Evergreen Alliance Training Program for GIAC Cloud Threat Detection (GCTD)

Automation
Candidates will demonstrate an understanding of cloud automation options and the ability to design a simple automated response workflow.

Cloud Management
Candidates will showcase knowledge of cloud-specific security concerns, including cloud access, monitoring, and data collection sources.

Containers and Cloud Proxies
Candidates will exhibit an understanding of containers and cloud proxy services, including common threats and associated log sources.

Cyber Threat Intelligence and Threat Hunting
Candidates will demonstrate knowledge of cyber threat intelligence types and sources, along with their practical applications in threat hunting.

Data and Vulnerability Management
Candidates will perform basic vulnerability assessments and demonstrate the ability to conduct data discovery activities.

Host Logging
Candidates will demonstrate hands-on skills in configuring and accessing host-based logs within Microsoft and Amazon cloud environments.

Inventory and Configuration Tools
Candidates will showcase the ability to perform inventory discovery and demonstrate knowledge of cloud configuration tools.

Monitoring, Detection, and Analysis
Candidates will display an understanding of monitoring and detection tools and conduct basic log investigations using cloud-based tools.

Network Logging
Candidates will demonstrate practical skills in configuring and accessing network logs in Microsoft and Amazon cloud environments.