Cisco-Ausbildung

Insoft Services ist einer der wenigen Schulungsanbieter in EMEAR, der ein umfassendes Angebot an Cisco-Zertifizierungen und spezialisierten Technologieschulungen anbietet.

Lesen Sie mehr

Cisco Zertifizierungen

Erleben Sie einen Blended-Learning-Ansatz, der das Beste aus von Lehrern geleiteten Schulungen und E-Learning zum Selbststudium kombiniert, um sich auf Ihre Zertifizierungsprüfung vorzubereiten.

Lesen Sie mehr

Cisco Learning Credits

Cisco Learning Credits (CLCs) sind Prepaid-Schulungsgutscheine, die direkt bei Cisco eingelöst werden und die Planung für Ihren Erfolg beim Kauf von Cisco-Produkten und -Services erleichtern.

Lösen Sie Ihre CLCs ein

Cisco Continuing Education

Das Cisco Continuing Education Program bietet allen aktiven Zertifizierungsinhabern flexible Optionen zur Rezertifizierung, indem sie eine Vielzahl von in Frage kommenden Schulungselementen absolvieren.

Lesen Sie mehr

Cisco Digital Learning

Zertifizierte Mitarbeiter sind GESCHÄTZTE Vermögenswerte. Erkunden Sie die offizielle Digital Learning Library von Cisco, um sich durch aufgezeichnete Sitzungen weiterzubilden.

CDLL-Katalog

Cisco Business Enablement

Das Cisco Business Enablement Partner Program konzentriert sich auf die Verbesserung der Geschäftsfähigkeiten von Cisco Channel Partnern und Kunden.

Lesen Sie mehr

Cisco Schulungskatalog

Lesen Sie mehr

Technische Zertifizierung

Das Fortinet Network Security Expert (NSE) -Programm ist ein achtstufiges Schulungs- und Zertifizierungsprogramm, um Ingenieuren ihre Netzwerksicherheit für Fortinet FW-Fähigkeiten und -Erfahrungen beizubringen.

Technische Kurse

Fortinet-Ausbildung

Insoft ist als Fortinet Authorized Training Center an ausgewählten Standorten in EMEA anerkannt.

Lesen Sie mehr

Fortinet Schulungskatalog

Lesen Sie mehr

ATC Status

Überprüfen Sie unseren ATC-Status in ausgewählten Ländern in Europa.

Lesen Sie mehr

Fortinet Service-Pakete

Insoft Services hat eine spezielle Lösung entwickelt, um den Prozess der Installation oder Migration zu Fortinet-Produkten zu rationalisieren und zu vereinfachen.

Lesen Sie mehr

Microsoft-Ausbildung

Insoft Services bietet Microsoft-Schulungen in EMEAR an. Wir bieten technische Schulungen und Zertifizierungskurse von Microsoft an, die von erstklassigen Instruktoren geleitet werden.

Technische Kurse

Extreme-Ausbildung

Erfahren Sie außergewöhnliche Kenntnisse und Fähigkeiten von Extreme Networks.

Technische Kurse

Technische Zertifizierung

Wir bieten einen umfassenden Lehrplan für technische Kompetenzen zur Zertifizierung an.

Lesen Sie mehr

Extreme Schulungskatalog

Hier finden Sie alle Extreme Networks online und den von Lehrern geleiteten Kalender für den Klassenraum.

Lesen Sie mehr

ATP-Akkreditierung

Als autorisierter Schulungspartner (ATP) stellt Insoft Services sicher, dass Sie die höchsten verfügbaren Bildungsstandards erhalten.

Lesen Sie mehr

Lösungen & Dienstleistungen

Wir bieten innovative und fortschrittliche Unterstützung bei der Konzeption, Implementierung und Optimierung von IT-Lösungen. Unsere Kundenbasis umfasst einige der größten Telcos weltweit.

Beratungspakete

Ein weltweit anerkanntes Team von zertifizierten Experten unterstützt Sie bei einem reibungsloseren Übergang mit unseren vordefinierten Beratungs-, Installations- und Migrationspaketen für eine breite Palette von Fortinet-Produkten.

Über uns

Insoft bietet autorisierte Schulungs- und Beratungsdienstleistungen für ausgewählte IP-Anbieter. Erfahren Sie, wie wir die Branche revolutionieren.

