Training Program
Blue Team & Detection Engineering
Building and tuning detection capability for defensive teams.
Covers log analysis, detection rule engineering and defensive playbook development for teams responsible for identifying and stopping attacks.
Audience
- SOC analystsEnterprise teams
Delivery Modes
- In-personVirtual instructor-led
Program Outline
- 01Log source fundamentals
- 02Detection rule engineering
- 03Alert triage
- 04Playbook development