.jpg){kind=logo}
AIUS-CYB-400-V2.AE2
CYB-400 Cybersecurity Operations Incident Response & Digital Forensics
Intermediate Self-paced · 1 year access
54 Hands-On LiveLabs
Practice real IT tasks in guided environments.
- Real environments
- Auto-graded
- No installation
01 / Lessons & labs
See exactly what you will learn and practice
Lessons
5 Interactive Lessons · 64 topics01 Security Operations 20 topics · 18 LiveLab +
- Cybersecurity Objectives
- Privacy vs. Security
- Evaluating Security Risks
- Building a Secure Network
- Secure Endpoint Management
- Penetration Testing
- Reverse Engineering
- Efficiency and Process Improvement
- The Future of Cybersecurity Analytics
- Infrastructure Concepts and Design
- Operating System Concepts
- Logging, Logs, and Log Ingestion
- Network Architecture
- Identity and Access Management
- Federation
- Encryption and Sensitive Data Protection
- Analyzing Network Events
- Investigating Host-Related Issues
- Investigating Service- and Application-Related Issues
- Determining Malicious Activity Using Tools and Techniques
18 LiveLab in this lesson — see the labs panel →
02 Threat Intelligence, Reconnaissance and Intelligence Gathering 5 topics · 13 LiveLab +
- Threat Data and Intelligence
- Threat Classification
- Applying Threat Intelligence Organizationwide
- Mapping, Enumeration, and Asset Discovery
- Passive Discovery
13 LiveLab in this lesson — see the labs panel →
03 Vulnerability Scans Management 8 topics · 14 LiveLab +
- Identifying Vulnerability Management Requirements
- Configuring and Executing Vulnerability Scans
- Developing a Remediation Workflow
- Overcoming Risks of Vulnerability Scanning
- Vulnerability Assessment Tools
- Reviewing and Interpreting Scan Reports
- Validating Scan Results
- Common Vulnerabilities
14 LiveLab in this lesson — see the labs panel →
04 Incident Response and Management 18 topics · 2 LiveLab +
- Analyzing Risk
- Managing Risk
- Implementing Security Controls
- Threat Classification
- Managing the Computing Environment
- Software Assurance Best Practices
- Designing and Coding for Security
- Software Security Testing
- Policies, Governance, and Service Level Objectives
- Security Incidents
- Phases of Incident Response
- Building the Foundation for Incident Response
- Creating an Incident Response Team
- Classifying Incidents
- Attack Frameworks
- Indicators of Compromise
- Investigating IoCs
- Evidence Acquisition and Preservation
2 LiveLab in this lesson — see the labs panel →
05 Reporting and Communication 13 topics · 7 LiveLab +
- Containing the Damage
- Incident Eradication and Recovery
- Validating Data Integrity
- Wrapping Up the Response
- Vulnerability Management Reporting and Communication
- Incident Response Reporting and Communication
- Building a Forensics Capability
- Understanding Forensic Software
- Conducting Endpoint Forensics
- Network Forensics
- Cloud, Virtual, and Container Forensics
- Post-Incident Activity and Evidence Acquisition
- Forensic Investigation: An Example
7 LiveLab in this lesson — see the labs panel →
Hands-On Labs Our edge
54 LiveLabs- Creating a Firewall Rule
- Setting Up a Honeypot on Kali Linux
- Enforcing Password Policies
- Installing Docker
- Exporting the Windows File Registry
- Installing the AD FS Role
- Examining PKI Certificates
- Performing a DoS Attack with the SYN Flood
- Confirming the Spoofing Attack in Wireshark
- Using Performance Monitor
- Performing a Memory-Based Attack
- Using Social Engineering Techniques to Plan an Attack
- Capturing a Packet Using Wireshark
- Examining Audited Events
- Enabling Logging for Audited Objects
- Using TCPdump to Capture Packets
- Analyzing Malware Using Virustotal
- Using Command-line Tools
- Using the hping Program
- Scanning the Local Network
- Performing an Intense Scan in Zenmap
- Using Shodan to Find Webcams
- Using Recon-ng to Gather Information
- Identifying Search Options in Metasploit
- Performing Reconnaissance on a Network
- Footprinting a Website
- Using the whois Program
- Using nslookup for Passive Reconnaissance
- Making Syslog Entries Readable
- Using the netstat Command
- Performing Zone Transfer Using dig
- Using OWASP ZAP
- Consulting a Vulnerability Database
- Conducting Vulnerability Scanning Using Nessus
- Using Nikto
- Performing Vulnerability Scanning Using OpenVAS
- Performing Session Hijacking Using Burp Suite
- Detecting Rootkits
- Exploiting LFI and RFI Vulnerabilities
- Exploiting a Website Using SQL Injection
- Conducting CSRF Attacks
- Defending Against a Buffer Overflow Attack
- Understanding Local Privilege Escalation
- Performing a MITM Attack
- Attacking a Website Using XSS Injection
- Examining MITRE ATT&CK
- Creating a Forensic Image with FTK Imager
- Using EnCase Imager
- Observing an MD5-Generated Hash Value
- Observing a SHA256-Generated Hash Value
- Analyzing Forensics with Autopsy
- Cracking Passwords Using Cain and Abel
- Finding Hard Drives on the System
- Completing the Chain of Custody
Labs run in your browser — nothing to install.
02 / FAQs
Questions before you start
Prepare for CYB-400 Cybersecurity Operations Incident Response & Digital Forensics
One-time payment. Full access for 1 year. Start with a free trial if you want to look around first.
- 1 year of full access
- 54 LiveLab included
- Certificate of completion
No credit card required