Visão Geral
Este curso apresenta aplicações de IA para apoiar processos de Incident Response, desde triagem e análise de evidências até reconstrução de ataques, documentação e apoio à tomada de decisão.
Conteúdo Programatico
Module 1: AI-Assisted Incident Response
- AI in incident response
- Incident response lifecycle
- AI-assisted triage
- Investigation assistance
- Evidence analysis
- Human-in-the-loop
- AI limitations
- Response governance
- Secure AI usage
- AI-assisted response methodology
Module 2: AI-Assisted Incident Triage
- Alert analysis
- Incident classification
- Severity assessment
- IOC extraction
- Context enrichment
- Event correlation
- Incident summarization
- Investigation prioritization
- Escalation recommendations
- AI-assisted triage
Module 3: AI-Assisted Investigation
- Log analysis
- Endpoint evidence
- Network evidence
- Identity evidence
- Timeline construction
- Attack chain reconstruction
- IOC correlation
- TTP identification
- Investigation summaries
- Evidence validation
Module 4: AI-Assisted Threat Analysis
- Threat intelligence
- Threat actor analysis
- Malware analysis assistance
- TTP analysis
- MITRE ATT&CK
- Attack path analysis
- Behavioral analysis
- Campaign correlation
- Threat assessment
- Intelligence reporting
Module 5: AI-Assisted Response
- Containment planning
- Account containment
- Endpoint isolation
- Network containment
- Credential remediation
- Eradication planning
- Recovery planning
- Response validation
- Decision support
- Human approval
Module 6: Practical AI-Assisted Incident Response
- Incident triage
- Evidence organization
- AI-assisted investigation
- Timeline reconstruction
- Attack chain analysis
- Containment planning
- Recovery planning
- Incident documentation
- Executive reporting
- AI-assisted incident response case study