Learners will learn how to:

• Recognize common methodologies for end-to-end attack chains (MITRE ATT&CK® framework)
• Conduct guided audits of compromised systems across multiple operating systems
• Use a SIEM to identify and assess an attack as it unfolds live

• The OSDA Exam Scheduling Open Now
• The SOC-200 course prepares you for the OSDA certification
• Proctored
• Learn more about the exam

• Job roles like: Security Operations Center (SOC) Tier 1, Tier 2 and Tier 3 Analysts, Jr. roles in Threat Hunting and Threat Intelligence Analysts, Jr. roles in Digital Forensics and Incident Response (DFIR)
• Anyone interested in detection and security operations, and/or committed to the defense or security of enterprise networks

This course covers the following Topics.

• Attacker Methodology Introduction
• Windows Endpoint Introduction
• Windows Server Side Attacks
• Windows Client-Side Attacks
• Windows Privilege Escalation
• Windows Persistence
• Linux Endpoint Introduction
• Linux Server Side Attacks
• Network Detections
• Antivirus Alerts and Evasion
• Network Evasion and Tunneling
• Active Directory Enumeration
• Windows Lateral Movement
• Active Directory Persistence
• SIEM Part One: Intro to ELK
• SIEM Part Two: Combining the Logs
• Exam