COURSE 038 · Professional
Security operations and blue team
Free cybersecurity education for anyone who wants to protect people and technology. Study published lessons, examples and exercises without creating an account.
Loading this course…
Published lessons in this course
Each link opens the complete lesson on its own permanent page. New manuscript edits appear there after publication.
EN · 0 daily lessons · 12 full chapters
Chapter 1: Chapter 1 — Security operations for working professionalsChapter 2: Chapter 2 — Governance and authorityChapter 3: Chapter 3 — Log sources and coverageChapter 4: Chapter 4 — Detection with ATT&CK and SigmaChapter 5: Chapter 5 — Triage and the alert pipelineChapter 6: Chapter 6 — Working with a managed security providerChapter 7: Chapter 7 — Measuring and tuning detectionsChapter 8: Chapter 8 — Incident response planningChapter 9: Chapter 9 — Investigation and timelinesChapter 10: Chapter 10 — Metrics and reporting to the boardChapter 11: Chapter 11 — Maturity and continuous improvementChapter 12: Chapter 12 — Capstone: the first year in review
COURSE 038
Security operations and blue team
Loading the current book and lesson guide…
View worked answers
YOUR PROGRESS · OPTIONAL
Save this lesson
Reading is open without an account. Saving progress with optional sign-in will be added later.