The ISACA Cybersecurity: Threat Hunting Online Course guides learners through the different phases of a threat hunt. Throughout this course you’ll learn about the different types of cyber threats, how to conduct proactive threat hunting, and how to investigate/respond to potential incidents. Through skills-based labs you’ll learn about the various tools and technologies used in threat hunting as well as how to use them effectively.
At the completion of this course, learners will be able to:
- Define threat hunting
- Explain why threat hunting is important
- Understand the importance of threat hunters working with other teams (incident response, forensics, detection)
- List the skills needed to hunt threats
- Explain where threats are usually found
- Describe a common attack scenario
- Explain the importance of visibility in the environment
- List and briefly describe the phases of a threat hunt
- Explain what can be found in memory
- Describe the memory forensics process
- Describe Dumplt and Volatility
- Recognize useful plugins for Volatility
- Explain why it is important to hunt for threats in a network
- Describe what to examine when threat hunting in a network
- List common tools for threat hunting in a network
- Describe Windows PowerShell and why it is used in threat hunting
- Explain how Windows PowerShell works
- Use cmdlets to perform tasks and find information
- List the types of evasion techniques
- List common tools threat actors use to evade detection
This course includes seven performance-based labs. A performance-based lab places the learner in a virtual environment where they execute common tasks to complete the lab objective. Each lab includes set-up information and learning aids to help guide learners through the lab.
Labs included in this course:
- Exploitation
- Memory Forensics
- Network Forensics
- Creating and Investigating Browser Attacks
- Utilizing Wireshark for PCAP Examination
- Threat Hunting with Powershell
- Covert Communications Examination
Learners will have access to the course for six months from date of purchase and will earn 12 CPEs upon completion. This course has a seat time of approximately 10 hours and is accessed via the Learning Access tab of your MyISACA dashboard.
Cancellation/Refund Policy
All purchases of online learning courses are final. Access to the online learning courses and materials is immediate upon purchasing; therefore no refunds or exchanges will be provided. Prices subject to change without notice.