CompTIA CASP+: Monitoring & Incident Response

CompTIA CASP+    |    Intermediate
  • 15 Videos | 1h 34m 13s
  • Includes Assessment
  • Earns a Badge
Enterprise IT monitoring is crucial in detecting potential security incidents. In this course, you'll explore various monitoring methods for hosts, devices, and networks. Next, you'll learn to configure log forwarding and work with logs through PowerShell. Moving on, you'll learn to recognize when to use honeyfiles, honeypots, and honeynets, as well as SIEM and SOAR solutions. You’ll then examine intrusion detection and prevention and how they are used to secure a network. Lastly, you'll explore the use of tools such as Snort, tcpdump, nmap, and Wireshark for analyzing networks and network traffic. This course is one of a collection of courses that prepares learners for the CompTIA Advanced Security Practitioner (CASP+) CAS-004 exam.

WHAT YOU WILL LEARN

  • discover the key concepts covered in this course
    identify the various levels of IT monitoring
    enable syslog forwarding in Linux
    manage Windows logs using the GUI
    manage cloud-based logging
    differentiate between honeynets, honeypots, and honeyfiles
    describe how IDS and IPS are used to secure a network
    install Snort IDS
  • test Snort IDS rules
    recognize reasons for using SIEM and SOAR solutions
    use tcpdump to capture network traffic
    use Wireshark to filter captured network traffic
    use nmap to discover hosts and network services
    use packettotal.com to analyze packets
    summarize the key concepts covered in this course

IN THIS COURSE

  • Playable
    1. 
    Course Overview
    1m 37s
    UP NEXT
  • Playable
    2. 
    Host, Device, and Network Monitoring
    9m 25s
  • Locked
    3. 
    Enabling Linux Syslog Forwarding
    6m 14s
    FREE ACCESS
  • Locked
    4. 
    Managing Windows Event Viewer Logs
    5m 21s
    FREE ACCESS
  • Locked
    5. 
    Managing Cloud Logging and Alerts
    7m 10s
    FREE ACCESS
  • Locked
    6. 
    Honeynets, Honeypots, and Honeyfiles
    4m 51s
    FREE ACCESS
  • Locked
    7. 
    Intrusion Detection and Prevention
    9m 22s
    FREE ACCESS
  • Locked
    8. 
    Installing the Snort IDS
    5m 52s
    FREE ACCESS
  • Locked
    9. 
    Testing the Snort IDS
    4m 11s
    FREE ACCESS
  • Locked
    10. 
    SIEM and SOAR
    5m 31s
    FREE ACCESS
  • Locked
    11. 
    Network Traffic Capture Using tcpdump
    5m 34s
    FREE ACCESS
  • Locked
    12. 
    Network Traffic Filtering Using Wireshark
    7m 27s
    FREE ACCESS
  • Locked
    13. 
    Using nmap For Network Reconnaissance
    6m 40s
    FREE ACCESS
  • Locked
    14. 
    Analyzing Packet Captures for Malicious Activity
    7m 22s
    FREE ACCESS
  • Locked
    15. 
    Course Summary
    1m 5s
    FREE ACCESS

EARN A DIGITAL BADGE WHEN YOU COMPLETE THIS COURSE

Skillsoft is providing you the opportunity to earn a digital badge upon successful completion of this course, which can be shared on any social network or business platform

Digital badges are yours to keep, forever.

YOU MIGHT ALSO LIKE

COURSE CompTIA CASP+: Assessing & Managing Risk
COURSE CompTIA CASP+: Mobile & Embedded Devices
COURSE CompTIA CASP+: Vulnerabilities & Hardening