К содержимому
learnspaceYOUR NEXT CHAPTER
ПРОСТРАНСТВО ОБУЧЕНИЯ
ГлавнаяКаталог курсовМоё обучениеCoursera

Знания без границ

Учитесь у лучших университетов и компаний мира.

Открыть Coursera
Интеграция
Пространство университета
Моё пространствоСтраница курса
↵
ЯЛичный кабинетСтудент
© 2026 LearnSpaceКаждый день — возможность узнать больше.Помощь
Threat Investigation · LearnSpace
Назад в каталог
courseraIT и технологии

Threat Investigation

Курс от Cisco Learning and Certifications
Уровень не указан≈ 8.5 чАнглийский
О курсеНавыкиПрограммаПреподаватели

О курсе

If you are an associate-level cybersecurity analyst who is working in security operation centers, this course will help you understand how threat-centric SOC must prepare for analyzing new and emerging threats by implementing robust security investigation procedures • By the end of the course, you will be able to: • Understand cyber-threat hunting concepts • Describe the five hunting maturity levels (HM0–HM4) • Describe the hunting cycle four-stage loop• Describe the use of the Common Vulnerability Scoring System (CVSS) and list the CVSS v3.0 base metrics• Describe the CVSS v3.0 scoring components (base, temporal, and environmental) • Provide an example of CVSS v3.0 scoring • Describe the use of a hot threat dashboard within a SOC • Provide examples of publicly available threat awareness resources • Provide examples of publicly available external threat intelligence sources and feeds• Describe the use of security intelligence feed • Describe threat analytics systems • Describe online security research tools • Simulate malicious actions to populate the event data on the Security Onion tools for later analysis • Identify resources for hunting cyber threats. To be successful in this course, you should have the following background: 1. Skills and knowledge equivalent to those learned in Implementing and Administering Cisco Solutions (CCNA) v1.0 course 2. Familiarity with Ethernet and TCP/IP networking 3. Working knowledge of the Windows and Linux operating systems 4. Familiarity with basics of networking security concepts.

Навыки, которые вы освоите

Computer Security Incident ManagementEvent MonitoringMalware ProtectionThreat DetectionSecurity Information and Event Management (SIEM)Cyber Threat HuntingCyber Threat IntelligenceSecurity ManagementThreat ManagementVulnerability AssessmentsNetwork SecurityContinuous MonitoringNetwork MonitoringIntrusion Detection and PreventionNetwork Analysis

Программа курса

4 модулей · 119 учебных материалов

01Identifying Resources for Hunting Cyber Threats46 материалов

Introduction

Introduction to Identifying Resources for Hunting Cyber ThreatsВидеоIntroduction to Identifying Resources for Hunting Cyber ThreatsЧтениеLearner IntroductionОбсуждение

Cyber-Threat Hunting Concepts

Учитесь у экспертов

Cisco Learning & Certifications

Преподаватель курса

Threat Investigation
В каталоге вашей программы

Инвестируйте в себя

Новые знания — в удобное для вас время.

Начать на Coursera

Обучение откроется на Coursera
в новой вкладке

Обучение на Coursera

≈ 8.5 ч

4 модулей

Язык: Английский

Субтитры: Арабский, Французский, Китайский (Китай), Итальянский, Бразильский португальский, Вьетнамский, Корейский, Немецкий, Русский, Индонезийский, Испанский, Хинди, Японский

Часть программы вашего университета
Cyber Threat Hunting ConceptsВидео
Cyber-Threat Hunting ConceptsЧтение
Cyber-Threat Hunting Concepts Practice QuizЗадание

Hunting Maturity Model

Hunting Maturity ModelВидеоHunting Maturity ModelЧтениеHunting Maturity Model Practice QuizЗадание

Cyber Threat Hunting Cycle

Cyber Threat Hunting CycleВидеоCyber Threat Hunting CycleЧтениеCyber Threat Hunting Cycle Practice Quiz Задание

Common Vulnerability Scoring System

Common Vulnerability Scoring SystemВидеоCommon Vulnerability Scoring SystemЧтениеCVSS v3.0 Base MetricsЧтениеCVSS v3.0 Temporal MetricsЧтениеCVSS v3.0 Environmental MetricsЧтениеCommon Vulnerability Scoring System Practice Quiz Задание

CVSS v3.0 Scoring

CVSS v3.0 ScoringВидеоCVSS v3.0 ScoringЧтениеPractice Quiz Задание

CVSS v3.0 Example

CVSS v3.0 ExampleВидеоCVSS v3.0 ExampleЧтениеCVSS v3.0 Scoring Practice Quiz Задание

