Security Operations and Infrastructure Defense topics
10 short topics in Security Operations and Infrastructure Defense. Each one is a single focused exercise with a clear piece of evidence at the end.
10 topics, one exercise each.
Work through them in order, or jump to the one you need.
These are draft topic outlines (draft; instructor review pending). Full lessons follow after review; ask Ajay if you need a topic sooner.
- 01
Security logging and event triage
Use local or synthetic evidence to investigate Security logging and event triage in the context of Security triage lab using synthetic event records; explain the observation and next action.
Open micro-course → - 02
Asset exposure inventory
Use local or synthetic evidence to investigate Asset exposure inventory in the context of Security triage lab using synthetic event records; explain the observation and next action.
Open micro-course → - 03
Vulnerability prioritization
Use local or synthetic evidence to investigate Vulnerability prioritization in the context of Security triage lab using synthetic event records; explain the observation and next action.
Open micro-course → - 04
Infrastructure hardening baselines
Use local or synthetic evidence to investigate Infrastructure hardening baselines in the context of Security triage lab using synthetic event records; explain the observation and next action.
Open micro-course → - 05
Network detection concepts
Use local or synthetic evidence to investigate Network detection concepts in the context of Security triage lab using synthetic event records; explain the observation and next action.
Open micro-course → - 06
Identity event investigation
Use local or synthetic evidence to investigate Identity event investigation in the context of Security triage lab using synthetic event records; explain the observation and next action.
Open micro-course → - 07
Endpoint security concepts
Use local or synthetic evidence to investigate Endpoint security concepts in the context of Security triage lab using synthetic event records; explain the observation and next action.
Open micro-course → - 08
Security incident containment
Use local or synthetic evidence to investigate Security incident containment in the context of Security triage lab using synthetic event records; explain the observation and next action.
Open micro-course → - 09
Recovery verification
Use local or synthetic evidence to investigate Recovery verification in the context of Security triage lab using synthetic event records; explain the observation and next action.
Open micro-course → - 10
Security playbooks and tabletop exercises
Use local or synthetic evidence to investigate Security playbooks and tabletop exercises in the context of Security triage lab using synthetic event records; explain the observation and next action.
Open micro-course →
More in Core IT concepts.
You have the curiosity.
Let’s turn it into capability.
Start with a practical workshop or bring a specific question to Ajay.