Duration

Blue Team Level 2

5 days

Overview

BTL2 is aimed at security professionals with 2-4 years experience in a practical role, but can be suitable for individuals with less experience provided they can commit to the intense training. Roles that we believe would benefit from this course include:

Mid-Senior Security Analysts
Mid-Senior Incident Responders
Mid-Senior Security Consultants
DFIR Specialists
Threat Hunters
Malware Analysts

WHY CHOOSE BTL2?

BTL2 is designed to strengthen technical defenders that already have experience and exposure to security operations. BTL2 will develop you in niche areas that make you stand out as an advanced defender. Below are some examples of the skills and experience you will gain.

Outline

Domain 1 - Malware Analysis

Domain Sections:

Introduction to Malware Analysis
Build Your Own Analysis Lab
Static Analysis Tools and Techniques
Dynamic Analysis Tools and Techniques
Malware Analysis Practice

Domain 2 - Threat Hunting

Domain Sections:

Introduction to Threat Hunting
Build Your Own Hunting Lab
Endpoint Threat Hunting
Network Threat Hunting
Hunting at Scale
Hunt Reflection and Report Writing

Domain 3 - Advanced SIEM

Domain Sections:

Introduction to Advanced SIEM
SIEM Architecture
Proactive SIEM (Hunting)
Adversary Emulation, Detection, and Analysis

Domain 4 - Vulnerability Management

Domain Sections:

Introduction to Vulnerability Management
Host Discovery
Vulnerability Discovery
Analysis, Prioritization, and Threat Intelligence
Reporting and Remediation

Programme scope, delivery arrangements and suitability are confirmed during enquiry.