CyberSecurity

By the end of this lecture, you will be able to:

• Understand Advanced Persistent Threats (APTs), their objectives, characteristics, and potential business impact.

• Explain how APT actors use reconnaissance, initial access, privilege escalation, lateral movement, and data exfiltration.

• Understand the MITRE ATT&CK framework and how it helps classify adversary tactics and techniques.

• Identify common APT attack vectors, including phishing, exploited vulnerabilities, compromised credentials, and supply-chain attacks.

• Recognize indicators of compromise (IoCs) and suspicious behaviors using security logs and threat intelligence.

• Evaluate defensive strategies, including threat hunting, endpoint detection and response (EDR), network monitoring, and incident response.

• Apply defense-in-depth principles to reduce the likelihood and impact of targeted, persistent attacks.

• Basic knowledge of cybersecurity concepts, threats, vulnerabilities, and security controls.

• Understanding of networking, operating systems, and common network protocols.

• Familiarity with authentication, access control, and identity management.

• Basic knowledge of security monitoring, logs, and incident response.

• Awareness of malware, phishing, and common attack techniques is recommended.