Get modern blue team skills for finding covert threats in enterprise networks.
InstructorVonnie HudsonInstruction covers essential security tools including Zeek, RITA, and Suricata for network traffic analysis.
The curriculum includes practical applications of adversary emulation using Atomic Red Team, Caldera, and Prelude Operator.
Editorial course preview
These 4 complementary views highlight concrete, legible examples from the course presentation.
The instructor demonstrates the Splunk interface, specifically highlighting the Select Fields panel used for configuring data analysis views.
The image displays a presenter alongside a Wireshark interface showing detailed HTTP stream data and highlighted packet rows for network traffic inspection.
An instructor is shown alongside a terminal window displaying command-line output and data logs relevant to cybersecurity threat hunting analysis.
The presenter introduces the Velociraptor tool for memory forensics, displaying its official logo alongside his introduction.
The DetectionLab setup and required Ubuntu repositories are reported as no longer functional, preventing the construction of the primary learning environment.
Critical tools like RITA and MongoDB exhibit version mismatches that break the intended installation workflows.
Instructional progression may feel rapid, occasionally skipping necessary technical details for certain procedures.
The content aligns with the target audience of SOC analysts, but technical barriers and a Windows-centric approach may limit its accessibility.
