Masterclass: Incident Response in the Cloud
- Código del Curso IRC
- Duración 4 días
Otros Métodos de Impartición
Salta a:
Método de Impartición
Este curso está disponible en los siguientes formatos:
-
Aprendizaje Virtual
Aprendizaje virtual
Solicitar este curso en un formato de entrega diferente.
Temario
Parte superiorVirtual Learning
This interactive training can be taken from any location, your office or home and is delivered by a trainer. This training does not have any delegates in the class with the instructor, since all delegates are virtually connected. Virtual delegates do not travel to this course, Global Knowledge will send you all the information needed before the start of the course and you can test the logins.
Calendario
Parte superiorDirigido a
Parte superiorThe course is perfect for security architects, Entra ID administrators, security administrators, and security auditors.
Enterprise administrators, infrastructure architects, security professionals, systems engineers, network administrators, IT professionals, security consultants and other people responsible for implementing network and perimeter security.
Objetivos del Curso
Parte superiorContenido
Parte superiorModule Two: Deep Dive into Entra ID and Governance
Module Three: Core Controls, Benchmarks, and Logging
Module Four: Reconnaissance and Initial Access
Module Five: Infrastructure and Network Attacks
Module Six: Execution and Privilege Escalation
Module Seven: Advanced Identity Attacks and Credential Access
Module Eight: Persistence Technique
Module Nine: Exfiltration and Impact
Module Ten: KQL for Incident Response
Module Eleven: Advanced Hunting and Detection
Module Twelve: Graph API for Incident Response
Module Thirteen: Responding to Azure Attacks (NIST)
Module Fourteen: Remediation and Strategic Hardening
Module Fifteen: Advanced and Strategic Best Practices
Pre-requisitos
Parte superior- To attend this training, you should have a good hands-on experience in administering Windows infrastructure. At least 5 years in the field is recommended. All attendees should have experience with Active Directory Domain Services (AD DS) administration.
Certificación de Prueba
Parte superior- After completing the course, participants will receive a CQURE Certificate of Completion and will also be eligible for CPE points.
