What you'll learn?
- Check security alerts from IDS, antivirus, firewall and system sources and decide what each one means
- Check that security tools (antivirus, firewall, IDS/IPS, updates) are healthy and route vendor notices
- Verify alerts by reviewing logs and packets, and tell true positives from false positives
- Classify, escalate, track and follow up cases in a ticketing system
- Write clear alert and incident reports with the right severity, impact and confidentiality marking
- Plan an authorized vulnerability scan: schedule, scope, approvals and coordination
- Run vulnerability scans safely with Nmap and OpenVAS, and monitor their progress
- Classify scan findings by severity and write a vulnerability scan report
Description
Course content
- Welcome to Cyber Threat Monitoring I Enroll to access
- Your schedule: computer lab and online sessions Enroll to access
- Meet Bagwis Freight Corporation and the Cyber Lab Enroll to access
- How you are assessed Enroll to access
- LO1. Follow routine spoken messages Enroll to access
- LO2. Perform workplace duties following written notices Enroll to access
- Written test: Receiving and Responding to Workplace Communication Enroll to access
- LO1. Develop effective workplace relationships Enroll to access
- LO2. Contribute to work group activities Enroll to access
- Written test: Working with Others Enroll to access
- LO1. Identify the problem Enroll to access
- LO2. Assess fundamental causes of the problem Enroll to access
- LO3. Determine corrective action Enroll to access
- LO4. Communicate action plans and recommendations to routine problems Enroll to access
- Written test: Solving/Addressing Routine Problems Enroll to access
- LO1. Set personal and career goals Enroll to access
- LO2. Recognize emotions Enroll to access
- LO3. Describe oneself as a learner Enroll to access
- Written test: Enhancing Self-Management Skills Enroll to access
- LO1. Identify the need for innovation in one's area of work Enroll to access
- LO2. Recognize innovative and creative ideas Enroll to access
- LO3. Support individuals' access to flexible and innovative ways of working Enroll to access
- Written test: Supporting Innovation Enroll to access
- LO1. Identify and gather needed information Enroll to access
- LO2. Search for information on the internet or an intranet Enroll to access
- LO3. Examine information Enroll to access
- LO4. Secure information Enroll to access
- LO5. Manage information Enroll to access
- Written test: Accessing and Maintaining Information Enroll to access
- LO1. Identify relevant occupational safety and health policies and procedures Enroll to access
- LO2. Perform relevant occupational safety and health procedures Enroll to access
- LO3. Comply with relevant occupational safety and health policies and standards Enroll to access
- Written test: Following Occupational Safety and Health Policies and Procedures Enroll to access
- LO1. Identify environmental work hazards Enroll to access
- LO2. Follow environmental work procedures Enroll to access
- LO3. Comply with environmental work requirements Enroll to access
- Written test: Applying Environmental Work Standards Enroll to access
- LO1. Determine entrepreneurial mindset Enroll to access
- LO2. Identify entrepreneurial practices Enroll to access
- Written test: Adopting Entrepreneurial Mindset in the Workplace Enroll to access
- LO1. Assess quality of received materials Enroll to access
- LO2. Assess own work Enroll to access
- LO3. Engage in quality improvement Enroll to access
- Written test: Applying Quality Standards Enroll to access
- LO1. Plan and prepare for task to be undertaken Enroll to access
- LO2. Input data into computer Enroll to access
- LO3. Access information using computer Enroll to access
- LO4. Produce/output data using computer system Enroll to access
- LO5. Maintain computer equipment and systems Enroll to access
- Written test: Performing Computer Operations Enroll to access
- LO1. Check for alerts Enroll to access
- Cyber Lab: Alert triage — day shift queue Enroll to access
- LO2. Check status of third-party security solution Enroll to access
- Cyber Lab: Security tools health check Enroll to access
- LO3. Perform manual checking and verification Enroll to access
- Cyber Lab: Investigate the noisy login (packets and logs) Enroll to access
- Cyber Lab: Investigate data leaving at night (packets and logs) Enroll to access
- LO4. Conduct case follow up Enroll to access
- Cyber Lab: Ticket desk — follow up a malware case Enroll to access
- LO5. Perform alert reporting Enroll to access
- Cyber Lab: Incident report — compromised VPN account Enroll to access
- Lab task sheets (face-to-face): Monitoring and Reporting Cyber Threats Enroll to access
- Written test: Monitoring and Reporting Cyber Threats Enroll to access
- LO1. Check schedule for scanning Enroll to access
- Cyber Lab: Plan an authorized vulnerability scan Enroll to access
- LO2. Conduct scanning of assets Enroll to access
- Cyber Lab: Run the vulnerability scan safely Enroll to access
- LO3. Provide report for scanning Enroll to access
- Cyber Lab: Classify findings and write the scan report Enroll to access
- Lab task sheets (face-to-face): Conducting Vulnerability Scanning Enroll to access
- Written test: Conducting Vulnerability Scanning Enroll to access
- Preparing for your institutional assessment Enroll to access
- Comprehensive written test (institutional assessment) Enroll to access
Requirements
- Basic computer operation skills
- Fundamental knowledge of networking concepts and a basic understanding of operating systems
- Interest in cyber security and willingness to learn technical skills
- A laptop or desktop computer with internet access for the online sessions (the Cyber Lab simulators need a screen at least 1024 pixels wide)
- Attendance at the face-to-face sessions in the computer laboratory, Communityline Pampanga Central Campus
Frequently asked questions
No. This is the training program of Communityline Development Corporation under TESDA's Enterprise-Based Education and Training (EBET) program. Your trainer assesses each unit of competency during the program. Any TESDA assessment or certificate is a separate step handled by TESDA.
120 hours, made up of your face-to-face sessions in the computer laboratory, your scheduled online days, and self-paced time on this LMS. Time you spend actively working on lessons, quizzes and simulators outside your scheduled sessions is recorded automatically and counts toward the 120 hours. The two core units, Monitor and report cyber threats (32 hours) and Conduct vulnerability scanning (50 hours), take most of the time.
They are practice tools built into this course: a SOC alert console, a packet and log investigator, a ticket desk and a vulnerability scan lab. They copy the tools and data of a fictional company, so you can practise safely. Each one is graded automatically and your attempts are kept as evidence for your trainer.
Yes. In the face-to-face sessions you use Wireshark, Suricata, Snort, osTicket, Microsoft Defender, Windows Defender Firewall, and Nmap and OpenVAS on Kali Linux in VirtualBox, following the lab task sheets, and only inside the isolated lab network.
Trainees accepted into the Cyber Threat Monitoring I program. Your account is created and enrolled by the training staff.
Students also bought
About the instructor
- 26 Students
- 0 Reviews
- 3 Courses
- View all Courses
Student feedback
No approved reviews yet. Enrolled students can be the first to leave feedback.
Reviews
Add a Review
Free
Enrolment is arranged by your administrator or organization coordinator.
Get access helpSecure checkout and lifetime course access
This course includes
- 73 lessons
- Information sheets, Cyber Lab simulators, lab task sheets
- Revisit enrolled course content
Course Features
- Lectures 73
- Resources Information sheets, Cyber Lab simulators, lab task sheets
- Language English
- Skill level
- Students 0
- Certificate No
- Progression Flexible
More Courses by Jeremiah Phillippe
Become an Instructor, Share your knowledge
Create an online course, guide learners, and grow your teaching business.