Conducting Threat Hunting and Defending Using Cisco Technologies for CyberOps (CBRTHD) Course Overview

The Conducting Threat Hunting and Defending using Cisco Technologies for CyberOps (CBRTHD) course covers the theory and practice of threat hunting, including various methodologies, frameworks like MITRE ATTACK, and procedures for both network-based and endpoint-based threat hunting. The course teaches how to conduct threat investigations, using Cisco tools such as Cisco Secure Firewall, Cisco Secure Network Analytics, and Splunk. Key labs include tasks like modeling threats, performing threat analysis searches, analyzing network traffic, and endpoint forensics with tools like Velociraptor and PowerShell. Participants will also learn to prioritize and emulate adversary tactics using frameworks like MITRE ATTACK and D3FEND.