Incident Response and Threat Hunting

Catalog description

Practical introduction to cyber incident response and threat hunting using modern SOC tools and cloud-native environments. Security alerts, log analysis, identification of suspicious activity, and cloud and container-based incidents. Emphasis on Splunk SIEM analysis, AWS/Azure/Google Cloud audit log investigation, and Docker container triage. Prerequisites: take CNIT-371 and CNIT-383