Cyber Defense Analyst Program

Learning Modules

Check out our modules and screenshots of course content below. You can also find the full syllabus here to get a complete breakdown of what's covered: Cyber Defense Analyst Program Syllabus (LINK)

• Network Traffic Analysis

  Engage with the intricacies of network layers, dissecting DNS functionality, HTTP & HTTPS protocols, and TLS/SSL encryption mechanisms. Gain proficiency in utilizing advanced Wireshark techniques and analyzing packet captures to identify security breaches and network inefficiencies.

• Email Security

  Delve into advanced email security protocols and threat analysis, including in-depth SMTP mechanics, detailed email header scrutiny, and sophisticated phishing defense strategies. Learn to apply SPF, DKIM, and DMARC authentication to fortify email infrastructure against sophisticated attacks.

• Advanced Windows Triage

  Master advanced Windows internals, exploring API interactions, process lifecycle management, and registry structures. Enhance your skills in identifying malicious activities through memory analysis, thread inspection, and security descriptor evaluation within Windows environments.

• Log Analysis

  Elevate your skills in forensic log analysis and security data interpretation using the ELK stack. Develop expertise in parsing, normalizing, and analyzing complex datasets to uncover hidden threats and perform temporal and geospatial correlation for comprehensive security insights.

• Cyber Threat Intelligence

  Advance your threat intelligence capabilities, utilizing frameworks like MITRE ATT&CK and tools such as OpenCTI for in-depth threat analysis and reporting. Craft actionable intelligence by integrating diverse data sources and employing structured analytical techniques.

• Adversary Tactics & Vulnerability Management

  Explore advanced offensive cybersecurity techniques, including system exploitation, living off the land binaries and scripts (LOLBAS), and post-exploitation tactics. Train to recognize and mitigate sophisticated cyber-attacks, simulating real-world adversary strategies and defense evasion methods.

• Virtual SOC

  Immerse yourself in a simulated Security Operations Center environment, handling real-time alerts, triaging incidents, and responding to a variety of cyber threats. Apply comprehensive cybersecurity concepts in a controlled, realistic setting to prepare for high-stakes SOC operations.

• Detection Engineering

  Refine your detection engineering skills, mastering endpoint detection and response (EDR) strategies with Osquery and SigmaHQ. Dive into the technical nuances of crafting and tuning Yara rules for malware identification and simulating adversary tactics for robust detection infrastructure.

• Digital Forensics & Incident Response (DFIR)

  Develop advanced incident response skills, from forensic analysis using Velociraptor to intricate log investigation with tools like Hayabusa and Volatility. Systematically approach incident management, from initial detection to containment, eradication, and recovery, aligning with industry-standard frameworks.

• Live SOC Triage Events

  These will be exclusive live events to CDA Students only, a monthly basis where we'll throw you into even more advanced scenarios to work together as Analysts and respond to greater threats. More details to come.