º£½ÇÉçÇø

This capstone experience offers learners the opportunity to apply theoretical knowledge in a simulated environment, taking on the role of an Incident Responder during active incidents. The program is designed as both a technical and a teamwork exercise, with learners placed into small groups of 5-8 to tackle challenges. In addition, learners will gain practical experience performing the basic duties of an entry-level SOC Analyst: identifying and investigating events, and conveying findings in well-structured tickets.

On-ramp Sessions

On-ramp #01

• Introduction to Moodle content
• Establish expectations and completion timelines

On-ramp #02

• Centurion Ticketing Access and Overview
• Cloud Range Lab Access & Troubleshooting

Capstone

Day 1: Fundamentals and Tooling

• Staff Introductions and Expectations
• Instructor-Led Module Training
• Instructor-Led Centurion Secured Ticketing
• PC Build
• Centurion Secured Ticketing
• Cloud Range Overview and Cyber Range Introduction

Day 2: Live Fire Incident Response

• Team Rotations:
  • Cyber Range (Scenario 1)
  • Customer C-Suite Role Play
  • Cloud Range Labs
  • Centurion Secured Ticketing

Day 3: Advanced Incident Response and Analysis

• After Action Review (AAR) Presentation of Scenario 1
• Team Rotations:
  • PC Build
  • Centurion Secured Ticketing
  • Cyber Range  (Scenario 2)
  • Customer C-Suite Role Play

Day 4: Continued Application and Role Play

• After Action Review (AAR) Presentation of Scenario 2
• Team Rotations:
  • PC Build
  • Centurion Secured Ticketing
  • Cyber Range  (Scenario 3)
  • Customer C-Suite Role Play

Day 5: Final Exercises and Presentations

• 9:00 AM–9:15 AM: Arrivals

• After Action Review (AAR) Presentation of Scenario 3
• Team Rotations:
  • PC Build
  • Centurion Secured Ticketing
  • Cyber Range  (Scenario 4)
  • Customer C-Suite Role Play
• After Action Review (AAR) Presentation of Scenario 4
• Final Day Wrap-Up and Awards

Preparing for the week of the capstone requires access to a number of different programs and services. It can be a challenge to keep track of all the credentials required to prepare for the week.

To better assist you with managing this information, please consult the table below for each message you will receive ahead of the capstone week.

Video Tutorials

PDF Tutorials

1. QRadar
2. Splunk
3. SecurityOnion
4. Palo Alto
5. Helpful Commands for Windows Endpoints
6. Helpful Commands and Key files for Linux Endpoints
7. PC Building Introduction