CBROPS - Understanding Cisco Cybersecurity Operations Fundamentals v1.2

Defining the Security Operations Center

Understanding SOC Metrics

Understanding SOC Workflow and Automation

Understanding Windows Operating System Basics (Self-Study)

Understanding Linux Operating System Basics (Self-Study)

Understanding Endpoint Security Technologies

Understanding Network Infrastructure and Network Security Monitoring Tools

Understanding Common TCP/IP Attacks

Exploring Data Type Categories

Understanding Basic Cryptography Concepts

Cloud Security Fundamentals

Securing Cloud Deployments

Understanding Incident Analysis in a Threat-Centric SOC

Identifying Common Attack Vectors

Identifying Malicious Activity

Identifying Patterns of Suspicious Behavior

Identifying Resources for Hunting Cyber Threats

Understanding Event Correlation and Normalization

Conducting Security Incident Investigations

Using a Playbook Model to Organize Security Monitoring

Describing Incident Response

Labs

• Discovery Lab 1: Use NSM Tools to Analyze Data Categories
• Discovery Lab 2: Explore Cryptographic Technologies
• Discovery Lab 3: Explore TCP/IP Attacks
• Discovery Lab 4: Explore Endpoint Security
• Discovery Lab 5: Investigate Hacker Methodology
• Discovery Lab 6: Hunt Malicious Traffic
• Discovery Lab 7: Correlate Event Logs, PCAPs, and Alerts of an Attack
• Discovery Lab 8: Investigate Browser-Based Attacks
• Discovery Lab 9: Analyze Suspicious DNS Activity
• Discovery Lab 10: Explore Security Data for Analysis
• Discovery Lab 11: Investigate Suspicious Activity Using Security Onion
• Discovery Lab 12: Investigate Advanced Persistent Threats
• Discovery Lab 13: Explore SOC Playbooks
• Discovery Lab 14: Explore the Windows Operating System
• Discovery Lab 15: Explore the Linux Operating System