Security Operations Fundamentals

Security Operations Fundamentals

In the Security Operations Fundamentals course, students will gain an understanding of Security operations (SecOps) and the role it plays in protecting our digital way of life, for businesses and customers. Students will learn continuous improvement processes to collect high-fidelity intelligence, contextual data, and automated prevention workflows that quickly identify and respond to fast-evolving threats. They will also learn how to leverage automation to reduce strain on analysts and execute the Security Operation Center’s (SOC) mission to identify, investigate, and mitigate threats.

Course objectives:

• Identify the key elements of security operations (SecOps) and describe SecOps processes.
• Configure and test log forwarding for traffic analysis investigation and response.
• Describe SecOps infrastructure including security information and event management (SIEM), analysis tools, and security operations center (SOC) engineering.
• Define security orchestration, automation, and response (SOAR) for SecOps.
• Recognize the major components of the Cortex XDR deployment architecture and explain how it protects endpoints from malware and exploits.
• Review how Cortex XSOAR automates security response actions.
• Explain how SOC teams can leverage Cortex Data Lake to collect, integrate, and normalize enterprise security data with advanced artificial intelligence (AI) and machine learning.
• Outline how Autofocus delivers contextual threat intelligence to SOC teams to enable actionable insight into real-world attacks.
• Configure Minded for threat intelligence gathering and response.

Course Modules

Module 1: Elements and Process of SOC
Module 2: SOC Infrastructure & Automation
Module 3: Advanced Endpoint Protection
Module 4: Threat Prevention & Intelligence
Module 5: Secure the Future (Cortex)

Scope

• Level: Introductory
• Duration: 2 credits – 30 contact hours
• Format: Instructor Led or Self-Paced

Target Audience

Entry level candidates in the Cybersecurity workforce.
Anyone who participates in Internet activities.

Prerequisites

Successful completion of Cloud Security Fundamentals or comparable experience.
Students are expected to have basic Internet and application software skills.

Palo Alto Networks Education

The academic curriculum developed and authorized by Palo Alto Networks Academy and delivered by Palo Alto Networks Academy Partners helps provide the knowledge and expertise that prepare you to protect our digital way of life. Our trusted certifications validate your knowledge of the Palo Alto Networks Security Operating Platform and your ability to help prevent successful cyberattacks and safely enable applications.