07-Incident Management Service – Cyber Warfare Academy

Course Content

Expand All

Incident Response

SOAR Playbooks 25 Topics

Expand

Lesson Content

0% Complete 0/25 Steps

Denial of Service

Improper Disposal of Confidential Documents

Lost / Stolen Laptop

Lost or Stolen Smart Device

Lost or Stolen Storage Device

IR Playbook – Suspected System Intrusion

IR Playbook – Suspected Insider Threat

IR Playbook – Third Party Breach

Privileged Account Creation

Port Scan Activity

Denial of Service

Web Application Compromise

Unauthorised Network Activity

Suspicious Network Activity

System Probes & Scanning

Communication with a Known Bad

1 of 2

Forensic Tools 5 Topics

Expand

Lesson Content

0% Complete 0/5 Steps

Forensic Tools Categorization

Proprietary Forensics Tools for Microsoft Windows

Unix-based Free & Open Source Forensics Tools

Forensic Operating System (OS) Distributions

Forensic Workstation

Forensic Analysis Sub-Service

Digital Forensics 5 Topics

Expand

Lesson Content

0% Complete 0/5 Steps

Forensic Process Guidelines

Forensic Grab Bag

Sample Forensic Analysis Methodology

Evidence Acquisition

Incident Response 4 Topics

Expand

Lesson Content

0% Complete 0/4 Steps

Incident Classification Model

Priority Classifications

Incident Reporting

Malware Analysis Sub-Service

Attack Scenarios Framework 22 Topics

Expand

Lesson Content

0% Complete 0/22 Steps

Exercise 1.1: Exploring Suspicious Executable Detected using SIEM

Exercise 1.2: Investigating Multiple Failed Logins using SIEM

Exercise 3: Mitigating Risk

Exercise 4.1: Asking the Right Questions

Scenario 4.1: Asking the Right Questions

Scenario 4.2: Suspicious or Malicious?

Exercise 4.2: Reviewing the Shift Log

Exercise 4.3: Investigating an Unauthorized Login Attempt

Exercise 4.4: Investigating Firewall Traffic

Exercise 4.5: Reviewing the Cyber Warfare Mailbox

Exercise 5.1: Reviewing New Intelligence

Exercise 5.2: Assessing Threat Severity

Exercise 6: Recommending Remediation

Exercise 7: Conducting a Post-Incident Review

Exercise 8: Communicating with Operations and Senior Management

Role Playing – Shift Manager

Demonstrating: Investigating and Escalating

Roles in Table Top Excercise (TTX)

TTX Introduction

Compromised Active Directory Server

1 of 2

Purple Team Sub-Service

Malware Analysis 3 Topics

Expand

Lesson Content

0% Complete 0/3 Steps

Malware Analysis Reverse Engineering Methodology

Sample Malware Tool List

Report from Malware Analyst

About Instructor

Webmaster

35 Courses