Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CyberOps (CBRFIR) v1.0 e-Learning

Build skills in digital forensics and incident response using Cisco technologies, preparing for the 300-215 CBRFIR exam and advanced cybersecurity roles.

• Analyze the components needed for a root cause analysis report
• Apply tools such as YARA for malware identification
• Recognize the methods identified in the MITRE attack framework
• Leverage scripting to parse and search logs or multiple data sources such as, Cisco Umbrella, Sourcefire IPS, AMP for Endpoints, AMP for Network, and PX Grid
• Recommend actions based on post-incident analysis