NSD Certified

Threat Hunter (NCTH)

The NSD Certified Threat Hunter, 52 hours program is a job oriented industry certification. The focus is on:

MITRE’s ATT&CK Framework
Threat Hunting approaches
Threat Hunting techniques
Reporting

Program available on GeM.

Unlock Lifetime Access to ISAC Certifications with Complimentary Training and Free of cost Online Internship: pay only for certification and lab costs.

Our advanced technical training program is available on demand for groups of at least 10 participants. For further details, please contact us.

Learn everything to get started Forensics Investigations.

Program Outline

Hunting Vs Incident Response

Reactive vs Proactive Response
Goals of Threat hunting vs Goals of Incident Response
Advantages of Threat Hunting

Hunting Loop

Hypothesis Creation
Tool Enabled Investigation
Pattern Detection
Automated Analytics

Hunting Procedures

Role of correct data
Various approaches

MITRE’s Att&ck Framework

ATT&CK – MITRE’s Adversarial Tactics, Techniques, and Common Knowledge
ATT&CK Techniques
Working with Att&ck Navigator

Cyber Kill Chain

Lockheed martin kill chain
Mapping attacker activity to kill chain

Required Tools

Monitoring Tools
Log Collection Tools
Correlation Tools
Threat Intelligence
Data Analysis Tools

Data Sets

Sample Data Sets
Splunk BOTS V1
Splunk BOTS V2

Hunting Techniques

Searching
Clustering
Grouping
Stack Counting

Hunting with Logs

Labs

Automating Hunting Process

SOAR Example use cases
SIEM Examples for Automation

Practical Threat Hunting with Network Intrusion and Malwares

Labs

Reporting – Components & Structure

Sample Templates
Reporting Examples
Overview of Sample Reports

Program Outcome

Analyze Network Behavior and Anomalies

Use critical thinking to assess normal behavior patterns, identifying unusual network activities and potential security threats.

Apply Advanced Threat Hunting Techniques

Understand hunting procedures, the Cyber Kill Chain, and MITRE’s ATT&CK Framework to proactively track and address threats.

Utilize Threat Intelligence and Correlation Tools

Work with threat intelligence and correlation tools to connect data points and gain insights into potential security risks.

Manage and Analyze Large Data Sets

Leverage SOAR and data analysis tools to handle extensive data volumes efficiently, enhancing threat detection and response.

Who Should Attend

The course is best suited for:

Security Researchers
Students and Professionals keen in Forensics Investigations
Security Teams
Law Enforcement Agencies
Military and police personnel

What You Get

Supporting Partners

Access to e-learning videos

Get 60 days access to course videos on the e-learning portal.

Access to Cyberange Virtual Labs

60 Day access to Cyberange Virtual Labs (ID/Password will be sent via email)

National Security Database (NSD) Certification

Get listed in the National Security Database program at the Falcon level by completing the program.

Complimentary attempts to pass

The Examination includes two free attempts, allowing candidates a second chance to improve their scores or deepen their understanding without additional costs. This benefit supports candidates in achieving certification with confidence and flexibility.

PROGRAM

Features & Benefits

ISAC Community

Get access to the exclusive ISAC Community. Enhance your profile credibility globally.

Know More

60 Days Access to Cyberange Virtual Labs

Help the victims of cybercrimes. Be a part of a global community and Get Recognition.

Know More

Hands- On with Cyberange Virtual Labs

Get 60 Days access to Cyberange Virtual Labs for hands-on practice:

Penetration Testing Labs
Social Engineering Labs
Malware Labs
Cyber Forensic Labs
Password Cracking Labs
Bug Bounty Labs

Information Sharing and Analysis Center

Information Sharing and Analysis Center

India's leading non-profit, solving critical problems impacting the connected, digital world on cyber security.

NSD Certified

Threat Hunter (NCTH)

Program available on GeM.

Program Outline

Program Outcome

What You Get

Supporting Partners

PROGRAM

Features & Benefits

ISAC Community

60 Days Access to Cyberange Virtual Labs

Hands- On with Cyberange Virtual Labs

Get 60 Days access to Cyberange Virtual Labs for hands-on practice:

Penetration Testing Labs

Social Engineering Labs

Malware Labs

Cyber Forensic Labs

Password Cracking Labs

Bug Bounty Labs

Learn cyber security basics practically with your Instructor with our cloud labs!

IIT-ISAC Certified National Cybersecurity Scholar

ISAC Certified Cybercrime Intervention Officer

ISAC Members Portal

Download CopConnect App