GIAC - Experienced Intrusion Analyst (GX-IA)

Curriculum

• Module 1: Advanced Analysis Techniques
• The candidate will demonstrate proficiency with core tools and programs e.g. decrypting TLS traffic with Wireshark, building and sending a packet with Scapy. Application Traffic AnalysisThe candidate will inspect common Application Layer protocols to demonstrate skill in analysis and correct conclusions.
• Module 2: IDS Application and Analysis
• The candidate will use common IDS-related tools to analyse artifacts.
• Module 3: Malicious Traffic Analysis
• The candidate will analyse malicious or suspicious network traffic using a variety of tools and approaches. Network Forensics
• The candidate will analyse artifacts and show skill in determining what took place within a certain incident or time-frame.
• Module 4: Network Traffic Analysis
• The candidate will analyse typical and abnormal stimulus and response network traffic using a variety of tools and approaches.
• Module 5: Protocol Analysis
• The candidate will evaluate network capture files to show proficiency in detail analysis with a focus on topics such as protocols, connections, ports, and sessions.