Incident Response and Cyber Forensics
This program equips SOC analysts, incident responders, forensic investigators, and security operations professionals with the operational frameworks and investigative skills required to detect, analyze, contain, and recover from cybersecurity incidents. You will begin by exploring security monitoring principles, SIEM correlation workflows, and endpoint telemetry analysis to transform alerts into structured investigations. Through applied demonstrations, you will learn how to differentiate baseline activity from malicious behavior and interpret abnormal network patterns. Building on monitoring
Skills you'll learn
We may earn a commission if you enroll through our links — it never affects the price you pay.
Similar courses
Splunk Knowledge Manager 101
This course will introduce you to the basics of machine data, Splunk’s architecture, and how to navigate the Splunk Web interface. You will gain fundamental knowledge for defining, creating, and using fields in searches. You will learn about the different types of knowledge objects and how to create knowledge objects including event types, workflow actions, tags, aliases, search macros, and calculated fields.
All levels
Governance and Compliance Management
This course covers the foundational governance and compliance tasks every AI program leader needs to perform. You’ll assign AI governance accountability using a RACI matrix, benchmark existing policies against Microsoft’s Responsible AI Standard v2, manage a live remediation backlog, apply ISO/IEC 42001 controls, assess audit evidence for SOC 2 readiness, author AI security policy, and evaluate policy exception requests—giving you full coverage of the governance and compliance lifecycle. Familiarity with foundational frameworks such as the NIST Cybersecurity Framework, ISO/IEC 27001, and priv
All levels
CyberSec First Responder – Advanced (CFR-A): Analyze
In this course, you will continue your advanced cybersecurity journey by analyzing logs for signs of attack. You'll also detect attacks using active monitoring systems and perform digital forensics to discover evidence of such attacks. These all contribute to the second stage of the overall CFR-A program: Analyze. This is the second course in a multi-course Specialization. All of the courses in this Specialization require that you use the provided virtual machines, which include all of the necessary tools and system configurations for the activity environment. The course setup instructions p
All levels
Introduction to SIEM (Splunk)
This course provides a comprehensive understanding of Security Information and Event Management (SIEM) concepts and practical skills using Splunk as an SIEM solution. You will discover SIEM fundamentals, Splunk architecture, data collection and management, data analysis, and advanced topics such as correlation and incident response. By the end of the course, you will effectively apply Splunk for log analysis, threat detection, and security monitoring. Learning Objectives: Module 1: Introduction to SIEM and Log Management • Recognize SIEM fundamentals and its role in cybersecurity. • Compreh
All levels