CFR: Threat Detection and Response (Exam CFR-210) Advanced Diploma

COURSE CURRICULUM

Overview of Wireless Communications

• Identify the Importance of Risk Management
• Assess Risk
• Mitigate Risk
• Integrate Documentation into Risk Management

Analyzing the Threat Landscape

• Classify Threats and Threat Profiles
• Perform Ongoing Threat Research
• Resources that Aid in Research of Threats

Analyzing Recon Threats to Computing and Network Environments

• Implement Threat Modeling
• Assess the Impact of Reconnaissance Incidents
• Performing Reconnaissance on a Network
• Examining Reconnaissance Incidents
• Assess the Impact of Social Engineering
• Assessing the impact of Social Engineering
• Assessing the Impact of Phishing

Analyzing Attacks on Computing and Network Environments

• Assess the Impact of System Hacking Attacks
• Cracking Passwords Using a Password File
• Assess the Impact of Web Based Attacks
• Assessing the Impact of Web-Based Threats
• Assess the Impact of Malware
• Malware Detection and Removal
• Assess the Impact of Hijacking and Impersonation Attacks
• Assess the Impact of DoS Incidents
• Assessing the Impact of DoS Attacks
• Assess the Impact of Threats to Mobile Security
• Assess the Impact of Threats to Cloud Security

Analyzing Post-Attack Techniques

• Assess Command and Control Techniques
• Assessing Command and Control Techniques
• Assess Persistence Techniques
• Detecting Rootkits
• Assess Lateral Movement and Pivoting Techniques
• Assess Data Exfiltration Techniques
• Steganography
• Assess Anti Forensics Techniques
• Assessing Anti-Forensics

Evaluating the Organization’s Security Posture

• Conduct Vulnerability Assessments
• Perform a Vulnerability Scan with Nessus
• Perform a Vulnerability Scan with MBSA
• Conduct Penetration Tests on Network Assets
• Follow Up on Penetration Testing

Collecting Cyber security Intelligence

• Deploy a Security Intelligence Collection and Analysis Platform
• Collect Data from Network Based Intelligence Sources
• Collecting Network-Based Security Intelligence
• Collect Data from Host Based Intelligence Sources
• Collecting Host-Based Security Intelligence
• Parsing Log files

Analyzing Log Data

• Use Common Tools to Analyze Logs
• Analyzing Linux Logs for Security Intelligence
• Use SIEM Tools for Analysis
• Incorporating SIEMs into Security Intelligence Analysis
• Parse Log Files with Regular Expressions

Performing Active Asset and Network Analysis

• Analyze Incidents with Windows-Based Tools
• Windows-Based Incident Analysis Tools
• Analyze Incidents with Linux Based Tools
• Analyze Incidents with Linux-Based Tools – Demo 01
• Analyze Malware
• Analyze Malware
• Analyze Indicators of Compromise – Part 1
• Analyze Indicators of Compromise – Part 2

Responding to Cyber security Incidents

• Deploy an Incident Handling and Response Architecture
• Mitigate Incidents
• Hardening Windows Servers
• DNS Filtering
• Blacklisting and Whitelisting
• Prepare for Forensic Investigation as a CSIRT

Investigating Cyber security Incidents

• Apply a Forensic Investigation Plan
• Securely Collect and Analyze Electronic Evidence
• Securely Collecting Electronic Evidence
• Analyzing Forensic Evidence
• Follow Up on the Results of an Investigation

• Mock Exam – CFR: Threat Detection and Response (Exam CFR-210) Advanced Diploma

• Final Exam – CFR: Threat Detection and Response (Exam CFR-210) Advanced Diploma