Networks, logs and incident response
The next step for someone who has the essentials and wants an analyst role. Covers TCP/IP in practice, firewalls, reading logs, detection with open-source tooling, and running an incident end to end with a written report.
6 modules · 29 lessons · taught with Wireshark, pfSense, Wazuh, Linux
About 12 hours: 11 hours 20 minutes of lessons, including their exercises, plus 60 minutes for the assessment.
What you will be able to do
- Explain and inspect network traffic with Wireshark
- Configure a firewall and read its logs
- Detect common intrusions in logs
- Run and document an incident from alert to report
On completion
Codality verified certificate: Security Operations, issued to your profile and shareable with one link.
Modules
- 01Free
Networks in practice
6 lessons · 130 min
- 02Plus
Firewalls and segmentation
5 lessons · 110 min
- 03Plus
Logs and detection
7 lessons · 170 min
- 04Plus
Incident response
6 lessons · 150 min
- 05Plus
Capstone: a tabletop exercise
4 lessons · 120 min
- 06Plus
Assessment
1 lesson · 60 min
Also on the Security track