DAY 4 · MODULE 1
Cyber Defense Fundamentals
Move from attacker perspective to detection, investigation, containment and recovery.
Understand the concept
Red team
Blue team
SOC
Monitoring
Detection
Prevention
Response
Recovery
Why this matters
Cyber defense connects technical telemetry with decisions that reduce damage and restore normal operations.
See what happens internally
Interactive visualization loads here.
Perform the activity
- Follow an event through the defense workflow.
- Classify controls as preventive, detective or corrective.
- Choose appropriate first actions for prepared incidents.
Workshop safety: Activities involving scanning, web vulnerabilities or security testing must be performed only on the assigned training target or intentionally vulnerable lab.
Read and understand the working example
Event -> Detection -> Investigation -> Containment -> RecoveryThis example is shown for guided learning. Real host/network execution is reserved for the isolated cyber-range stage.
Prove your understanding
Classify five controls as preventive, detective or corrective and explain one example.