CrowdStrike: For SOC Analysts

Focused View

Hailie Shaw

5:16:02

23 View

1. Introduction.mp4

02:29

2. Module 1a Console Overview.mp4

09:41

3. Module 1b Demo of the Console Overview.mp4

24:05

4. Module 2a Where to Spend Your Time.mp4

07:09

5. Module 2b Demo of the Important Menu Items.mp4

23:49

6. Module 3a Triaging a Detection.mp4

24:34

7. Module 3b Demo of Detection Triage.mp4

23:47

8. Module 4 OSINT Tools to Leverage.mp4

09:21

9. Module 5a Event Search Splunk Queries.mp4

21:17

10. Module 5b Demo of Searching Endpoint Logs.mp4

31:27

11. Module 6a Real Time Response Features.mp4

10:46

12. Module 6b Demo of Real Time Response.mp4

25:28

13. Module 7a Sandbox & Blocking Actions.mp4

16:03

14. Module 7b Demo of Sandbox Detonation and Performing Blocks.mp4

19:27

15. Module 8a Whitelisting Adding Exclusions.mp4

08:55

16. Module 8b Demo of How to Add Exclusions.mp4

11:08

17. Module 9 Putting it All Together!.mp4

42:45

18. Module 10 Where to Go Next.mp4

03:51

Description

Elevate Your Defense Game: Mastering CrowdStrike for SOC Analysts

What You'll Learn?

Create Custom Rules and Policies
Understand CrowdStrike Fundamentals
Analyze Endpoint Data
Detect and Investigate Threats
Console Navigation and Features
Real Time Response Actions and Scripts
Threat Hunt in CrowdStrike

Who is this for?

Cybersecurity Practitioners

Incident Responders

Threat Hunters

IT Professionals Transitioning to Security

SOC Analysts

Threat Intelligence Analysts

What You Need to Know?

A connection to the internet

More details

Description
Module 1: Console Overview Get acquainted with the CrowdStrike console, your command center for proactive threat detection and incident response. Explore its interface, functionalities, and navigation to ensure a solid foundation for the rest of the course.
Module 2: Where to Spend Your Time Learn to prioritize effectively in a dynamic threat landscape. Understand the critical areas of focus within the CrowdStrike console to optimize your time and as it pertains to SOCÂ work.
Module 3: Triaging a Detection Master the art of rapid detection triage. Develop skills to assess the severity of a detection, determine its scope, and decide on appropriate immediate actions.
Module 4: Useful Open Source Tools to Use Discover a curated toolkit of open-source resources that complement the CrowdStrike platform. Explore how to leverage these tools to enhance your threat intelligence and investigative capabilities.
Module 5: Event Search / Splunk Queries Delve into advanced event search techniques and learn how to craft powerful queries in Splunk. Learn how to conduct host analysis and leveraging endpoint logs to your advantage.
Module 6: Real-Time Response Features Equip yourself with CrowdStrike's real-time response arsenal. Dive into containment strategies, remote actions, scripting, and other instant response capabilities.
Module 7: Sandbox & Blocking Actions Explore the CrowdStrike sandbox environment and understand its role in threat analysis. Learn to implement blocking actions effectively to halt threats in their tracks.
Module 8: Whitelisting / Exclusions Navigate the nuances of whitelisting and exclusions. Gain insights into striking the right balance between security and operational efficiency.
Module 9: Putting It All Together Immerse yourself in realistic scenarios where you'll apply your newfound knowledge. Walk through end-to-end incident response processes, from detection to resolution.
Module 10: Where to Go Next Chart your future course in the realm of cybersecurity. Discover avenues for continued learning, specialization, and skill refinement to stay ahead in the ever-evolving threat landscape.
Who this course is for:
Cybersecurity Practitioners
Incident Responders
Threat Hunters
IT Professionals Transitioning to Security
SOC Analysts
Threat Intelligence Analysts

User Reviews

Rating

average 0

Total votes0

Focused display

print('Hello, world!')Cybersecurity should be a field you can transition into with only a few hundred dollars invested. You can take advantage of Udemy, YouTube, Discord, Slack channels, or other small monthly memberships on learning platforms to get you started. I am happy to be a resource in your cybersecurity journey through my courses currently offered on Udemy and through my website or YouTube channel. Enjoy and thank you for the support!

Udemy

View courses Udemy

Students take courses primarily to improve job-related skills.Some courses generate credit toward technical certification. Udemy has made a special effort to attract corporate trainers seeking to create coursework for employees of their company.