(CBRTHD) Conducting Threat Hunting and Defending using Cisco Technologies for CyberOps
The Conducting Threat Hunting and Defending using Cisco Technologies for CyberOps (CBRTHD) training guides you to a proactive security search through networks, endpoints, and datasets.
Duration
5 days
Version
1.0
CE Credits
40
The Cisco Continuing Education Program enables you to renew your certifications while exploring new learning paths and enhancing your skillset. It's a convenient way to stay certified without retaking exams. Click here to learn more.
CLCs
44
Cisco Learning Credits (CLCs) are prepaid training vouchers that can be used as investment into your knowledge. You can attend NIL Learning’s trainings and pay with CLCs. Click here to learn more.
By default, our instructors deliver the courses remotely in real time in English. On-premise delivery and other languages available on request.
Course Overview
The Conducting Threat Hunting and Defending using Cisco Technologies for CyberOps (CBRTHD) training is a 5-day Cisco threat hunting training that introduces and guides you to a proactive security search through networks, endpoints, and datasets to hunt for malicious, suspicious, and risky activities that may have evaded detection by existing tools. In this training, you will learn the core concepts, methods, and processes used in threat hunting investigations. This training provides an environment for attack simulation and threat hunting skill development using a wide array of security products and platforms from Cisco and third-party vendors.
This training prepares you for the 300-220 CBRTHD exam. If passed, you earn the Cisco Certified Specialist – Threat Hunting and Defending certification and satisfy the concentration exam requirement for the Cisco Certified CyberOps Professional certification. This training also earns you 40 credits towards recertification.
This training will help you:
- Learn how to perform a proactive security search through networks, endpoints, and datasets to hunt for malicious, suspicious, and risky activities that may have evaded detection by existing tools
- Gain leading-edge career skills focused on cybersecurity
- Prepare for the 300-220 CBRTHD exam
- Earn 40 CE credits toward recertification
Course Instructor Welcome Message
Welcome to Your Path to Mastery!
Welcome aboard! This course is tailored to empower you with the knowledge and skills you need. We'll make learning engaging and fun, turning your challenges into achievements. Let's get started on your amazing journey!
Robert Lesar
Lead Instructor
Dates and Prices
| Date | Language | Location | Price|
|
|
|---|---|---|---|---|
|
24.03.2025 - 28.03.2025 |
English |
Online, GMT+1 |
2780 € 2810 $ |
Book now |
|
06.10.2025 - 10.10.2025 |
English |
Online, GMT+2 |
2780 € 2810 $ |
Book now |
| All prices exclude VAT. |
All prices exclude VAT.
Cisco Learning Credits (CLCs) are prepaid training vouchers that can be used as investment into your knowledge. You can attend NIL Learning’s trainings and pay with CLCs. Click to learn more.
Objectives
- Define threat hunting and identify core concepts used to conduct threat hunting investigations
- Examine threat hunting investigation concepts, frameworks, and threat models
- Define cyber threat hunting process fundamentals
- Define threat hunting methodologies and procedures
- Describe network-based threat hunting
- Identify and review endpoint-based threat hunting
- Identify and review endpoint memory-based threats and develop endpoint-based threat detection
- Define threat hunting methods, processes, and Cisco tools that can be utilized for threat hunting
- Describe the process of threat hunting from a practical perspective
- Describe the process of threat hunt reporting
Who should enroll?
- Security Operations Center staff
- Security Operations Center (SOC) Tier 2 Analysts
- Threat Hunters
- Cyber Threat Analysts
- Threat Managers
- Risk Managements
Course benefits:
Get expert knowledge
Our learning programs are designed and led by expert IT engineers, consultants, and instructors. We constantly implement participants’ feedback to improve courses.
Our experiences build your competencies
With 30+ years of experience, we’ve been on the market as long as Cisco. Our understanding of IT systems and industry job demands gives us the insight to guide you toward becoming a world-class expert yourself.
Rise above the industry average
Cisco courses are intended not only for passing the certification exam but also for developing your skills and rising above the industry average. Our instructors provide guidance and references that allow you to grow into a confident and competent professional.
Retain the knowledge longer
Our in-depth, non-interrupted learning program ensures you understand the bigger picture and retain the knowledge long term. It also reduces the risk of information loss and confusion.
