Digital Forensics: From Evidence to Courtroom Now Available, free to claim through October 31

Cisco CyberOps Associate

Monitor, detect, and respond to cybersecurity threats through hands-on labs aligned with the Cisco CyberOps Associate certification.

Cybersecurity Networking Cisco
From $11.95
Enroll

About this course

The CyberOps Associate labs prepare you for the Cisco Certified CyberOps Associate certification. You'll monitor network traffic, detect intrusions, analyze host-based and network-based threats, and apply security policies and procedures.

Topics covered include security concepts, security monitoring, host-based analysis, network intrusion analysis, and security policies and procedures.

What you'll learn

01 Analyze network intrusion events using Cisco security monitoring tools
02 Perform host-based and network-based forensic analysis on security incidents
03 Implement security event correlation using SIEM platforms and log analysis
04 Configure endpoint security controls and evaluate their effectiveness
05 Navigate the Cisco CyberOps SOC workflow from detection through incident response

3.0.3 Lab - Identify Running Processes

3.2.11 Lab - Exploring Processes, Threads, Handles, and Windows Registry

3.3.10 Lab - Create User Accounts

3.3.11 Lab - Using Windows PowerShell

3.3.12 Lab - Windows Task Manager

3.3.13 Lab - Monitor and Manage System Resources in Windows

4.2.6 Lab - Working with Text Files in the CLI

4.2.7 Lab - Getting Familiar with the Linux Shell

4.3.4 Lab - Linux Servers

4.4.4 Lab - Locating Log Files

4.5.4 Lab - Navigating the Linux Filesystem and Permission Settings

5.1.5 Lab - Tracing a Route

5.3.7 Lab - Introduction to Wireshark

8.2.8 Lab - Using Wireshark to Examine Ethernet Frames

9.2.6 Lab - Using Wireshark to Observe the TCP 3-Way Handshake

9.3.8 Lab - Exploring Nmap

10.2.7 Lab - Using Wireshark to Examine a UDP DNS Capture

10.4.3 Lab - Using Wireshark to Examine TCP and UDP Captures

10.6.7 Lab - Using Wireshark to Examine HTTP and HTTPS Traffic

17.1.7 Lab - Exploring DNS Traffic

17.2.6 Lab - Attacking a mySQL Database

17.2.7 Lab - Reading Server Logs

21.0.3 Lab - Creating Codes

21.1.6 Lab - Hashing Things Out

21.2.10 Lab - Encrypting and Decrypting Data Using OpenSSL

21.2.11 Lab - Encrypting and Decrypting Data Using a Hacker Tool

21.2.12 Lab - Examining Telnet and SSH in Wireshark

21.4.7 Lab - Certificate Authority Stores

26.1.7 Lab - Snort and Firewall Rules

27.1.5 Lab - Convert Data into a Universal Format

27.2.9 Lab - Regular Expression Tutorial

27.2.10 Lab - Extract an Executable from a PCAP

27.2.12 Lab - Interpret HTTP and DNS Data to Isolate Threat Actor

27.2.14 Lab - Isolate Compromised Host Using 5-Tuple

27.2.15 Lab - Investigating a Malware Exploit

27.2.16 Lab - Investigating an Attack on a Windows Host

No Lab: Launch Cyber Range

What's in this course

Lab Exercises

Prerequisites

  • Solid understanding of networking fundamentals (TCP/IP, routing, switching)
  • Basic cybersecurity knowledge (threats, vulnerabilities, security concepts)
  • Familiarity with Linux command-line operations recommended

Best for

  • Advanced learners pursuing a career in security operations
  • Professionals preparing for the Cisco CyberOps Associate (200-201 CBROPS) certification
  • SOC analysts and incident responders building hands-on detection skills
  • Learners with networking and cybersecurity fundamentals who want to specialize

This course aligns to the Cisco Certified CyberOps Associate (200-201 CBROPS) certification, covering security concepts, security monitoring, host-based analysis, network intrusion analysis, and security policies and procedures.

NDG Online provides technical support specifically related to the functionality of the lab environment only. Any questions or concerns regarding the learning material or lab content must be directed to your instructor. Self-paced learners who find they require additional support are encouraged to seek out a course at a local academic institution.

Support Center

Common questions

Does this course prepare me for a certification?

The course aligns with the Cisco CyberOps Associate (200-201 CBROPS) exam objectives, covering security monitoring, host and network analysis, and SOC procedures.

How long do I have access?

Your purchase includes 6 months of access to the course content and labs.

What experience do I need before starting?

A solid grasp of networking fundamentals (TCP/IP, routing, switching) and basic cybersecurity concepts. Linux command-line familiarity helps in the analysis labs.