Threat Detection and Hunting

Detection engineering and threat hunting with Google Security Operations: YARA-L rules, curated detections, threat intelligence and MITRE ATT&CK mapping.

GCP-382 12 lessons planned ▶ Video lessons coming soon

Offered by HSM University · Google Cloud Certification Prep

Course content

  1. 1Detection engineering principlesComing
  2. 2The MITRE ATT&CK framework for defendersComing
  3. 3Curated detectionsComing
  4. 4Writing YARA-L 2.0 rulesComing
  5. 5Testing and tuning detectionsComing
  6. 6Risk analytics and entity risk scoresComing
  7. 7Applied threat intelligenceComing
  8. 8Hypothesis-driven threat huntingComing
  9. 9Hunting with UDM searchComing
  10. 10Cloud-specific threat scenariosComing
  11. 11Measuring detection coverageComing
  12. 12Lab walkthrough: building and tuning a detectionComing

Requirements

Recommended background. You can start any course at any time.

Description

Detection engineering and threat hunting with Google Security Operations: YARA-L rules, curated detections, threat intelligence and MITRE ATT&CK mapping.