Lesen Sie mehr
  • +49 6151 277 6496
  • CBRCOR v1.0 - Performing CyberOps Using Cisco Security Technologies

    Duration
    5 Tage
    Delivery
    (Online Und Vor Ort)
    Price
    Preis auf Anfrage
      

    40 excl. VAT

    The Performing CyberOps Using Cisco Security Technologies (CBRCOR) v1.0 course guides you through cybersecurity operations fundamentals, methods, and automation. The knowledge you gain in this course will prepare you for the role of Information Security Analyst on a Security Operations Center (SOC) team. You will learn foundational concepts and their application in real-world scenarios, and how to leverage playbooks in formulating an Incident Response (IR). The course teaches you how to use automation for security using cloud platforms and a SecDevOps methodology. You will learn the techniques for detecting cyberattacks, analyzing threats, and making appropriate recommendations to improve cybersecurity.

     

    This course also earns you 30 Continuing Education (CE) credits towards recertification and prepares you for the 350-201 CBRCOR core exam.

     

    This course will help you:

    • Gain an advanced understanding of the tasks involved for senior-level roles in a security operations center
    • Configure common tools and platforms used by security operation teams via practical application
    • Prepare you to respond like a hacker in real-life attack scenarios and submit recommendations to senior management
    • Prepare for the 350-201 CBRCOR core exam
    • Earn 30 CE credits toward recertification

     

    What to expect in the exam

    350-201 Performing CyberOps Using Cisco Security Technologies (CBRCOR) is a 120-minute exam associated with the Cisco CyberOps Professional Certification. The multiple-choice format tests knowledge of core cybersecurity operations including cybersecurity fundamentals, techniques, policies, processes, and automation. The exam will test for knowledge in the following areas:

    • Monitoring for cyberattacks
    • Analyzing high volume of data using automation tools and platforms—both open source and commercial
    • Accurately identifying the nature of attack and formulate a mitigation plan
    • Scenario-based questions; for example, using a screenshot of output from a tool, you may be asked to interpret portions of output and establish conclusions

    After taking this course, you should be able to:

    • Describe the types of service coverage within a SOC and operational responsibilities associated with each.
    • Compare security operations considerations of cloud platforms.
    • Describe the general methodologies of SOC platforms development, management, and automation.
    • Explain asset segmentation, segregation, network segmentation, micro-segmentation, and approaches to each, as part of asset controls and protections.
    • Describe Zero Trust and associated approaches, as part of asset controls and protections.
    • Perform incident investigations using Security Information and Event Management (SIEM) and/or security orchestration and automation (SOAR) in the SOC.
    • Use different types of core security technology platforms for security monitoring, investigation, and response.
    • Describe the DevOps and SecDevOps processes.
    • Explain the common data formats, for example, JavaScript Object Notation (JSON), HTML, XML, Comma-Separated Values (CSV).
    • Describe API authentication mechanisms.
    • Analyze the approach and strategies of threat detection, during monitoring, investigation, and response.
    • Determine known Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
    • Interpret the sequence of events during an attack based on analysis of traffic patterns.
    • Describe the different security tools and their limitations for network analysis (for example, packet capture tools, traffic analysis tools, network log analysis tools).
    • Analyze anomalous user and entity behavior (UEBA).
    • Perform proactive threat hunting following best practices.
    • Understanding Risk Management and SOC Operations
    • Understanding Analytical Processes and Playbooks
    • Investigating Packet Captures, Logs, and Traffic Analysis
    • Investigating Endpoint and Appliance Logs
    • Understanding Cloud Service Model Security Responsibilities
    • Understanding Enterprise Environment Assets
    • Implementing Threat Tuning
    • Threat Research and Threat Intelligence Practices
    • Understanding APIs
    • Understanding SOC Development and Deployment Models
    • Performing Security Analytics and Reports in a SOC
    • Malware Forensics Basics
    • Threat Hunting Basics
    • Performing Incident Investigation and Response

     

    Lab outline

    • Explore Cisco SecureX Orchestration
    • Explore Splunk Phantom Playbooks
    • Examine Cisco Firepower Packet Captures and PCAP Analysis
    • Validate an Attack and Determine the Incident Response
    • Submit a Malicious File to Cisco Threat Grid for Analysis
    • Endpoint-Based Attack Scenario Referencing MITRE ATTACK
    • Evaluate Assets in a Typical Enterprise Environment
    • Explore Cisco Firepower NGFW Access Control Policy and Snort Rules
    • Investigate IOCs from Cisco Talos Blog Using Cisco SecureX
    • Explore the ThreatConnect Threat Intelligence Platform
    • Track the TTPs of a Successful Attack Using a TIP
    • Query Cisco Umbrella Using Postman API Client
    • Fix a Python API Script
    • Create Bash Basic Scripts
    • Reverse Engineer Malware
    • Perform Threat Hunting
    • Conduct an Incident Response

     

    Although there are no mandatory prerequisites, the course is particularly suited for the following audiences:

    • Cybersecurity engineer
    • Cybersecurity investigator
    • Incident manager
    • Incident responder
    • Network engineer
    • SOC analysts currently functioning at entry level with a minimum of 1 year of experience

     

    Although there are no mandatory prerequisites, to fully benefit from this course, you should have the following knowledge:

    • Familiarity with UNIX/Linux shells (bash, csh) and shell commands
    • Familiarity with the Splunk search and navigation functions
    • Basic understanding of scripting using one or more of Python, JavaScript, PHP or similar.

