Tfip – Cybersecurity Capstone Project

As part of the real-world attack-based capstone project, this 5-days course will facilitate learners to acquire in-depth hands-on knowledge on the following necessary traits of a cybersecurity analyst:

• Conduct penetration/ attacks on enterprise network and correlate the logs and alerts generated.
• MITRE ATT&CK Framework and will be able to identify attacker techniques, tactics, and procedures (TTP) to investigate on indicators of compromise (IOCs) and provide automated / manual responses to eliminate the attack/incident.
• Monitor and triage alerts generated based on various log sources. Ex: IDS/IPS, AV, EDR, Firewall, Network Monitoring applications, etc.
• Investigate various attack alerts generated from endpoints, servers, and websites using multiple forensic investigations tools
• Conduct root cause analysis on the incidents and document all the evidences
• Provide instant responses using manual and automated playbooks
• Generate in-depth Incident response report with all evidences captured during analysis and investigation.

What You'll Learn

This capstone project exposes attendees to a real-world enterprise infrastructure for them to validate the security of the infrastructure and safely exploit the network and systems with the same tools used by the hackers to identify the vulnerabilities before a hacker would do. Also learn ways to harden the network and systems thus securing the corporate network and systems. This capstone project also exposes attendees to real-world SOC environment with alerts generated based on attacks that needs to be analysed and triaged, investigate, document evidence, and determine the root cause of the attack, provide responses, and generate a detailed incident response report. To be a successful cybersecurity analyst, it's imperative to understand different attack types and how an attacker would deploy these attacks on an enterprise, therefore, attendees will also be provided with an enterprise network to simulate and perform a penetration test activity and also learn from the alerts and logs created during the activity.

Minimum Entry Requirement

We recommend that attendees of this course have attended cybersecurity Networking and security basic courses.