Attack & Defense Using Splunk, Kali, and Other Tools

🔹 Duration: 60 Hours (Hands-on Labs, Simulated Attacks, Blue vs. Red Team Exercises)
🔹 Level: Intermediate to Advanced
🔹 Focus: Offensive and Defensive Security, Detection & Threat Hunting Using Splunk, MITRE ATT&CK Framework, Incident Response
🔹 Tools Covered: Kali Linux, Metasploit, Cobalt Strike, Empire, Atomic Red Team,Splunk, Sigma Rules, OSQuery, Sysmon, Zeek, Suricata, PowerShell, Python

🔥 Key Takeaways

✅ Master Cyber Attack Techniques (Recon, Exploitation, C2, Persistence, Exfiltration)
✅ Develop Advanced SIEM Rules & Threat Detections in Splunk
✅ Perform Threat Hunting & Incident Response Using MITRE ATT&CK
✅ Analyze Red Team Tactics & Enhance Blue Team Defenses
✅ Gain Hands-On Experience with Splunk, Kali, and SOC Tools
✅ Automate Security Operations Using SIEM & SOAR

🔹 Understanding SOC Operations & Security Monitoring
🔹 Introduction to Splunk: Architecture & Components
🔹 How Splunk Helps in Incident Detection & Response
🔹 Hands-on Lab: Setting Up Splunk in a SOC Environment 🔹 Onboarding Log Sources (Windows, Linux, Firewalls, Cloud, Proxy, DNS)
🔹 Splunk Data Normalization & Field Extraction
🔹 Indexing & Storage Concepts in Splunk
🔹 Hands-on Lab: Parsing & Searching Logs in Splunk 🔹 Basic to Advanced SPL Queries (Filtering, Field Extraction, Regex)
🔹 Using Splunk Search for Incident Investigation
🔹 Data Visualization & Dashboard Creation in Splunk
🔹 Hands-on Lab: Writing SPL Queries for Security Use Cases 🔹 MITRE ATT&CK Framework & Threat Detection in Splunk
🔹 Writing Detection Rules (Correlation Searches, Adaptive Response)
🔹 Alerting & Automated Actions in Splunk
🔹 Hands-on Lab: Creating & Tuning Security Alerts in Splunk 🔹 Splunk Enterprise Security (ES) Overview
🔹 Notable Events, Risk-Based Alerting (RBA), & Incident Review
🔹 Case Management & Workflow Automation in Splunk ES
🔹 Hands-on Lab: Investigating a Security Incident in Splunk ES 🔹 Proactive Threat Hunting Using Splunk Datasets
🔹 Hunting for Ransomware, Phishing, & Insider Threats
🔹 Using Machine Learning & Splunk Security Essentials (SSE) for Anomaly Detection
🔹 Hands-on Lab: Running Threat Hunting Queries in Splunk 🔹 Introduction to Security Automation & Playbooks
🔹 Writing Automated Response Workflows in Splunk SOAR
🔹 Integrating Splunk with External Threat Intelligence Feeds
🔹 Hands-on Lab: Creating a SOAR Playbook for Automated Threat Response 🔹 Simulated SOC Challenge: Investigate & Respond to a Cyber Attack
🔹 Hands-on Practical Assessment: Detecting & Containing an Incident Using Splunk
🔹 Final Project Submission & Certification.
🔹 Career Guidance for SOC Analysts, Incident Handlers, & Threat Hunters.