     

    Recommended Cisco offerings that may help you prepare for this course:

    • Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)
    • Implementing and Administering Cisco Solutions (CCNA)

     

    Recommended third-party resources:

    • Splunk Fundamentals 1
    • Blue Team Handbook: Incident Response Edition by Don Murdoch
    • Threat Modeling- Designing for Security y Adam Shostack
    • Red Team Field Manual by Ben Clark
    • Blue Team Field Manual by Alan J White
    • Purple Team Field Manual by Tim Bryant
    • Applied Network Security and Monitoring by Chris Sanders and Jason Smith

     

    The Performing CyberOps Using Cisco Security Technologies (CBRCOR) v1.0 course guides you through cybersecurity operations fundamentals, methods, and automation. The knowledge you gain in this course will prepare you for the role of Information Security Analyst on a Security Operations Center (SOC) team. You will learn foundational concepts and their application in real-world scenarios, and how to leverage playbooks in formulating an Incident Response (IR). The course teaches you how to use automation for security using cloud platforms and a SecDevOps methodology. You will learn the techniques for detecting cyberattacks, analyzing threats, and making appropriate recommendations to improve cybersecurity.

     

    This course also earns you 30 Continuing Education (CE) credits towards recertification and prepares you for the 350-201 CBRCOR core exam.

     

    This course will help you:

    • Gain an advanced understanding of the tasks involved for senior-level roles in a security operations center
    • Configure common tools and platforms used by security operation teams via practical application
    • Prepare you to respond like a hacker in real-life attack scenarios and submit recommendations to senior management
    • Prepare for the 350-201 CBRCOR core exam
    • Earn 30 CE credits toward recertification

     

    What to expect in the exam

    350-201 Performing CyberOps Using Cisco Security Technologies (CBRCOR) is a 120-minute exam associated with the Cisco CyberOps Professional Certification. The multiple-choice format tests knowledge of core cybersecurity operations including cybersecurity fundamentals, techniques, policies, processes, and automation. The exam will test for knowledge in the following areas:

    • Monitoring for cyberattacks
    • Analyzing high volume of data using automation tools and platforms—both open source and commercial
    • Accurately identifying the nature of attack and formulate a mitigation plan
    • Scenario-based questions; for example, using a screenshot of output from a tool, you may be asked to interpret portions of output and establish conclusions

    After taking this course, you should be able to:

    • Describe the types of service coverage within a SOC and operational responsibilities associated with each.
    • Compare security operations considerations of cloud platforms.
    • Describe the general methodologies of SOC platforms development, management, and automation.
    • Explain asset segmentation, segregation, network segmentation, micro-segmentation, and approaches to each, as part of asset controls and protections.
    • Describe Zero Trust and associated approaches, as part of asset controls and protections.
    • Perform incident investigations using Security Information and Event Management (SIEM) and/or security orchestration and automation (SOAR) in the SOC.
    • Use different types of core security technology platforms for security monitoring, investigation, and response.
    • Describe the DevOps and SecDevOps processes.
    • Explain the common data formats, for example, JavaScript Object Notation (JSON), HTML, XML, Comma-Separated Values (CSV).
    • Describe API authentication mechanisms.
    • Analyze the approach and strategies of threat detection, during monitoring, investigation, and response.
    • Determine known Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).
    • Interpret the sequence of events during an attack based on analysis of traffic patterns.
    • Describe the different security tools and their limitations for network analysis (for example, packet capture tools, traffic analysis tools, network log analysis tools).
    • Analyze anomalous user and entity behavior (UEBA).
    • Perform proactive threat hunting following best practices.
    • Understanding Risk Management and SOC Operations
    • Understanding Analytical Processes and Playbooks
    • Investigating Packet Captures, Logs, and Traffic Analysis
    • Investigating Endpoint and Appliance Logs
    • Understanding Cloud Service Model Security Responsibilities
    • Understanding Enterprise Environment Assets
    • Implementing Threat Tuning
    • Threat Research and Threat Intelligence Practices
    • Understanding APIs
    • Understanding SOC Development and Deployment Models
    • Performing Security Analytics and Reports in a SOC
    • Malware Forensics Basics
    • Threat Hunting Basics
    • Performing Incident Investigation and Response

