https://www.defensivecyberacademy.com https://www.defensivecyberacademy.com/pricing https://www.defensivecyberacademy.com/for-teams https://www.defensivecyberacademy.com/terms https://www.defensivecyberacademy.com/privacy https://www.defensivecyberacademy.com/coppa https://www.defensivecyberacademy.com/ai-supplement https://www.defensivecyberacademy.com/range https://www.defensivecyberacademy.com/training https://www.defensivecyberacademy.com/learn https://www.defensivecyberacademy.com/dcwf https://www.defensivecyberacademy.com/for-teams/sample-report https://www.defensivecyberacademy.com/range/cuckoo https://www.defensivecyberacademy.com/range/dragnet https://www.defensivecyberacademy.com/range/first-light https://www.defensivecyberacademy.com/range/ghostwriter https://www.defensivecyberacademy.com/range/hunt-low-tide https://www.defensivecyberacademy.com/range/impact https://www.defensivecyberacademy.com/range/magpie https://www.defensivecyberacademy.com/range/operation-locust https://www.defensivecyberacademy.com/range/operation-nightjar https://www.defensivecyberacademy.com/range/operation-ptarmigan https://www.defensivecyberacademy.com/range/operation-silverfish https://www.defensivecyberacademy.com/range/signet https://www.defensivecyberacademy.com/range/swift https://www.defensivecyberacademy.com/range/tollgate https://www.defensivecyberacademy.com/range/trailhead https://www.defensivecyberacademy.com/range/understudy https://www.defensivecyberacademy.com/range/watchtower https://www.defensivecyberacademy.com/training/tier-1 https://www.defensivecyberacademy.com/training/tier-2 https://www.defensivecyberacademy.com/training/tier-3 https://www.defensivecyberacademy.com/learn/foundations https://www.defensivecyberacademy.com/learn/mitre-attack https://www.defensivecyberacademy.com/learn/how-ranges-work https://www.defensivecyberacademy.com/learn/ttp-catalog https://www.defensivecyberacademy.com/learn/incident-response https://www.defensivecyberacademy.com/learn/incident-response/scoping-and-timelines https://www.defensivecyberacademy.com/learn/incident-response/triaging-alerts https://www.defensivecyberacademy.com/learn/incident-response/tracing-an-email https://www.defensivecyberacademy.com/learn/incident-response/email-telemetry-m365 https://www.defensivecyberacademy.com/learn/networking-for-investigators https://www.defensivecyberacademy.com/learn/reading-telemetry https://www.defensivecyberacademy.com/learn/common-schema https://www.defensivecyberacademy.com/learn/using-elastic-security https://www.defensivecyberacademy.com/learn/your-first-investigation https://www.defensivecyberacademy.com/learn/detections-and-objectives https://www.defensivecyberacademy.com/learn/practice-expired-certificate https://www.defensivecyberacademy.com/learn/tier-3-how-it-works https://www.defensivecyberacademy.com/learn/ai-network-defense https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/reconnaissance https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/resource-development https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/initial-access https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/execution https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/persistence https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/privilege-escalation https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/stealth https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/defense-impairment https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/credential-access https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/discovery https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/lateral-movement https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/collection https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/command-and-control https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/exfiltration https://www.defensivecyberacademy.com/learn/ttp-catalog/tactic/impact https://www.defensivecyberacademy.com/learn/ttp-catalog/T1003.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1005 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1008 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1018 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1021.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1021.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1021.004 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1021.006 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1027 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1036.003 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1036.005 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1039 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1041 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1046 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1047 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1048 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1048.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1049 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1052.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1053.003 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1053.005 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1055 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1057 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1059 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1059.