1 1 00:00:00,050 --> 00:00:01,380 In this section of the course, 2 2 00:00:01,380 --> 00:00:04,680 we're going to cover Automation Concepts and Technologies. 3 3 00:00:04,680 --> 00:00:06,240 Now, as we go through this section, 4 4 00:00:06,240 --> 00:00:07,830 we're going to have a singular focus 5 5 00:00:07,830 --> 00:00:12,000 on domain 1, security operations, and objective 1.5. 6 6 00:00:12,000 --> 00:00:12,960 Now this objective, 7 7 00:00:12,960 --> 00:00:15,180 objective 1.5 states that you must be able 8 8 00:00:15,180 --> 00:00:17,010 to explain the importance of efficiency 9 9 00:00:17,010 --> 00:00:20,160 and process improvement in security operations. 10 10 00:00:20,160 --> 00:00:21,660 Now, as we begin in this section, 11 11 00:00:21,660 --> 00:00:23,340 we're going to discuss continuous integration 12 12 00:00:23,340 --> 00:00:25,320 and continuous delivery or deployment, 13 13 00:00:25,320 --> 00:00:27,720 which is also known as CI/CD, 14 14 00:00:27,720 --> 00:00:29,070 and how it's going to be conducted within 15 15 00:00:29,070 --> 00:00:32,220 an enterprise organization to help improve your security. 16 16 00:00:32,220 --> 00:00:34,650 CI/CD is essentially a rapid release 17 17 00:00:34,650 --> 00:00:36,477 of your code into a production environment, 18 18 00:00:36,477 --> 00:00:39,000 and this is a major shift in a way of thinking, 19 19 00:00:39,000 --> 00:00:41,040 going from weekly and monthly releases, 20 20 00:00:41,040 --> 00:00:43,860 into daily or even multiple times a day releases 21 21 00:00:43,860 --> 00:00:45,480 for our different software products 22 22 00:00:45,480 --> 00:00:48,540 inside of high velocity enterprise organizations. 23 23 00:00:48,540 --> 00:00:51,540 Then we're going to discuss the concept of DevSecOps 24 24 00:00:51,540 --> 00:00:54,360 and infrastructure as code known as IAC. 25 25 00:00:54,360 --> 00:00:55,530 Both of these are critical 26 26 00:00:55,530 --> 00:00:59,130 if you want to be using CI/CD within your organization. 27 27 00:00:59,130 --> 00:01:00,540 Next, we're going to discuss the use 28 28 00:01:00,540 --> 00:01:02,670 of artificial intelligence and machine learning 29 29 00:01:02,670 --> 00:01:04,770 within your enterprise and how you can use that 30 30 00:01:04,770 --> 00:01:07,410 within your security organization to increase the security 31 31 00:01:07,410 --> 00:01:10,920 and decrease the time it takes to respond to a given threat. 32 32 00:01:10,920 --> 00:01:12,330 Then we're going to be discussing 33 33 00:01:12,330 --> 00:01:13,830 the concept of data enrichment 34 34 00:01:13,830 --> 00:01:15,510 and how we can create malware signatures 35 35 00:01:15,510 --> 00:01:17,490 using that data and machine learning 36 36 00:01:17,490 --> 00:01:20,910 to make our jobs as cybersecurity analysts a lot easier. 37 37 00:01:20,910 --> 00:01:22,890 Next we're going to talk about SOAR 38 38 00:01:22,890 --> 00:01:25,920 which is the Security Orchestration Automation and Response, 39 39 00:01:25,920 --> 00:01:27,540 and we're going to talk about how it's going to help us 40 40 00:01:27,540 --> 00:01:30,270 improve our organizations and its efficiency. 41 41 00:01:30,270 --> 00:01:32,670 Then, we'll discuss the use of standardized processes 42 42 00:01:32,670 --> 00:01:34,350 within our security operations centers 43 43 00:01:34,350 --> 00:01:36,120 to help streamline our operations. 44 44 00:01:36,120 --> 00:01:37,500 After that, we're going to take a look 45 45 00:01:37,500 --> 00:01:40,320 at a concept known as the Single Pane of Glass. 46 46 00:01:40,320 --> 00:01:41,580 This essentially means that we're going to have 47 47 00:01:41,580 --> 00:01:43,470 a management console that presents data 48 48 00:01:43,470 --> 00:01:46,500 from multiple data sources in a unified display. 49 49 00:01:46,500 --> 00:01:48,360 This Single Pane of Glass is going to serve 50 50 00:01:48,360 --> 00:01:50,190 as our starting point from which we, 51 51 00:01:50,190 --> 00:01:51,840 as cybersecurity analysts, are going to be able 52 52 00:01:51,840 --> 00:01:53,550 to see the big picture of what's going on 53 53 00:01:53,550 --> 00:01:55,620 within our networks at any given time 54 54 00:01:55,620 --> 00:01:57,930 and it's really critical to maintaining a good understanding 55 55 00:01:57,930 --> 00:02:00,720 of the enterprise network that we are trying to defend. 56 56 00:02:00,720 --> 00:02:03,090 Finally, we'll take a short quiz to see what you learned 57 57 00:02:03,090 --> 00:02:04,410 during this section of the course, 58 58 00:02:04,410 --> 00:02:06,060 and review each of those quiz questions 59 59 00:02:06,060 --> 00:02:06,900 to ensure you can explain 60 60 00:02:06,900 --> 00:02:08,850 why the correct answers were right. 61 61 00:02:08,850 --> 00:02:10,440 So let's get ready to SOAR 62 62 00:02:10,440 --> 00:02:12,390 as we start covering automation concepts 63 63 00:02:12,390 --> 00:02:14,740 and technologies in this section of the course.