CSEC414
Security Operations Center and Cyber Threat Hunting
Faculty Profiles
Teymur Kheirkhabarov
Head of Cyber Defense Center at BI.ZONE
Vadim Khrykov
Head of Threat Detection & Incident Response at BI.ZONE
Course length
Duration
Total hours
Credits
Language
Course type
Fee for single course
Fee for degree students
Skills you’ll learn
Overview
Information security is a complex of processes, people and technologies, and their mutual effectiveness defines efficiency of the overall Infosecurity program in the enterprise. Security operations is the crucial glue between these three components and Security operations center is its implementation in practice. During the module classes students get acquainted with modern attack tactics, techniques and procedures and how they can be addressed by security operations staff. In lab classes students will get practical skills in modern cyber threats detection, incident response and investigation.
Learning highlights
- Plan and organize security monitoring in the enterprise
- Use different threat intelligence sources to detect modern cyber threats
- Detect and investigate malicious activity in windows and linux infrastructures based on attacker’s tactics, techniques and procedures
- Build cyber threat hunting infrastructure based on open source solutions
- Development of threat detection logic and rules
- Basic incident response & investigation
Course outline
15 classes
Session 1
Current state of cyber threats
Session 2
Security operations center mission & goals, architecture, processes and tools
Session 3
Cyber Threat Intelligence
Session 4
Build your own monitoring and hunting infrastructure (based on Elastic stack)
Session 5
Threat Detection Engineering Methodology
Session 6
Endpoint Security Monitoring
Session 7
Windows Architecture and Security
Session 8
Windows Audit and Monitoring Capabilities
Session 9
Windows Endpoint Attack Techniques and Detection
Session 10
Active Directory Attacks and Detection
Session 11
Linux Audit and Monitoring Capabilities
Session 12
Linux Endpoint Attack Techniques and Detection
Session 13
Network Security Monitoring
Session 14
Incident Response & Investigation
Session 15
Cyber Threat Hunting
Course materials
Books
Prerequisites
A baseline understanding of cyber security topics
General Windows and Linux operating system fundamentals
Being accustomed to the Linux command-line
Basic understanding of TCP/IP and networking concepts
Methodology
Lectures
Practical demonstrations
Hands-on exercises
Weekly tests
Grading
Teymur is engaged in theoretical and practical aspects of information security research for more than six years. Currently, senior SOC analyst at Kaspersky responsible for advanced threat research. Formerly, the head of the Information security department at Krasnoyarsk Hydropower Plant.
Received specialist's and master's degrees in Siberian State Aerospace University named after academician M. F. Reshetnev where later he gave lectures on Information security.
See full profileVadim has started his career as developer and applications security professional with more than 11 years of experience is this field. Since 2019 he joined the BI.ZONE Cybersecurity team to build world-class managed security products and services. He is currently a head of thread detection and incident response division where he drives threat hunting, threat research and incident response capabilities.
See full profileApply for this course
Security Operations Center and Cyber Threat Hunting
by Teymur Kheirkhabarov, Vadim Khrykov
Total hours
45 Hours
Dates
Aug 01 - Aug 19, 2022
Fee for single course
€1500
Fee for degree students
€750
How to secure your spot
Complete the form below to kickstart your application
Schedule your Harbour.Space interview
If successful, get ready to join us on campus
FAQ
Will I receive a certificate after completion?
Yes. Upon completion of the course, you will receive a certificate signed by the director of the program your course belonged to.
Do I need a visa?
This depends on your case. Please check with the Spanish or Thai consulate in your country of residence about visa requirements. We will do our part to provide you with the necessary documents, such as the Certificate of Enrollment.
Can I get a discount?
Yes. The easiest way to enroll in a course at a discounted price is to register for multiple courses. Registering for multiple courses will reduce the cost per individual course. Please ask the Admissions Office for more information about the other kinds of discounts we offer and what you can do to receive one.