Advanced · Self-paced learning
Inquiry This course is not yet bookable.
Explore how AI can support your security team in three tasks. Combine vulnerability findings with system information and establish priorities. In detection engineering, develop and test a detection rule, improving it using false positives and missed events. For incident response, produce a situation briefing from reports and log data and prepare the next actions.
Write instructions for the AI and practise the workflows in a connected exercise case. Compare effort and output quality with work performed without AI, and decide how to use the results in your defence work. Keep your prioritised vulnerability assessment, tested detection rule and source-based incident briefing for further work.
In the case, prioritise a vulnerability on a public-facing service, test a detection rule against relevant and benign login events, and prepare a source-based incident briefing.
Your three lab outputs are a reasoned vulnerability prioritisation, a tested detection rule and a source-based incident briefing. They provide a basis for further work by your security team.
Basic information security management knowledge and an understanding of vulnerabilities, log events and incident response processes. Knowledge of safe AI use and checking AI output is required. Necessary tools, access and any additional costs have yet to be determined.
Planned self-study seminar with three practical labs. You work with synthetic system data, logs and incident reports, compare your results with annotated examples and improve your solutions.
Planned learning time: To be confirmed; three practical labs
