Sound the Alarm: Detection and Response

This is the sixth course in the Google Cybersecurity Certificate. Learners will focus on incident detection and response. They will learn what defines a security incident and explain the incident response lifecycle, including the roles and responsibilities of incident response teams. Learners will analyze and interpret network communications to detect security incidents using packet sniffing tools to capture network traffic. By assessing and analyzing artifacts, learners will explore the inciden

• Identify the steps to contain, eradicate, and recover from an incident
• Analyze packets to interpret network communications
• Understand basic syntax, components of signatures and logs in Intrusion Detection Systems (IDS) and Network Intrusion Detection Systems (NIDS) tools
• Perform queries in Security Information and Event Management (SIEM) tools to investigate an event