Creating Alerts - TCM Security, Inc. - 1920x1080 398K
Course Content
0 / 81 completedSecurity Incident and Event Management - TCM Security, Inc. - 1920x1080 415K
Welcome! - TCM Security, Inc. - 1920x1080 551K
Security Operations - TCM Security, Inc. - 1920x1080 425K
Role Variety - TCM Security, Inc. - 1920x1080 457K
What Makes a Good Detection - TCM Security, Inc. - 1920x1080 387K
MITRE ATT&CK Framework - TCM Security, Inc. - 1920x1080 448K
The Detection Engineering Workflow - TCM Security, Inc. - 1920x1080 413K
Technology Stack for Detection Engineering - TCM Security, Inc. - 1920x1080 404K
Navigating the MITRE ATT&CK Matrix - TCM Security, Inc. - 1920x1080 583K
Lab Overview - TCM Security, Inc. - 1920x1080 282K
File Downloads - TCM Security, Inc. - 1920x1080 417K
Importing ParrotOS into VirtualBox - TCM Security, Inc. - 1920x1080 427K
Importing Windows 11 into VirtualBox - TCM Security, Inc. - 1920x1080 287K
Ubuntu VirtualBox Installation - TCM Security, Inc. - 1920x1080 274K
Creating a VM Snapshot - TCM Security, Inc. - 1920x1080 264K
Disabling Windows Defender - TCM Security, Inc. - 1920x1080 381K
Installing Zeek - TCM Security, Inc. - 1920x1080 384K
Signing Up for Elastic Trial - TCM Security, Inc. - 1920x1080 188K
Elastic Overview - TCM Security, Inc. - 1920x1080 377K
Trial Extending and New Trials - TCM Security, Inc. - 1920x1080 344K
Elastic Agent Installation - TCM Security, Inc. - 1920x1080 392K
Confirming Zeek Logging With NMAP - TCM Security, Inc. - 1920x1080 481K
Sysmon Overview - TCM Security, Inc. - 1920x1080 567K
Testing Windows Elastic Agent Logging with EICAR File and PowerShell - TCM Security, Inc. - 1920x1080 444K
Installing and Configuring Sysmon - TCM Security, Inc. - 1920x1080 381K
Testing Sysmon Logging with EICAR File and PowerShell - TCM Security, Inc. - 1920x1080 392K
Improving Our PowerShell Visibility - TCM Security, Inc. - 1920x1080 469K
Attack Overview - TCM Security, Inc. - 1920x1080 292K
Setting up the Attack - TCM Security, Inc. - 1920x1080 363K
Performing the Attack - TCM Security, Inc. - 1920x1080 503K
Creating our first Threshold Alert - TCM Security, Inc. - 1920x1080 316K
Overview - TCM Security, Inc. - 1920x1080 162K
Creating our first Query Alert - TCM Security, Inc. - 1920x1080 409K
Alert Confirmation - TCM Security, Inc. - 1920x1080 403K
Creating and Executing Attack - Part 1 - TCM Security, Inc. - 1920x1080 319K
Reviewing the Attack - TCM Security, Inc. - 1920x1080 386K
Creating and Executing Attack - Part 2 - TCM Security, Inc. - 1920x1080 364K
Overview - TCM Security, Inc. - 1920x1080 211K
Creating Alerts - TCM Security, Inc. - 1920x1080 398K
Confirming our Detections - TCM Security, Inc. - 1920x1080 424K
Staging our Attack - TCM Security, Inc. - 1920x1080 416K
Confirming our Detections - TCM Security, Inc. - 1920x1080 403K
Creating and Executing our Attack - TCM Security, Inc. - 1920x1080 312K
Atomic Red Team Introduction - TCM Security, Inc. - 1920x1080 545K
Installation - TCM Security, Inc. - 1920x1080 448K
Creating our Detections - TCM Security, Inc. - 1920x1080 399K
Running our First Atomic - TCM Security, Inc. - 1920x1080 430K
TOML Overview - TCM Security, Inc. - 1920x1080 453K
Writing our First Atomic - TCM Security, Inc. - 1920x1080 474K
Setting up a Development Environment - TCM Security, Inc. - 1920x1080 284K
Reviewing Elastic Rule TOML - TCM Security, Inc. - 1920x1080 468K
Working with the Elastic Detection Rules Repo - TCM Security, Inc. - 1920x1080 484K
Validating TOML Syntax Using Taplo - TCM Security, Inc. - 1920x1080 337K
Creating an Elastic TOML Template - TCM Security, Inc. - 1920x1080 381K
Working with Multiple TOML Files - TCM Security, Inc. - 1920x1080 467K
Enforcing TOML Required Fields - TCM Security, Inc. - 1920x1080 386K
Creating a MITRE Object in Python - TCM Security, Inc. - 1920x1080 565K
Validating MITRE Data in our TOML - Part 1 - TCM Security, Inc. - 1920x1080 534K
Converting and Validating our Detections - TCM Security, Inc. - 1920x1080 457K
Validating MITRE Data in our TOML - Part 2 - TCM Security, Inc. - 1920x1080 477K
Obtaining your API Key - TCM Security, Inc. - 1920x1080 324K
Introduction - TCM Security, Inc. - 1920x1080 374K
Pushing a Sample Rule - TCM Security, Inc. - 1920x1080 454K
GET-ing Our First Rule and Managing Rule IDs - TCM Security, Inc. - 1920x1080 596K
Writing a TOML to JSON Script - TCM Security, Inc. - 1920x1080 452K
Updating our Custom Detections - TCM Security, Inc. - 1920x1080 569K
Overview - TCM Security, Inc. - 1920x1080 421K
Working with our Custom Detections - TCM Security, Inc. - 1920x1080 589K
GitHub Actions Introduction - TCM Security, Inc. - 1920x1080 336K
Uploading our Detections and Code - TCM Security, Inc. - 1920x1080 447K
Enforcing Validation Checks - TCM Security, Inc. - 1920x1080 357K
Creating our TOML Validation Action - TCM Security, Inc. - 1920x1080 418K
Syncing with Elastic - Part 1 - TCM Security, Inc. - 1920x1080 374K
Overview - TCM Security, Inc. - 1920x1080 194K
Syncing with Elastic - Part 2 - TCM Security, Inc. - 1920x1080 438K
Converting our TOML to CSV - TCM Security, Inc. - 1920x1080 436K
Converting TOML to MD - TCM Security, Inc. - 1920x1080 476K
Converting our TOML to Att&ck Navigator .JSON - TCM Security, Inc. - 1920x1080 503K
Creating Status Badges - TCM Security, Inc. - 1920x1080 354K
Farewell - TCM Security, Inc. - 1918x1080 572K
Creating our Metrics GitHub Action - TCM Security, Inc. - 1920x1080 470K