Autoplay
Autocomplete
Previous Lesson
Complete and Continue
Build Security Incident Response for GDPR Data Protection
Section 1: Introduction
Welcome & Intro (2:07)
Set your expectations (0:54)
A 1st touch of what you will really get in the course (6:10)
Presentations (ppt)
Section 2: Incident Response in CyberSecurity
What is Incident Response and why do I need it? (4:14)
Incident Response Team (8:52)
Incident Response Process and Procedures (11:05)
Types of Security Incidents (8:19)
Incident Response Tools - general (10:26)
What is a SIEM? (3:05)
Incident Response Training (5:49)
What is automation in incident response (8:15)
Section 3: Building a Security Operations Center (SOC)
What is a NOC? (2:37)
What is a SOC? (2:50)
Integrated NOC and SOC (6:26)
Mission, Team and Required Training (6:39)
Types of SOC (3:53)
Building a SOC (5:39)
Cheat Sheets to help you in configuring your systems (9:30)
Section 4: GDPR and Incident Response
GDPR intro (2:49)
GDPR effects on Incident Response (5:42)
How to create an effective IR plan (10:49)
GDPR Incident Response Process (10:13)
Lets draft the IRM Procedure (4:30)
How to treat data breaches (4:55)
Section 5: GDPR Incident Response Methodologies (IRM)
IRM1 - Worm Infection (3:11)
IRM2 - Windows Intrusion (2:55)
IRM3 - Unix/Linux Intrusion Detection (2:22)
IRM4 - DDoS (3:54)
IRM5 - Malicious Network Behaviour (2:26)
IRM6 - Website Defacement (2:22)
IRM7 - Windows malware detection (2:35)
IRM8 - Blackmail (1:55)
IRM9 - SmartphoneMalware (2:55)
IRM10 - Social Engineering (2:55)
IRM11 - Information Leakage (2:33)
IRM12 - Insider Abuse (1:35)
IRM13 - Phishing (1:33)
IRM14 - Scam (1:41)
IRM15 - Ransomware (2:02)
Section 6: Incident Response Tools for GDPR compliance - free vs enterprise
Lessons learned by working in a SOC (8:00)
A list of open source tools to use (6:09)
Windows Defender ATP (9:15)
Section 7: Banking challenges related to cyber risk
Today Challenges (5:35)
Target and Distribution (6:19)
Attack Methods (6:47)
Infection vectors (5:55)
Targeted attacks against financial institutions (5:20)
Mobile platform and email scams (9:28)
Takedowns and Conclusions (6:24)
Section 8: Financial Malware history with examples
Past 3 decades of malware (part 1) (6:48)
Past 3 decades of malware (part 2) (10:52)
The architecture of financial malware (5:40)
Zeus (12:35)
Zeus GameOver (11:15)
SpyEye (11:03)
IceIX (8:29)
Citadel (10:48)
Carberp (7:25)
Shylock (7:33)
Bugat (2:55)
Dyre (11:14)
Dridex (10:13)
Shifu (7:06)
Tinba (5:55)
Section 9: Making a business case for Financial Malware
Why Fraud Risk Engines fail (8:23)
How to bypass 2 factor authentication (2FA) (7:17)
Fraud Prevention Technology (8:40)
Compliance and Legal Issues (4:45)
Customer impact (5:57)
Selecting the right cybercrime solution (13:36)
Malware detection (3:48)
Malware detection - advanced (5:43)
Malware detection - how technology can help (7:06)
Criminal Detection & Account Takeover (5:39)
What about mobile banking? (9:48)
Section 10: Some simple hacking attempts - demo
Lab setup (2:58)
XSRF attack (7:12)
Compromising Public server (7:27)
Break-In: Compromising the victim computer (2:58)
Other Web Application Attack Example (4:16)
Locky Ransomware (5:58)
Gathering Info & Exfiltrate (9:12)
Section 11: Conclusion
Final thoughts and other documents (1:21)
What is Incident Response and why do I need it?
Lesson content locked
If you're already enrolled,
you'll need to login
.
Enroll in Course to Unlock