CyCube
Intermediate

Firewall Detection

Detect threats using firewall and IDS data: rules, HTTP anomalies, DNS tunneling, scanning, enumeration, IOCs, and practical investigation workflows.

Duration
3h 17m
Labs
3
Videos
6
Quizzes
4

Skills Acquired

  • Understand firewall functionality and rule sets
  • Detect abnormal HTTP traffic patterns
  • Identify DNS tunneling behavior
  • Recognize scanning and enumeration attempts
  • Use IOCs and IDS rules for threat investigations

Curriculum

  1. Introduction
    • Firewall fundamentals
    • Firewall rule creation and management
  2. Threat Indicators
    • Analyzing HTTP traffic patterns
    • DNS tunneling detection
    • Scanning alerts and investigation
    • Enumeration techniques
  3. Special Indicators
    • Working with IOCs
    • Applying IDS rules in investigations

Included in these pathways