A SOC analyst spends the day deciding whether an alert is noise or the start of something serious. That call gets much easier when you know who is likely to attack, what tools they use, and how a typical intrusion unfolds from first contact to final goal. This module gives you that picture of the threat landscape.
You'll start with the main types of threat actors and what motivates them, then look at the malware they rely on. From there you'll learn two ways of describing an attack step by step: the Cyber Kill Chain, which breaks an intrusion into stages, and MITRE ATT&CK, a detailed catalogue of the tactics and techniques attackers use in the real world.
Once you're comfortable here, move on to Log Analysis & SIEM to start working with the data that shows these attacks happening.
The main types of threat actors that put organisations at risk and the motivations behind them, from financial gain to espionage.
What malware is, how viruses and trojans operate, the main kinds of malicious programs, and how to prevent a malware attack.
The stages of the Cyber Kill Chain, the model created by Lockheed Martin, and how it helps you see where an attack can be spotted and stopped.
How ATT&CK is organised into tactics and techniques, how teams use it for gap analysis and adversary emulation, and how to get started with it.