Hot Threat Dashboard

Hot Threat DashboardВидеоHot Threat DashboardЧтениеHot Threat ProcessЧтениеHot Threat ChallengesЧтениеHot Threat Dashboard Practice Quiz Задание

Publicly Available Threat Awareness Resources

Publicly Available Threat Awareness ResourcesВидеоOpen Web Application Security ProjectЧтениеSpamhaus ProjectЧтениеAlexaЧтениеPublicly Available Threat Awareness Resources Practice Quiz Чтение

Other External Threat Intelligence Sources and Feeds Reference

Other External Threat Intelligence Sources and Feeds ReferenceЧтение

Security Intelligence

Security IntelligenceВидеоSecurity IntelligenceЧтениеSecurity Intelligence Practice Quiz Задание

Threat Analytic Systems

Threat Analytic SystemsВидеоThreat Analytic SystemsЧтениеThreat Analytic Systems Practice Quiz Задание

Security Tools Reference

Security Tools ReferenceВидеоSecurity Tools ReferenceЧтение

Wrap-Up

Wrap-UpЧтениеWrap-UpВидео

Course Exam

Identifying Resources for Hunting Cyber Threats Course ExamЗадание
02Understanding Event Correlation and Normalization32 материалов

Introduction

Introduction to Understanding Event Correlation and NormalizationЧтениеIntroduction to Understanding Event Correlation and NormalizationВидео

Event Sources

Event SourcesВидеоEvent SourcesЧтениеIntrusion Prevention SystemЧтениеFirewallsЧтениеNetFlowЧтениеProxy ServersЧтениеIdentity and Access ManagementЧтениеAntivirusЧтениеApplication LogsЧтениеEvent Sources Practice QuizЗадание

Evidence

EvidenceВидеоEvidenceЧтениеEvidence Practice QuizЗадание

Chain of Custody

Chain of CustodyВидеоChain of CustodyЧтениеChain of Custody Practice QuizЗадание

Security Data Normalization

Security Data NormalizationВидеоSecurity Data NormalizationЧтение

Event Correlation

Event CorrelationВидеоEvent CorrelationЧтениеEvent Correlation Practice QuizЗадание

Other Security Data Manipulation

Other Security Data Manipulation ВидеоOther Security Data ManipulationЧтениеAggregationЧтениеSummarizationЧтениеDeduplicationЧтениеOther Security Data Manipulation Practice QuizЗадание

Wrap-Up

Wrap-UpЧтениеWrap-UpВидео

Course Exam

Understanding Event Correlation and Normalization Course ExamЗадание
03Conducting Security Incident Investigations18 материалов

Introduction

Introduction to Conducting Security Incident InvestigationsЧтениеIntroduction to Conducting Security Incident InvestigationsВидео

Security Incident Investigation Procedures

Security Incident Investigation ProceduresВидеоSecurity Incident Investigation ProceduresЧтениеWhen: When Did the Events Occur?ЧтениеWho: What IP/Domain Was Associated with the Malware?ЧтениеWhere: Where Did the Infection Come From?ЧтениеWhat: What Type of Malware Is on the System?ЧтениеWhy: What Does the Malware Do and What Is Its Purpose?ЧтениеHow: How Did the Malware Get onto the System?ЧтениеSecurity Incident Investigation Procedures Practice QuizЗадание

Threat Investigation Example: China Chopper Remote Access Trojan

IntroductionЧтениеThreat Investigation Example: China Chopper Remote Access TrojanВидеоThreat Investigation Example: China Chopper Remote Access TrojanЧтениеThreat Investigation Example: China Chopper Remote Access Trojan Practice QuizЗадание

Wrap-Up

Wrap-UpЧтениеWrap-UpВидео

Course Exam

Conducting Security Incident Investigations Course ExamЗадание
04Using a Playbook Model to Organize Security Monitoring23 материалов

Introduction

Introduction to Using a Playbook Model to Organize Security MonitoringЧтениеIntroduction to Using a Playbook Model to Organize Security MonitoringВидео

Security Analytics

Security AnalyticsВидеоSecurity AnalyticsЧтениеSecurity Analytics Practice QuizЗадание

Playbook Definition

Playbook DefinitionВидеоPlaybook DefinitionЧтениеPlaybook Definition Practice QuizЗадание

What Is in a Play?

What Is in a Play?ВидеоWhat Is in a Play?ЧтениеReport IdentificationЧтениеObjectiveЧтениеData QueryЧтениеActionЧтениеAnalysisЧтение

Playbook Management System

Playbook Management SystemВидеоPlaybook Management SystemЧтениеPlaybook Management System QuizЗадание

Wrap-Up

Wrap-UpЧтениеWrap-UpВидео

Course Exam

Course ExamЗадание
ReferenceЧтение
What Is in a Play Practice QuizЗадание