Descriptions
FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics, Threat hunting and incident response tactics and procedures continue to evolve rapidly. Your team can no longer afford to use antiquated incident response training and threat hunting training techniques that fail to properly identify compromised systems, provide ineffective containment of the breach, and ultimately fail to rapidly remediate the incident or contain propagating ransomware. Incident response and threat hunting teams are the keys to identifying and observing malware indicators and patterns of activity in order to generate accurate threat intelligence that can be used to detect current and future intrusions. This in-depth incident response training and threat hunting training course provides responders and threat hunting teams with advanced skills to hunt down, identify, counter, and recover from a wide range of threats within Microsoft Windows-based enterprise networks, including APT state-sponsored adversaries, organized crime syndicates, ransomware operators, and hacktivists. The course also serves as a primary preparation path for the GCFA certification (GIAC Certified Forensic Analyst), which validates real-world skills in detecting and responding to advanced intrusions.
What you’ll learn
- Master tools and techniques to detect, contain, and remediate adversaries
- Detect live, dormant, and custom malware across enterprise Windows systems
- Hunt threats and perform incident response at scale
- Identify malware beaconing, lateral movement, and C2 activity via memory analysis and Windows host forensics
- Analyze breaches to determine root cause, attack vectors, and persistence mechanisms
- Counter anti-forensics techniques, recover cleared data, and track attacker activity
- Use forensic tools to remediate threats and secure the enterprise
Who this course is for
- Incident Response Team Members who regularly respond to complex security incidents/intrusions from APT groups/advanced adversaries and need to know how to detect, investigate, remediate, and recover from compromised systems across endpoints in the enterprise.
- Threat Hunters who are seeking to understand threats more fully and how to learn from them in order to more effectively hunt threats and counter their tradecraft.
- SOC Analysts looking to better understand alerts, build the skills necessary to triage events, and fully leverage advanced endpoint detection and response (EDR) capabilities.
- Experienced Digital Forensic Analysts who want to consolidate and expand their understanding of memory and timeline forensics, investigation of technically advanced individuals, incident response tactics, and advanced intrusion investigations.
Specificatoin of FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
- Publisher : SANS
- Teacher :
- Language : English
- Level : All Levels
- Number of Course : 522
- Duration : 17 hours and 21 minutes
Content of FOR508: Advanced Incident Response, Threat Hunting, and Digital Forensics
1. Getting Started with SANS OnDemand
2. Advanced Incident Response Threat Hunting
3. Memory Forensics in Incident Response Threat Hunting
4. Intrusion Forensics
5. Timeline Analysis
6. Incident Response Hunting Across the Enterprise Advanced Adversary AntiForensics Detection
Pictures
Sample Clip
Installation Guide
Extract the files and watch with your favorite player
Subtitle : Not Available
Quality: 720p
Download Links
Password file(s): www.downloadly.ir
File size
6.76 GB
