Introduction

This module will cover the principles and techniques of defensive security, also known as "Blue Teaming". Students will learn about different types of defensive security technologies and processes, such as firewalls, intrusion detection and prevention, incident response, and security information and event management (SIEM).

Learning Objectives

  • Identify and explain the importance of defensive security technologies and processes

  • Describe the principles of firewalls and their role in network security

  • Analyze and evaluate different intrusion detection and prevention technologies

  • Explain the incident response process and the role of the incident response team

  • Analyze and evaluate different SIEM solutions and their use in enterprise security

Topics Covered

  1. Defensive Security Overview

  2. Firewalls

  3. Intrusion Detection and Prevention

  4. Incident Response

  5. Security Information and Event Management (SIEM)

By the end of this module, students should have a solid understanding of the principles and techniques of defensive security and be able to identify and implement different defensive security technologies and processes.

Last updated