دوره FOR509: Enterprise Cloud Forensics and Incident Response

FOR572 is an advanced course designed for cybersecurity professionals seeking to master network forensics, threat hunting, and incident response. The course focuses on deep packet analysis, intrusion detection, and uncovering adversary activity within large-scale enterprise environments. Participants will learn how to analyze network traffic, identify anomalies, and reconstruct cyber attacks using tools such as Zeek (Bro), Suricata, Wireshark, and Security Information and Event Management (SIEM) solutions.

Syllabus

  1. Microsoft 365 and Graph API
  2. Microsoft Azure
  3. Amazon (AWS)
  4. Google Workspace
  5. Google Cloud
  6. Multi-Cloud Intrusion Challenge