Threatspace Capstone Exercise (Synchronous E-Learning)
About This Course
Responding to real-world threats — without the real-world consequences.
ThreatSpace is a technology-enabled service that allows an organization to assess and develop its security team’s ability to respond to real-world threats in a consequence-free environment. Using a virtualized environment that simulates typical IT infrastructure with network segments, workstations, and servers, teams use ThreatSpace to assess their technical capabilities, processes, and procedures as they investigate simulated attack scenarios over a three-day engagement.
The scenarios, based on Mandiant’s extensive incident response experience responding to thousands of breaches, include the latest adversary tactics, techniques, and procedures (TTPs) and test an organization’s ability to detect, scope and remediate a targeted attack. Throughout the process Mandiant incident response and intel experts provide real-time feedback and coaching to help improve response. Our analysis-focused and technology-agnostic approach tests a security team’s ability to identify and prioritize systems and forensic artifacts.
Working as a seamless, scalable extension of a security operations center, ThreatSpace offers a single platform that blends innovative security technologies, nation state grade threat intelligence, and world-renowned Mandiant consulting. With this approach, we eliminate the complexity and burden of cyber security for organizations struggling to prepare for, prevent and respond to cyber-attacks.
Learners will receive lessons on critical thinking and communication and then focus on hands-on scenario investigations of a simulated attack that progresses through the phases of the attack lifecycle. Mandiant incident responders provide real-time feedback, instruction and coaching to incident responders and cyber threat analysts throughout the engagement with periodic strategic pauses used to create an executive debrief that will be presented at the end of each day.
What You'll Learn
• Perform triage and in-depth analysis of an affected enterprise network
• Effectively structure and organize a response team across multiple disciplines
• Identify malicious behaviour and create useful timelines of activity
Entry Requirements
Open to all unemployed or employed Singaporeans and Singapore Permanent Residents who are looking for training opportunities to transit to a new sector or job role. Applicants must be committed to completing training and passing assessments.
Applicants should:
- Possess a Minimum Diploma in ICT or equivalent certification
- Possess a positive attitude and apply the new skill they have gained back in their workplace
- Have at least 3 years of working experience in relevant roles
- Have obtained a diploma and above academic qualification
- Be able to operate a computer or laptop to perform basic tasks
- Applicants who do not meet these recommended requirements may be considered on a case-by-case basis