Blue Team Penetration Testing Hands on Workshop

When you’re on the blue team, you are familiar with and implement defensive tools known as detection systems. Blue team members need to be familiar with the following defensive tools:

• Wireshark – lets you see what’s happening on your network at a microscopic level
• Security information and event management (SIEM) tools – provide real-time analysis of security alerts generated by applications and network hardware

After completing this course, you will be able to:

• Identify type of attacks
• Identify intrusions on the systems
• Identify and block the attacks before they succeed
• Activate run books for incident response
• Stay alert for reactive or preventive action
• Train the physical security teams for identity spoof
• Enhance security standards
• Activate the containment of attacked systems
• Logs and SIEM Config/Alerts
• Security awareness training
• Check on domain expirations
• Email filters, threshold, and spam rules
• Two-factor authentication
• Deny long relay request
• Application whitelisting
• Manage keys securely