     

    Lab outline

    • Explore Cisco SecureX Orchestration
    • Explore Splunk Phantom Playbooks
    • Examine Cisco Firepower Packet Captures and PCAP Analysis
    • Validate an Attack and Determine the Incident Response
    • Submit a Malicious File to Cisco Threat Grid for Analysis
    • Endpoint-Based Attack Scenario Referencing MITRE ATTACK
    • Evaluate Assets in a Typical Enterprise Environment
    • Explore Cisco Firepower NGFW Access Control Policy and Snort Rules
    • Investigate IOCs from Cisco Talos Blog Using Cisco SecureX
    • Explore the ThreatConnect Threat Intelligence Platform
    • Track the TTPs of a Successful Attack Using a TIP
    • Query Cisco Umbrella Using Postman API Client
    • Fix a Python API Script
    • Create Bash Basic Scripts
    • Reverse Engineer Malware
    • Perform Threat Hunting
    • Conduct an Incident Response

     

    Although there are no mandatory prerequisites, the course is particularly suited for the following audiences:

    • Cybersecurity engineer
    • Cybersecurity investigator
    • Incident manager
    • Incident responder
    • Network engineer
    • SOC analysts currently functioning at entry level with a minimum of 1 year of experience

     

    Although there are no mandatory prerequisites, to fully benefit from this course, you should have the following knowledge:

    • Familiarity with UNIX/Linux shells (bash, csh) and shell commands
    • Familiarity with the Splunk search and navigation functions
    • Basic understanding of scripting using one or more of Python, JavaScript, PHP or similar.

     

    Recommended Cisco offerings that may help you prepare for this course:

    • Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)
    • Implementing and Administering Cisco Solutions (CCNA)

     

    Recommended third-party resources:

    • Splunk Fundamentals 1
    • Blue Team Handbook: Incident Response Edition by Don Murdoch
    • Threat Modeling- Designing for Security y Adam Shostack
    • Red Team Field Manual by Ben Clark
    • Blue Team Field Manual by Alan J White
    • Purple Team Field Manual by Tim Bryant
    • Applied Network Security and Monitoring by Chris Sanders and Jason Smith

     

      Termine
    • ` 9 Dec - 13 Dec, 2024
    • ` 6 Jan - 10 Jan, 2025
    • ` 3 Feb - 7 Feb, 2025
    • ` 3 Mar - 7 Mar, 2025
    • ` 31 Mar - 4 Apr, 2025

    Follow Up Courses

    Filter
    • 5 Tage

      2 Dec - 6 Dec, 2024

      30 Dec - 3 Jan, 2025

      27 Jan - 31 Jan, 2025

      24 Feb - 28 Feb, 2025

      24 Mar - 28 Mar, 2025

      21 Apr - 25 Apr, 2025

      Price on Request
      Book Now
    • 4 Tage

      2 Dec - 5 Dec, 2024

      30 Dec - 2 Jan, 2025

      27 Jan - 30 Jan, 2025

      24 Feb - 27 Feb, 2025

      24 Mar - 27 Mar, 2025

      21 Apr - 24 Apr, 2025

      Price on Request
      Book Now
    • 2 Tage

      2 Dec - 3 Dec, 2024

      30 Dec - 31 Dec, 2024

      27 Jan - 28 Jan, 2025

      24 Feb - 25 Feb, 2025

      24 Mar - 25 Mar, 2025

      21 Apr - 22 Apr, 2025

      Price on Request
      Book Now
    • 5 Tage

      18 Nov - 22 Nov, 2024

      16 Dec - 20 Dec, 2024

      13 Jan - 17 Jan, 2025

      10 Feb - 14 Feb, 2025

      10 Mar - 14 Mar, 2025

      7 Apr - 11 Apr, 2025

      Price on Request
      Book Now
    • 4 Tage

      9 Dec - 12 Dec, 2024

      6 Jan - 9 Jan, 2025

      3 Feb - 6 Feb, 2025

      3 Mar - 6 Mar, 2025

      31 Mar - 3 Apr, 2025

      Price on Request
      Book Now
    • 3 Tage

      9 Dec - 11 Dec, 2024

      6 Jan - 8 Jan, 2025

      3 Feb - 5 Feb, 2025

      3 Mar - 5 Mar, 2025

      31 Mar - 2 Apr, 2025

      Price on Request
      Book Now

    Know someone who´d be interested in this course?
    Let them know...

    Use the hashtag #InsoftLearning to talk about this course and find students like you on social media.