Defending your Enterprise Using Security Onion
OVERVIEW
This one-day class will equip students with the necessary skills to properly place network sensors and investigate malicious activity using network and host data in enterprise environments. Students will learn core analyst techniques needed to investigate alerts, determine the scope of an incident, and manage a case using the Security Onion 2 platform.
STUDENT PREREQUISITES
- Students should attend the free 2-hour Security Onion Essentials course before the first day of class using the following link: https://securityonionsolutions.com/training. One topic covered by the Essentials course is building a Security Onion VM.
- Students will need a laptop with a modern browser.
- Students will need to connect to the provided WiFi and access cloud resources in order to do the labs.
- Students do not need to build a Security Onion VM for this class. We will be using a pre-installed lab.
- Students should have a basic understanding of networks, TCP/IP, and standard protocols such as DNS, HTTP, etc.
- Some Linux knowledge/experience is recommended but not required.