Unit 1: Intelligence Driven Operations

• Module 1.1: Intelligence Operations Overview

  • Planning/Direction

  • Intelligence Driven Operations

  • Collection and Exploitation

  • Analysis and Reporting

• Module 1.2: Cyber Risk Analysis

  • Analyzing your Target Network

  • System Baselining

  • Determining Likelihood & Impact

• Module 1.3: Threat Modeling

  • Threat Modeling and Gap Analysis

  • Recon & Enumeration

  • Intrusion, Persistence & Escalation

  • Actions on the Objective

  • Motives and Opportunities (Vulnerabilities)

Unit 2: Channeling the Adversary

• Module 2.1:Historic Attacks

  • Attack Analysis

    • Campaign phases (opportunities for action)

  • Operationalizing Hindsight

  • Introduction to Ethical Hacking

    • Penetration Testing

    • Exploits and Red Teaming

• Module 2.2: Actioning the Avenue of Approach

  • Testing Current Defenses

  • Pivoting the Attack Campaign

  • Bypassing Defensive Measures

• Module 2.3: Introduction to Malware Analysis

  • Orientation

  • Sandboxing

  • Content and String Analysis

Unit 3: Closing in on the Adversary

• Module 3.1: Targeted Risk Treatment

  • • Prevention

  • Whitelisting/Group Policies

  • Attack Phase Prevention

    • OS Specific Threat Hunting

    • Detection

  • Traffic Analysis

• Module 3.2: Introduction to Threat Hunting

  • Operational Overview

    • Tools and VMs

  • OS Specific Threat Hunting

  • Hunting on the Network

    • Networking Overview: Protocols and Data

    • Log Analysis vs. Active Data

    • Centralized Logging

• Module 3.3: Platforms and Reporting

  • Operations Notes

    • Hotwash/After Action

  • Reporting

    • Platforms vs Traditional