CyberSec First Responder

5 Days

Intermediate

Kuala Lumpur, Johor Bharu

Program Overview

This course covers network defense and incident response methods, tactics, and procedures that are in alignment with industry frameworks such as NIST 800-61r2 (Computer Security Incident Handling Guide), US-CERT’s National Cyber Incident Response Plan (NCIRP), and Presidential Policy Directive (PPD)-41 on Cyber Incident Coordination, NIST 800.171r2 (Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations).

It is ideal for candidates who have been tasked with the responsibility of monitoring and detecting security incidents in information systems and networks, and for executing standardized responses to such incidents.

The course introduces tools, tactics, and procedures to manage cybersecurity risks, defend cybersecurity assets, identify various types of common threats, evaluate the organization’s security, collect and analyze cybersecurity intelligence, and remediate and report incidents as they occur. This course provides a comprehensive methodology for individuals responsible for defending the cybersecurity of their organization.

This course is designed to assist students in preparing for the CertNexus CyberSec First Responder (Exam CFR-410) certification examination. What you learn and practice in this course can be a significant part of your preparation. In addition, this course and subsequent certification (CFR-410) meet all requirements for personnel requiring DoD directive 8570.01-M position certification baselines:

• CSSP Analyst
• CSSP Infrastructure Support
• CSSP Incident Responder
• CSSP Auditor

Programme Module

Assessing Information Security Risk

Analyzing the Threat Landscape

Analyzing Reconnaissance Threats to Computing and Network Environments

Analyzing Attacks on Computing and Network Environments

Analyzing Post-Attack Techniques

Assesing the Organization’s Security Posture

Collecting Cybersecurity Intelligence

Analyzing Log Data

Performing Active Asset and Network Analysis

Responding to Cybersecurity Incidents

Investigating Cybersecurity Incidents

Programme Objectives

In this course, you will identify, assess, respond to, and protect against security threats and operate a system and network security analysis platform. You will:

Assess cybersecurity risks to the organization
Analyze the threat landscape
Analyze various reconnaissance threats to computing and network environments
Analyze various attacks on computing and network environments
Analyze various post-attack techniques
Assess the organization’s security posture through auditing, vulnerability management, and penetration testing
Collect cybersecurity intelligence from various network-based and host-based sources
Analyze log data to reveal evidence of threats and incidents
Perform active asset and network analysis to detect incidents
Respond to cybersecurity incidents using containment, mitigation, and recovery tactics
Investigate cybersecurity incidents using forensic analysis techniques

Who Should Attend

Cybersecurity Analysts (Intermediate level)
SOC Analysts (Security Operations Center) staff
Incident Response Specialists
Network Security Engineers
IT Security Practitioners
Threat Intelligence Analysts
System Administrators moving into cybersecurity
Penetration Testing / Blue Team beginners transitioning to incident response
Professionals working in defensive cybersecurity operations (DCO)
Anyone preparing for CertNexus CFR-410 (CyberSec First Responder) certification
Security professionals involved in threat detection, incident response, and digital forensics

Secure your spot today

Get Certified
– Enroll Now

Speak to a consultant and get clarity before you sign up.