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1059.003 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1059.004 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1069.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1071.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1071.004 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1074.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1078 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1078.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1078.003 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1082 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1083 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1087.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1098 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1105 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1110 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1110.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1110.003 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1114.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1133 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1135 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1136.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1136.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1190 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1204.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1213 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1218.005 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1218.011 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1222.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1486 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1490 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1505.003 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1543 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1543.003 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1547.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1548.003 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1550.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1552.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1554 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1558.003 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1560.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1566.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1566.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1567.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1568.002 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1570 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1571 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1572 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1685.001 https://www.defensivecyberacademy.com/learn/ttp-catalog/T1685.005 https://www.defensivecyberacademy.com/telemetry https://www.defensivecyberacademy.com/telemetry/references https://www.defensivecyberacademy.com/telemetry/method https://www.defensivecyberacademy.com/telemetry/roles/aws:account https://www.defensivecyberacademy.com/telemetry/roles/azure:tenant https://www.defensivecyberacademy.com/telemetry/roles/containers:host https://www.defensivecyberacademy.com/telemetry/roles/esxi:host https://www.defensivecyberacademy.com/telemetry/roles/gcp:project https://www.defensivecyberacademy.com/telemetry/roles/identity:saas https://www.defensivecyberacademy.com/telemetry/roles/k8s:cluster https://www.defensivecyberacademy.com/telemetry/roles/linux:server https://www.defensivecyberacademy.com/telemetry/roles/linux:web-server https://www.defensivecyberacademy.com/telemetry/roles/m365:tenant https://www.defensivecyberacademy.com/telemetry/roles/macos:endpoint https://www.defensivecyberacademy.com/telemetry/roles/network:sensor https://www.defensivecyberacademy.com/telemetry/roles/oci:tenancy https://www.defensivecyberacademy.com/telemetry/roles/win:domain-controller https://www.defensivecyberacademy.com/telemetry/roles/win:member-server https://www.defensivecyberacademy.com/telemetry/roles/win:web-server https://www.defensivecyberacademy.com/telemetry/roles/win:workstation https://www.defensivecyberacademy.com/telemetry/sources/app:db https://www.defensivecyberacademy.com/telemetry/sources/app:mail https://www.defensivecyberacademy.com/telemetry/sources/app:other https://www.defensivecyberacademy.com/telemetry/sources/app:web https://www.defensivecyberacademy.com/telemetry/sources/aws:cloudtrail https://www.defensivecyberacademy.com/telemetry/sources/aws:cloudwatch https://www.defensivecyberacademy.com/telemetry/sources/aws:eks-audit https://www.defensivecyberacademy.com/telemetry/sources/aws:guardduty https://www.defensivecyberacademy.com/telemetry/sources/aws:other https://www.defensivecyberacademy.com/telemetry/sources/aws:s3-access https://www.defensivecyberacademy.com/telemetry/sources/aws:vpcflow https://www.defensivecyberacademy.com/telemetry/sources/azure:activitylogs https://www.defensivecyberacademy.com/telemetry/sources/azure:auditlogs https://www.defensivecyberacademy.com/telemetry/sources/azure:other https://www.defensivecyberacademy.com/telemetry/sources/azure:pim https://www.defensivecyberacademy.com/telemetry/sources/azure:platformlogs https://www.defensivecyberacademy.com/telemetry/sources/azure:riskdetection https://www.defensivecyberacademy.com/telemetry/sources/azure:signinlogs