Course title

Network Security Monitoring Cyber Operator

Perform full-spectrum threat detection and hunting using Elastic and other open source tools.

Course summary

This instructor-led course is designed for operators that serve or are interested in serving as the “human-in-the-loop” to a suite of cybersecurity tools. While focused primarily on the best of breed open source security tools, the knowledge gained aims to be tool agnostic. You  will learn to use the Elastic Stack along with security tools like Zeek (formerly Bro) and Suricata to perform full-spectrum threat detection and hunting. The course ends with a guided hunt capstone containing multiple scenarios — both as an individual hunter and as part of a team — that will engage the newly learned skills to find the adversary in the traffic.

Download Outline

Topics

  • Introduction to packet analysis
  • Protocol analysis with Zeek
  • Intrusion detection systems (IDS)
  • Kibana UI for security
  • Assisted hunt

Topics

Audience

Duration

Pre-Reqs

Requirements

See full, ,Private Network Security Monitoring Cyber Operator, ,schedule

Private Only

This course is only offered privately. Please contact your sales representative or email us at sales@elastic.co to schedule a training.