After doing these courses, I feel confident creating professional visualizations and dashboards
Shoebur RahmanProcurement Specialist, Giz Bangladesh
课程介绍
This is the fourth of five courses in the Google Cloud Cybersecurity Certificate. In this course, you’ll focus on developing capabilities in logging, security, and alert monitoring, along with techniques for mitigating attacks. You'll gain valuable knowledge in customizing threat feeds, managing incidents, handling crisis communications, conducting root cause analysis, and mastering incident response and post-event communications. Using Google Cloud tools, you'll learn to identify indicators of compromise and prepare for business continuity and disaster recovery. Alongside these technical skills, you'll continue updating your resume and practicing interview techniques.
先修要求
本课程无先修要求
课程大纲
课程大纲
1
Detection foundations
In this module, you’ll delve into crucial topics for detecting security activities, focusing on log retention policies, intrusion detection and prevention systems, and the intricacies of monitoring and alerts. You'll learn about incident management and attack mitigation strategies. Additionally, the section will guide you through logging fundamentals and monitoring best practices, equipping you with the knowledge to effectively manage and respond to security incidents.
- Introduction to course 450 经验值
- Course 4 overview50 经验值
- Seline: Make an impact in cloud security50 经验值
- Helpful resources and tips50 经验值
- Lab technical tips50 经验值
- Explore your course 4 scenario: Cymbal Bank50 经验值
- Welcome to module 150 经验值
- SecOps and its components50 经验值
- Essential SecOps skills50 经验值
- Vulnerability management techniques50 经验值
- Vulnerability scanning, penetration testing, and tabletop exercises50 经验值
- AI in SecOps: Red teams50 经验值
- Test your knowledge: Security operations foundations — Question 150 经验值
- Test your knowledge: Security operations foundations — Question 250 经验值
- Test your knowledge: Security operations foundations — Question 350 经验值
- Test your knowledge: Security operations foundations — Question 450 经验值
- Incident detection basics50 经验值
- Phases of incident response and management50 经验值
- Incident response plans50 经验值
- More about incident response phases50 经验值
- Intrusion detection systems50 经验值
- Signature and anomaly-based detection50 经验值
- Test your knowledge: Incident management foundations — Question 150 经验值
- Test your knowledge: Incident management foundations — Question 250 经验值
- Test your knowledge: Incident management foundations — Question 350 经验值
- Test your knowledge: Incident management foundations — Question 450 经验值
- Logs for analysis and monitoring50 经验值
- Log types: A breakdown50 经验值
- Log management: The skills needed for success50 经验值
- Test your knowledge: Logging and log retention fundamentals — Question 150 经验值
- Test your knowledge: Logging and log retention fundamentals — Question 250 经验值
- Test your knowledge: Logging and log retention fundamentals — Question 350 经验值
- Test your knowledge: Logging and log retention fundamentals — Question 450 经验值
- Alerts and notifications50 经验值
- Alert search techniques50 经验值
- Alert and log optimization50 经验值
- Guide to event threat detection50 经验值
- Determine the difference between normal activity and an incident100 经验值
- Test your knowledge: Alerts, notifications, and log optimization — Question 150 经验值
- Test your knowledge: Alerts, notifications, and log optimization — Question 250 经验值
- Test your knowledge: Alerts, notifications, and log optimization — Question 350 经验值
- Test your knowledge: Alerts, notifications, and log optimization — Question 450 经验值
- Wrap-up50 经验值
- Glossary terms from module 150 经验值
- Module 1 challenge — Question 150 经验值
- Module 1 challenge — Question 250 经验值
- Module 1 challenge — Question 350 经验值
- Module 1 challenge — Question 450 经验值
- Module 1 challenge — Question 550 经验值
- Module 1 challenge — Question 650 经验值
- Module 1 challenge — Question 750 经验值
- Module 1 challenge — Question 850 经验值
- Module 1 challenge — Question 950 经验值
- Module 1 challenge — Question 1050 经验值
2
Detection in practice
In this module, you’ll delve into the intrusion kill chain, false positive analysis, and threat hunting techniques through the lens of incident management and attack mitigation. You’ll also learn how to create detection rules, use query tools to analyze logs and identify indicators of compromise (IoC).
3
Incident response management and attack mitigation
In this module, you'll explore the entire incident response process. Additionally, you’ll gain essential skills in documenting information for various stakeholders, defining and conducting post-mortem analyses, and developing and executing automated playbooks. By the end of this course, you'll have a comprehensive understanding of the importance of automation in SecOps and be equipped with the necessary tools and knowledge to thrive in your chosen cloud security role.
4
Incident recovery
In this module, you'll acquire a thorough understanding of disaster recovery planning and business continuity in the Google Cloud environment, ensuring data integrity and maintaining operations during a disaster, focusing on swift response strategies. This module will also guide you through the role of automation in detecting and responding to cyberattacks, the use of the business continuity and disaster recovery (BCDR) tool, and the criticality of recovery as a last resort.
R
Detect, Respond, and Recover from Cloud Cybersecurity Attacks
课程完成
