Information Technology Basics
Fundamental principles and concepts
OS Analysis with HELK
HELK provides machine learning and graph analysis to world class windows log collection and analysis across your enterprise not found in other tools, for free! In this course, you will learn to hunt adversary activity on endpoints using HELK.
Security+Learn the skills to keep up with tomorrow’s cybersecurity threats.
₹1,467/mo
Security+Learn the skills to keep up with tomorrow’s cybersecurity threats.
₹1,027
Why choose Core Tech?
✓ Compare courses before making a decision
Check Latest Price →Price may vary. Check latest price on provider site.
Course Insight
Suitable for intermediate learners. Works well as a continuation after mastering Information Technology fundamentals. It bridges the gap toward advanced, production-level engineering.
Intermediate FriendlySelf-Paced Learning
SKILLS TO
MASTER
Practical ApplicationTrending
Real-world project implementationBest Practices
Industry standard workflows and guidelinesCareers:Relevant for professionals pursuing roles within Information Technology.
Quick Facts
Below sections are verified from last major sync. For real-time updates and today's latest lectures, Check official page here.
What You’ll Learn
Though many cyber attack techniques can be effectively and heuristically identified by analyzing the endpoint logs, there are surprisingly few capabilities that focus solely on parsing windows logs and OS data and providing a platform to perform advanced statistical analysis. In this course, OS Analysis with HELK, you'll cover how to utilize Hunt ELK to detect adversary endpoint attack techniques in an enterprise environment. First, you'll see the gap that HELK fills with Windows event log analysis. Next, you'll explore how to operate the advanced hunt features provided by HELK. Finally, you'll learn how to analyze a live dataset to hunt for adversary activity. When you're finished with this course, you'll have the skills and knowledge to detect these techniques: Kerberoasting T1208, Bits Jobs T1197, and indicator removal on hosts T1070 using HELK.
See how this course curriculum compares with alternatives
Outcomes
- Course Overview : 1min.
- Using Windows Event Logs with HELK to Hunt for Advanced Adversary Activity : 25mins.
- Resources : 1min.
See side-by-side differences in learning outcomes
FAQs
Top Alternatives
Highly-rated courses worth your attention
⭐ 4(11+ learners)
✓ Compare side-by-side before spending money
Price may vary. Check latest price on provider site.