Cybersecurity 102 — Intermediate Cyber Defence Practitioner
A 40-hour, hands-on intermediate course for CS101 graduates and IT or security staff: 10 live sessions on SIEM monitoring, detection engineering, vulnerability management, incident response, cloud security and GRC, ending in a team capstone simulation. CySA+ CS0-004 is the reference blueprint.
- Intermediate
- 40 ساعة
- المدرّب: Muhammad Eissa
ما ستتعلمه
- Build a sector threat profile by mapping adversary behaviour to MITRE ATT&CK techniques.
- Analyse a hybrid network design for segmentation and trust-boundary weaknesses using zero trust and defence-in-depth principles.
- Apply a CIS Benchmark baseline to Windows Server and Ubuntu hosts and investigate configuration drift.
- Triage SIEM alerts in Splunk as true or false positives, with a written justification.
- Extract network indicators of compromise from packet captures and write a Sigma detection rule.
- Prioritise vulnerability findings using CVSS v4.0, EPSS, CISA KEV and asset criticality, and plan remediation.
- Acquire and hash evidence with chain-of-custody records and build an incident timeline.
- Map technical findings to NIST CSF 2.0 and UAE regulation and write a one-page executive report.