Learn from the best in Cisco technologies
Our IT consultants-turned-instructors have years of experience and dedicate time to listening and interacting with participants within the course content. Their hands-on project involvement brings practical expertise to our learning programs.
Have peace of mind
We deliver on our promise and schedule. Rest assured, our instructors will give you knowledge, information, hints, and practical experiences around specific topics. Based on a global survey conducted by Cisco, NIL Learning instructors enjoy an average score of 4.91 out of 5.
Be ahead of the curve
As Cisco Platinum Learning Partner and technical community member, we create learning content for major technological vendors. NIL Learning is among the first to offer high-quality learning and training courses in Cisco Technologies.
Get more from a training
Our instructors deliver the courses with practical and useful examples from real-life situations. All NIL Learning instructors are field-proven experts – each both an active engineer and instructor.
Courses delivered by experts for experts in the making.
Among the first to offer training on newly arrived Cisco technologies
Part of Conscia, leading European IT solutions and services provider
A tech powerhouse with 30+ years of training & field experience
Industry-acclaimed, broadly expertised, and technically proficient
Connecting you with future trusted industry advisors
Course Outline
- Threat Hunting Theory
- Threat Hunting Concepts, Frameworks, and Threat Models
- Threat Hunting Process Fundamentals
- Threat Hunting Methodologies and Procedures
- Network-Based Threat Hunting
- Endpoint-Based Threat Hunting
- Endpoint-Based Threat Detection Development
- Threat Hunting with Cisco Tools
- Threat Hunting Investigation Summary: A Practical Approach
- Reporting the Aftermath of a Threat Hunt Investigation
Lab Outline
- Categorize Threats with MITRE ATTACK Tactics and Techniques
- Compare Techniques Used by Different APTs with MITRE ATTACK Navigator
- Model Threats Using MITRE ATTACK and D3FEND
- Prioritize Threat Hunting Using the MITRE ATTACK Framework and Cyber Kill Chain
- Determine the Priority Level of Attacks Using MITRE CAPEC
- Explore the TaHiTI Methodology
- Perform Threat Analysis Searches Using OSINT
- Attribute Threats to Adversary Groups and Software with MITRE ATTACK
- Emulate Adversaries with MITRE Caldera
- Find Evidence of Compromise Using Native Windows Tools
- Hunt for Suspicious Activities Using Open-Source Tools and SIEM
- Capturing of Network Traffic
- Extraction of IOC from Network Packets
- Usage of ELK Stack for Hunting Large Volumes of Network Data
- Analyzing Windows Event Logs and Mapping Them with MITRE Matrix
- Endpoint Data Acquisition
- Inspect Endpoints with PowerShell
- Perform Memory Forensics with Velociraptor
- Detect Malicious Processes on Endpoints
- Identify Suspicious Files Using Threat Analysis
- Conduct Threat Hunting Using Cisco Secure Firewall, Cisco Secure Network Analytics, and Splunk
- Conduct Threat Hunt Using Cisco XDR Control Center and Investigate
- Initiate, Conduct, and Conclude a Threat Hunt
Prerequisite Knowledge
The knowledge and skills you are expected to have before attending this training are:
- General knowledge of networks
- Cisco CCNP Security certification
These skills can be found in the following Cisco Learning Offerings:
- Implementing and Administering Cisco Solutions (CCNA)
- Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)
- Performing CyberOps Using Cisco Security Technologies (CBRCOR)
- Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CyberOps (CBRFIR)
Why NIL?
Global Leading Provider of Cisco Courses
30+ years of experience
Since 1992, NIL has been at the forefront of advanced contributors to strategic partner Cisco technologies, learning curriculum and value-added solutions deployed to clients around the globe.
Learn more about us
Best instructor in my life
This is the best instructor which I had in my life.
Very insightful knowledge and explanations
The material (of the training) is well structured in a way that difficult topics are simplified and easy to understand. (Alex as a) trainer was excellent, it makes a difference when the trainer is highly experienced and has a lot of practical examples to reference, which enhances the learning. A big thanks to instructor (Alex) on this training, his knowledge and explanations were very insightful.
Always kept us engaged
He was the best trainer I’ve encountered so far. He answered all my questions in detail. He never allowed our attention to wander. He always kept us engaged in the lesson. Throughout the training, he acted patiently and respectfully.
Instructor helped me understand the course
The instructor is professional and helped me understand the course and labs that I do .
Useful information
It was a good course and useful information to look forward to in networks.