Defensive Security Technology Stack
Enterprise SOC engineering and threat defense syllabus.
CNAPP & Cloud Security
Runtime workload protection (CWPP), cloud posture management (CSPM), infrastructure-as-code scanning, and least-privilege IAM hardening.
Module BT-01
XDR & Automated SOAR
SIEM/XDR telemetry correlation, automated playbook remediation, incident containment, and threat intelligence feeds integration.
Module BT-02
Behavioral Threat Hunting
AI anomaly detection, memory forensics, kernel-level telemetry analysis, and proactive hypothesis-driven hunting exercises.
Module BT-03