🔵
Advanced COURSE

Blue Team Defense

Detect and stop the same behaviors studied in the red-team curriculum.

01

Detection Engineering

logs, alerts and signatures

02

Snort Investigation

analyze network alerts

03

Host Investigation

find suspicious activity

04

Containment

isolate affected systems

05

Recovery

restore and harden systems