Defender 302: Security Operations and Network Monitoring
- Duration: 16 hours
- Delivery Options: Online, In-person, Hybrid
Learn security operations and defensive security, including the basics of Windows, Linux, and network forensics. Key concepts and tools include commercial SIEM, firewalls, and systems monitoring.
Who should take this course
DEF-302 is designed for cyber and information security professionals looking to improve their defensive skills. It is recommended that participants have at least three to five years of cybersecurity experience or completed the Essential Defender series.
How can you take this course
Available online live with an instructor
Available in-person either at Purdue or at your location.
Available as a combination of online and in-person
What tools you will use
Participants will use industry tools such as Active Directory, QRadar, Palo Alto Firewalls, Zennos, SysInternals, McAfee EPO, and more.
What you can expect from Defender 302: Security Operations and Network Monitoring
DEF 302 focuses on introducing learning to security operations and defensive cybersecurity practices and making them a first line of defense for organizations. Participants are tasked with responding to three cyberattacks with the use of commercial investigation tools. Each participant will practice spotting indicators of compromise, identifying cyberattacks, mitigation, and recovery from an attack. The range instructor will provide a debrief with full details and more techniques on how to respond to network attacks.
- Upskill current workforce
- Get hands-on with industry tools in virtual labs.
- Perfect for I.T. team expanding responsibilities
- Gain an understanding of network traffic.
- Learn industry tools in virtual labs.
- Taught remotely or in-person
While DEF-302 is recommended for teams, it can be taken as an individual. The course is taught through three instructor-led Purdue Cyber Range scenarios over the course of two days.
Purdue Cyber Range is a virtual testing ground that allows individuals and teams to experience both defensive and offensive cyberattack scenarios. Each scenario is overseen by a Range Master, ensuring your team's experience is as educational as possible.
Network Monitoring: Learn the basics and advanced techniques for monitoring and protecting complex networks.
Incident Response: Understand the foundations of identifying, containing, and recovering from a cyber attack within a network.
Cyber Knowledge: Understand and articulate cyber and information security concepts in technical and non-technical settings.
It is recommended that all of cyberTAP courses be taken on a laptop or PC that runs either Windows or Linux as an operating system. We also recommended to have a fast and reliable internet access.