SEC503: Network Monitoring and Threat Detection In-Depth
About This Course
SEC503: Network Monitoring and Threat Detection In-Depth delivers the technical knowledge, insight, and hands-on training you need to confidently defend your network, whether traditional or cloud-based. You will learn about the underlying theory of TCP/IP and the most used application protocols so that you can intelligently examine network traffic to identify emerging threats, perform large-scale correlation for threat hunting, and reconstruct network attacks.
What You'll Learn
• How to analyze traffic traversing your site to avoid becoming another headline
• How to identify zero-day threats for which no network monitoring tool has published signatures
• How to place, customize, and tune your network monitoring for maximum detection
• How to triage network alerts, especially during an incident
• How to reconstruct events to determine what happened, when, and who did it
• Hands-on detection, analysis, and network forensic investigation with a variety of tools
• TCP/IP and common application protocols to gain insight about your network traffic, enabling you to distinguish normal from abnormal traffic
• The benefits and problems inherent in using signature-based network monitoring tools
• The power of behavioral network monitoring tools for enterprise-wide automated correlation, and how to use them effectively
• How to perform effective threat modeling for network activities
• How to translate threat modeling into detection capabilities for zero-day threats
• How to use flow and hybrid traffic analysis frameworks to augment detection in traditional, hybrid, and cloud network environments
Entry Requirements
SEC503 is most appropriate for students who monitor, defend, and conduct threat hunting on their network, including security analysts and those who work in Security Operations Centers, although red team members often tell us that the course also ups their game, especially when it comes to avoiding detection. The hands-on training in SEC503 is intended to be both approachable and challenging for beginners and seasoned veterans. Participants should be proficient in written and spoken English.
There are no minimum entry requirements for years of experience in the domain, education level or age group; but participants should possess the relevant prerequisite skills mentioned above before taking the course.