Certified Cyber Defence Operator

BTL1 is perfect for security enthusiasts or professionals that want to develop their practical defensive cyber skills. Roles that we believe would benefit from this course include:

• Students/IT Personnel
• Security Analysts
• Incident Responders
• Threat Intelligence Analysts
• Forensics Analysts

BTL2 is aimed at security professionals with 2-4 years’ experience in a practical role but can be suitable for individuals with less experience provided they can commit to the intense training. Roles that we believe would benefit from this course include:

• Mid-Senior Security Analysts
• Mid-Senior Incident Responders
• Mid-Senior Security Consultants
• DFIR Specialists
• Threat Hunters
• Malware Analysts

• Introduction to Security Fundamentals
• Soft Skills
• Security Controls
• Networking 101
• Management Principles

• Introduction to Emails and Phishing
• Types of Phishing Emails
• Tactics and Techniques Used
• Analysing URLs, Attachments, and Artifacts
• Taking Defensive Measures
• Report Writing
• Lessons Learned
• Phishing Response Challenge

• Introduction to Threat Intelligence
• Threat Actors and APTs
• Operational Threat Intelligence
• Tactical Threat Intelligence
• Strategic Threat Intelligence
• Malware and Global Campaigns

• Introduction to Digital Forensics
• Forensics Fundamentals
• Digital Evidence Collection
• Windows Investigations
• Linux Investigations
• Volatility
• Autopsy

• Introduction to SIEM
• Logging
• Aggregation
• Correlation
• Using Splunk SIEM

• Introduction to Incident Response
• Preparation Phase
• Detection and Analysis Phase
• Containment, Eradication, and Recovery Phase
• Lessons Learned
• MITRE ATT&CK

• Categorizing Phishing Emails
• Manual Artifact Extraction
• Phishing Response Capstone
• Identifying File Systems
• Metadata and File Carving
• Hashing and Integrity
• Windows Investigation 1
• Windows Investigation 2
• Volatility For Memory Analysis
• Autopsy For Disk Analysis
• Windows Event Log Analysis
• Splunk Investigation 1
• Splunk Investigation 2
• Splunk Investigation 3
• Splunk Investigation 4
• Wireshark Network Investigations (x3)
• CMD and PowerShell For Incident Response

• 25 quizzes to review knowledge from a section
• Identifying Phishing Tactics Used
• Password Cracking
• Setting up a Threat Intelligence Platform (MISP)
• Setting up a Firewall (PfSense)
• Threat Actor Research Project
• Writing Sigma Rules
• ATT&CK Navigator
• Hunting With YARA

• Introduction to Malware Analysis
• Build Your Own Analysis Lab
• Static Analysis Tools and Techniques
• Dynamic Analysis Tools and Techniques
• Malware Analysis Practice

• Introduction to Threat Hunting
• Build Your Own Hunting Lab
• Endpoint Threat Hunting
• Network Threat Hunting
• Hunting at Scale
• Hunt Reflection and Report Writing

• Introduction to Advanced SIEM
• SIEM Architecture
• Proactive SIEM (Hunting)
• Adversary Emulation, Detection, and Analysis

• Introduction to Vulnerability Management
• Host Discovery
• Vulnerability Discovery
• Analysis, Prioritization, and Threat Intelligence
• Reporting and Remediation

• Hashing and Strings
• YARA and YarGen
• Monitoring Malicious Processes
• Utilizing Sysinternals For Analysis
• Portable Executable Analysis
• Portable Document Analysis
• Office Document Analysis
• Blackbox Analysis – PE File
• Blackbox Analysis – PDF File
• Blackbox Analysis – Office File
• Windows Program Execution
• Windows System Hunt
• Linux System Hunt
• Hunting With Chainsaw
• Beacon Detection With RITA And Wireshark
• Hunting Empire C2
• Hunting at Scale With Velociraptor
• Creating Deliverables, DeTTECT & Navigator
• Analysis and Hunting (Search & Reporting App)
• Analysis and Hunting (ThreatHunting App)
• Adversary Emulation With CALDERA
• Creating Rules and Dashboards
• Command-and-Control Detection
• Active Discovery With Nmap
• Active Discovery With OpenVAS
• Vulnerability Scanning With OpenVAS
• Vulnerability Scanning With Nikto
• Vulnerability Scanning With WPScan
• Vulnerability Scanning With NSE

• Become Blue Team Level 2 certified for life
• BTL2 Acclaim digital badge
• BTL2 printed certificate
• BTL2 Blue Team Labs Online digital badge
• BTL2 silver challenge coin (gold if score 90%+ on first attempt)
• Laptop Stickers