Advanced Intrusion DetectionLearn the methodology behind intrusion detection and craft detection rules and logic.
What you will learnThis learning path begins with an overview of intrusion detection and then dives into the data required to build various detection use cases and various open-source tools and frameworks for building and tuning your detections. Throughout the path, we will review the various aspects and frameworks that comprise intrusion detection techniques (network- and host-based) and explore real world use-cases and examples of detection methodology. At the end of this path, you will have the necessary skills to craft meaningful detections that can aid in identifying malicious activity within your organization's environment.
Advanced Intrusion Detection Skill Assessment
Assessment - 45 questions
Intrusion detection techniques and methods
Course - 00:51:00
Home Lab Setup
Course - 01:09:00
Network- versus host-based detection
Course - 00:39:00
Course - 00:34:00
The ATT&CK Matrix and threat intel
Course - 00:36:00
Course - 01:08:00
Course - 00:52:00
Advanced detection through deception technology
Course - 00:34:00
Advanced Intrusion Detection project
Course - 02:20:00
Learning path insights
How to claim CPEs
Should you complete this learning path, you’ll be able to download a certificate of completion. Use this to claim your CPEs or CPUs.
Associated NICE Work Roles
All Infosec training maps directly to the NICE Workforce Framework for Cybersecurity to guide you from beginner to expert across 52 Work Roles.
- All-Source Analyst
- Mission Assessment Specialist
- Exploitation Analyst
No software. No set up. Unlimited access.
Skip the server racks and spin up a realistic environment with one click. Infosec Skills cyber ranges require no additional software, hardware or server space so your team can spend less time configuring environments and more time learning. Unlimited cyber range access is included in every Infosec Skills subscription so your team can skill up however they learn best.
Plans & pricing
- Team administration and reporting
- Dedicated client success manager
Single sign-on (SSO)
Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
Integrations via API
Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
- 190+ role-guided learning paths and assessments (e.g., Incident Response)
- 100s of hands-on labs in cloud-hosted cyber ranges
- Create and assign custom learning paths
- Custom certification practice exams (e.g., CISSP, CISA)
- Optional upgrade: Guarantee team certification with live boot camps