Certified Blue Team Level 2

BTL2 is aimed at security professionals with 2-4 years experience in a practical role, but can be suitable for individuals with less experience provided they can commit to the intense training. Roles that we believe would benefit from this course include:

• Mid-Senior Security Analysts
• Mid-Senior Incident Responders
• Mid-Senior Security Consultants
• DFIR Specialists
• Threat Hunters
• Malware Analysts

Below are some examples of the skills and experience you will gain.

• Identify, analyze, prioritize, and remediate vulnerabilities to effectively reduce risk.
• Conduct static and dynamic malware analysis to gather indicators of compromise and document details of the malware’s purpose and utilized techniques.
• Conducting adversary emulation activities with the purpose of identifying gaps in SIEM detection rules, creating operational dashboards to identify threats, and hunting on remote systems.
• Perform threat hunts on individual systems and at scale to detect adversaries that have already breached the perimeter.

• Introduction to Malware Analysis
• Build Your Own Analysis Lab
• Static Analysis Tools and Techniques
• Dynamic Analysis Tools and Techniques
• Malware Analysis Practice

• Introduction to Threat Hunting
• Build Your Own Hunting Lab
• Endpoint Threat Hunting
• Network Threat Hunting
• Hunting at Scale
• Hunt Reflection and Report Writing

• Introduction to Advanced SIEM
• SIEM Architecture
• Proactive SIEM (Hunting)
• Adversary Emulation, Detection, and Analysis

• Introduction to Vulnerability Management
• Host Discovery
• Vulnerability Discovery
• Analysis, Prioritization, and Threat Intelligence
• Reporting and Remediation

• Hashing and Strings
• YARA and YarGen
• Monitoring Malicious Processes
• Utilizing Sysinternals For Analysis
• Portable Executable Analysis
• Portable Document Analysis
• Office Document Analysis
• Blackbox Analysis – PE File
• Blackbox Analysis – PDF File
• Blackbox Analysis – Office File
• Windows Program Execution
• Windows System Hunt
• Linux System Hunt
• Hunting With Chainsaw
• Beacon Detection With RITA And Wireshark
• Hunting Empire C2
• Hunting at Scale With Velociraptor
• Creating Deliverables, DeTTECT & Navigator
• Analysis and Hunting (Search & Reporting App)
• Analysis and Hunting (ThreatHunting App)
• Adversary Emulation With CALDERA
• Creating Rules and Dashboards
• Command-and-Control Detection
• Active Discovery With Nmap
• Active Discovery With OpenVAS
• Vulnerability Scanning With OpenVAS
• Vulnerability Scanning With Nikto
• Vulnerability Scanning With WPScan
• Vulnerability Scanning With NSE

• Become Blue Team Level 2 certified for life
• BTL2 Acclaim digital badge
• BTL2 printed certificate
• BTL2 Blue Team Labs Online digital badge
• BTL2 silver challenge coin (gold if score 90%+ on first attempt)
• Laptop Stickers