practical Malware Analysis Labs
  • Recover from Incident
  • Remove Trojan
  • Reverse Engineering Malware
  • RootKit
  • Validate Indications of Compromise: Analysis of PE File

Learn

• CourseBuild Security Incident Response for GDPR Data Protection 🔒 StationX Unlimited
  11 sections · 84 lectures

  1. Section 1: Introduction 4
  2. Section 2: Incident Response in CyberSecurity 8
  3. Section 3: Building a Security Operations Center (SOC) 7
  4. Section 4: GDPR and Incident Response 6
  5. Section 5: GDPR Incident Response Methodologies (IRM) 15
  6. Section 6: Incident Response Tools for GDPR compliance - free vs enterprise 3
  7. Section 7: Banking challenges related to cyber risk 7
  8. Section 8: Financial Malware history with examples 15
  9. Section 9: Making a business case for Financial Malware 11
  10. Section 10: Some simple hacking attempts - demo 7
  11. Section 11: Conclusion 1