COURSE 061 · Técnico
Operaciones de seguridad y equipo azul
Free cybersecurity education for anyone who wants to protect people and technology. Study published lessons, examples and exercises without creating an account.
Cargando este curso…
Published lessons in this course
Each link opens the complete lesson on its own permanent page. New manuscript edits appear there after publication.
EN · 0 daily lessons · 18 full chapters
Chapter 1: Chapter 1 — What a security operations centre doesChapter 2: Chapter 2 — Logs and telemetryChapter 3: Chapter 3 — The SIEM and alertingChapter 4: Chapter 4 — Reading authentication logsChapter 5: Chapter 5 — Triage and prioritisationChapter 6: Chapter 6 — Endpoint telemetryChapter 7: Chapter 7 — Email and phishing alertsChapter 8: Chapter 8 — Network and proxy logsChapter 9: Chapter 9 — Threat intelligence basicsChapter 10: Chapter 10 — The incident response processChapter 11: Chapter 11 — Containment and communicationChapter 12: Chapter 12 — Detection engineering basicsChapter 13: Chapter 13 — Tuning and false positivesChapter 14: Chapter 14 — Coverage with ATT&CK and D3FENDChapter 15: Chapter 15 — SOC metricsChapter 16: Chapter 16 — Shifts, handover and wellbeingChapter 17: Chapter 17 — Continuous monitoring and SOC maturityChapter 18: Chapter 18 — Review and next steps
COURSE 061
Operaciones de seguridad y equipo azul
Cargando libro y guía de lecciones actuales…
Ver respuestas desarrolladas
TU PROGRESO · OPCIONAL
Guardar esta lección
La lectura está abierta sin cuenta. El guardado del progreso con inicio de sesión opcional se añadirá después.