https://www.defensivecyberacademy.com/telemetry/sources/containerd:events https://www.defensivecyberacademy.com/telemetry/sources/containers:other https://www.defensivecyberacademy.com/telemetry/sources/docker:events https://www.defensivecyberacademy.com/telemetry/sources/edr:crowdstrike https://www.defensivecyberacademy.com/telemetry/sources/edr:elastic-defend https://www.defensivecyberacademy.com/telemetry/sources/edr:mde https://www.defensivecyberacademy.com/telemetry/sources/edr:other https://www.defensivecyberacademy.com/telemetry/sources/edr:sentinelone https://www.defensivecyberacademy.com/telemetry/sources/esxi:logs https://www.defensivecyberacademy.com/telemetry/sources/gcp:audit https://www.defensivecyberacademy.com/telemetry/sources/gcp:other https://www.defensivecyberacademy.com/telemetry/sources/gcp:vpcflow https://www.defensivecyberacademy.com/telemetry/sources/gcp:workspace https://www.defensivecyberacademy.com/telemetry/sources/github:audit https://www.defensivecyberacademy.com/telemetry/sources/idp:other https://www.defensivecyberacademy.com/telemetry/sources/k8s:audit https://www.defensivecyberacademy.com/telemetry/sources/k8s:events https://www.defensivecyberacademy.com/telemetry/sources/k8s:other https://www.defensivecyberacademy.com/telemetry/sources/linux:auditd https://www.defensivecyberacademy.com/telemetry/sources/linux:ebpf https://www.defensivecyberacademy.com/telemetry/sources/linux:edr https://www.defensivecyberacademy.com/telemetry/sources/linux:osquery https://www.defensivecyberacademy.com/telemetry/sources/linux:other https://www.defensivecyberacademy.com/telemetry/sources/linux:syslog https://www.defensivecyberacademy.com/telemetry/sources/linux:sysmon https://www.defensivecyberacademy.com/telemetry/sources/m365:defender https://www.defensivecyberacademy.com/telemetry/sources/m365:messagetrace https://www.defensivecyberacademy.com/telemetry/sources/m365:other https://www.defensivecyberacademy.com/telemetry/sources/m365:unified https://www.defensivecyberacademy.com/telemetry/sources/macos:endpointsecurity https://www.defensivecyberacademy.com/telemetry/sources/macos:openbsm https://www.defensivecyberacademy.com/telemetry/sources/macos:osquery https://www.defensivecyberacademy.com/telemetry/sources/macos:other https://www.defensivecyberacademy.com/telemetry/sources/macos:unifiedlog https://www.defensivecyberacademy.com/telemetry/sources/network:device https://www.defensivecyberacademy.com/telemetry/sources/network:dns https://www.defensivecyberacademy.com/telemetry/sources/network:firewall https://www.defensivecyberacademy.com/telemetry/sources/network:flow https://www.defensivecyberacademy.com/telemetry/sources/network:ids https://www.defensivecyberacademy.com/telemetry/sources/network:other https://www.defensivecyberacademy.com/telemetry/sources/network:pcap https://www.defensivecyberacademy.com/telemetry/sources/network:proxy https://www.defensivecyberacademy.com/telemetry/sources/oci:audit https://www.defensivecyberacademy.com/telemetry/sources/oci:cloudguard https://www.defensivecyberacademy.com/telemetry/sources/oci:identity-audit https://www.defensivecyberacademy.com/telemetry/sources/oci:other https://www.defensivecyberacademy.com/telemetry/sources/oci:service-logs https://www.defensivecyberacademy.com/telemetry/sources/oci:vcnflow https://www.defensivecyberacademy.com/telemetry/sources/okta:systemlog https://www.defensivecyberacademy.com/telemetry/sources/other:intel https://www.defensivecyberacademy.com/telemetry/sources/other:unmapped https://www.defensivecyberacademy.com/telemetry/sources/saas:audit https://www.defensivecyberacademy.com/telemetry/sources/web:edge https://www.defensivecyberacademy.com/telemetry/sources/win:ad https://www.defensivecyberacademy.com/telemetry/sources/win:application https://www.defensivecyberacademy.com/telemetry/sources/win:applocker https://www.defensivecyberacademy.com/telemetry/sources/win:appx https://www.defensivecyberacademy.com/telemetry/sources/win:bits https://www.defensivecyberacademy.com/telemetry/sources/win:capi2 https://www.defensivecyberacademy.com/telemetry/sources/win:codeintegrity https://www.defensivecyberacademy.com/telemetry/sources/win:defender https://www.defensivecyberacademy.com/telemetry/sources/win:dhcp-server https://www.defensivecyberacademy.com/telemetry/sources/win:dns-client https://www.defensivecyberacademy.com/telemetry/sources/win:dns-server https://www.defensivecyberacademy.com/telemetry/sources/win:edr https://www.defensivecyberacademy.com/telemetry/sources/win:etw https://www.defensivecyberacademy.com/telemetry/sources/win:firewall https://www.defensivecyberacademy.com/telemetry/sources/win:iis https://www.defensivecyberacademy.com/telemetry/sources/win:kerberos https://www.defensivecyberacademy.com/telemetry/sources/win:ntlm https://www.defensivecyberacademy.com/telemetry/sources/win:other https://www.defensivecyberacademy.com/telemetry/sources/win:powershell https://www.defensivecyberacademy.com/telemetry/sources/win:printservice https://www.defensivecyberacademy.com/telemetry/sources/win:security https://www.defensivecyberacademy.com/telemetry/sources/win:smb https://www.defensivecyberacademy.com/telemetry/sources/win:sysmon https://www.defensivecyberacademy.com/telemetry/sources/win:system https://www.defensivecyberacademy.com/telemetry/sources/win:taskscheduler https://www.defensivecyberacademy.com/telemetry/sources/win:terminalservices https://www.defensivecyberacademy.com/telemetry/sources/win:wmi