Incident Response Training Program
An incident response training program develops role-specific knowledge, decision skills, tool proficiency, communication habits, and backup coverage for responders and stakeholders.
Search & Discovery 2.0
Find the exact control, technique, lesson, or book.
Search the complete Bare Metal Cyber knowledge system with identifier-aware ranking, framework filters, topic discovery, and direct paths into books, podcasts, and Academy learning.
11,003searchable records
6,025Academy lessons
6framework families
144published books
Search results
625 results for “Security+ Practice”
Incident Root-Cause Analysis
Incident root-cause analysis identifies the technical, process, organizational, and environmental conditions that allowed an incident to begin, spread, or remain undetected.
Incident Severity Classification
Incident severity classification assigns a consistent priority using factors such as mission impact, data sensitivity, scope, safety, legal obligations, adversary activity, and recovery difficulty.
Incident Task Tracking
Incident task tracking records actions, owners, dependencies, deadlines, status, blockers, and completion evidence throughout a response.
Incident Timeline Reconstruction
Incident timeline reconstruction orders events, observations, actions, and decisions across systems and teams to explain what happened and when.
Independent Verification and Validation
Independent verification and validation evaluates whether software was built correctly and whether it satisfies its intended needs, with sufficient separation from the team responsible for delivery.
Infrastructure as Code
Infrastructure as code defines cloud and platform resources through machine-readable, version-controlled declarations or programs rather than ad hoc manual configuration.
Intelligence-Led Threat Hunting
Intelligence-led threat hunting converts validated adversary knowledge into hypotheses, data requirements, analytic methods, and searches for activity that existing detections may miss.
Observability Coverage Analysis
Observability coverage analysis compares priority assets, identities, behaviors, paths, and failure modes with actual sensors, logs, fields, retention, analytics, and response access.
Penetration Test Remediation Validation
Penetration test remediation validation confirms that reported attack paths are closed, compensating controls work as intended, and related weaknesses are not still exploitable.
Penetration Test Reporting
A penetration test report explains what was tested, what was demonstrated, why it matters, how confident the tester is, and what should happen next.
Ransomware Communications
Ransomware communications coordinates internal updates, leadership decisions, legal and law-enforcement engagement, customer messaging, and any authorized adversary contact.
Secure Software Decommissioning
Secure software decommissioning removes an application or service while protecting data, credentials, dependencies, integrations, records, and users throughout retirement.
SOC Handoffs and Case Management
SOC handoffs and case management preserve context, evidence, ownership, priority, and decisions as work moves across shifts, tiers, teams, and response functions.
SOC Operational Analytics
SOC operational analytics examines workload, outcomes, quality, coverage, recurrence, timing, and resource consumption to explain how the SOC is performing and where change will matter.
SOC Performance Metrics
SOC performance metrics combine timeliness, detection quality, investigation accuracy, coverage, workload, recurrence, and business impact instead of rewarding raw ticket volume.
SOC Staffing and Escalation
SOC staffing and escalation align roles, competencies, shift coverage, authority, backup depth, and escalation paths with the services the SOC promises to deliver.
SOC Strategic Planning
SOC strategic planning converts risk, maturity evidence, performance, technology change, and service demand into sequenced capability outcomes, investments, and accountable milestones.
SOC Technology Hardening
SOC technology hardening protects the monitoring and response stack with least privilege, segmentation, secure configuration, audit logging, resilient access, and controlled administration.
SOC Tool Integration
SOC tool integration connects telemetry, enrichment, analytics, case management, orchestration, and response while preserving identity, integrity, timing, and provenance across interfaces.
Supply Chain Incident Response
Supply chain incident response coordinates investigation and containment when a vendor, dependency, update channel, service provider, or trusted product may be compromised.
Threat Applicability Analysis
Threat applicability analysis tests whether an actor, technique, path, precondition, target, and consequence are relevant to a specific system before controls are selected or credited.
Threat Modeling
Threat modeling examines what must be protected, how a system works, where trust changes, what can go wrong, and which safeguards or design changes reduce risk.
Threat-Intelligence-Driven Detection Engineering
Threat-intelligence-driven detection engineering translates adversary behaviors, tools, infrastructure, and expected data into testable analytics and monitoring coverage.