Haz sonar la alarma: Detección y respuesta from Coursera

En este sexto curso del Certificado de Ciberseguridad de Google te centrarás en la detección y respuesta a incidentes. Definirás un incidente de seguridad y explicarás el ciclo de vida de la respuesta a incidentes; incluirás las funciones y las responsabilidades de los equipos de respuesta a incidentes. Analizarás e interpretarás las comunicaciones de red para detectar incidentes de seguridad con herramientas de rastreo de paquetes para capturar el tráfico de red. Al evaluar y analizar los artefactos, explorarás los procesos y procedimientos de investigación y respuesta a incidentes. Además, practicarás el uso de herramientas de los Sistemas de Detección de Intrusiones (IDS) y la Gestión de Eventos e Información de Seguridad (SIEM).

Te guiarán especialistas de Google, que actualmente trabajan en ciberseguridad, con actividades prácticas y ejemplos que simulan tareas comunes y frecuentes de este campo. Todo esto te ayudará a desarrollar tus habilidades y prepararte para trabajar.

Los/las estudiantes que completen este certificado estarán preparados/as para solicitar trabajo en el área de la ciberseguridad, en un nivel inicial. No se necesita experiencia previa.

What's inside

Syllabus

Introducción a la detección y respuesta a incidentes

La detección y respuesta a incidentes desempeña un rol fundamental en el trabajo de un analista de ciberseguridad. A continuación, explorarás cómo los profesionales de la ciberseguridad verifican y responden a amenazas y te familiarizarás con los pasos a seguir para dar respuesta a los incidentes.

Análisis y monitoreo de redes

Explorarás herramientas de análisis de redes comúnmente conocidas como rastreadores de paquetes o packet sniffers. Analizarás la red y sus paquetes en busca de amenazas maliciosas. También, crearás comandos de filtrado para inspeccionar el contenido de los paquetes capturados.

Investigación y respuesta ante incidentes

Aprenderás sobre los distintos procesos y procedimientos de las etapas de detección, investigación, análisis y respuesta a incidentes. Luego, analizarás los detalles de hashes de archivos sospechosos. También, conocerás la importancia de la recopilación de documentación y evidencias durante las etapas de detección y respuesta. Finalmente, harás una aproximación a la cronología de un incidente, realizando un mapeo de artefactos para reconstruir su línea de tiempo.

Tráfico de red y registros mediante el uso de herramientas SIEM e IDS

Explorarás los registros y cuál es su función en los sistemas de detección de intrusiones (IDS) y en los sistemas de gestión de eventos e información de seguridad (SIEM). Aprenderás de qué manera estos detectan ataques. También conocerás algunos productos de IDS y SIEM. Luego, escribirás las reglas básicas de IDS para proporcionar alertas de tráfico de red malicioso.

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Desarrolla habilidades y conocimientos que son esenciales para el rol de analista de seguridad cibernética

Proporciona habilidades prácticas y ejemplos que simulan tareas comunes y frecuentes del campo

Está diseñado para preparar a los estudiantes para el trabajo de nivel inicial en el campo de la seguridad cibernética

Se enfoca en el área de detección y respuesta a incidentes dentro de la seguridad cibernética

Ofrece una evaluación de las redes y sus paquetes en busca de amenazas

No requiere experiencia previa en seguridad cibernética

Career center

Learners who complete Haz sonar la alarma: Detección y respuesta will develop knowledge and skills that may be useful to these careers:

Incident Responder

Incident Responders play a critical role in a company's cybersecurity strategy. They are responsible for detecting, investigating, and responding to security incidents. This course can help you develop the skills and knowledge you need to succeed as an Incident Responder. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Incident Responder position.

See salaries and explore the career path for Incident Responder

Security Analyst

Security Analysts play a critical role in protecting an organization's computer networks and systems. They are responsible for monitoring networks for suspicious activity, investigating security incidents, and developing and implementing security measures. This course can help you develop the skills and knowledge you need to succeed as a Security Analyst. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Security Analyst position.

See salaries and explore the career path for Security Analyst

IT Auditor

IT Auditors are responsible for evaluating an organization's IT systems and processes to ensure that they are secure and compliant with regulations. This course can help you develop the skills and knowledge you need to succeed as an IT Auditor. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level IT Auditor position.

See salaries and explore the career path for IT Auditor

Cybersecurity Consultant

Cybersecurity Consultants help organizations to develop and implement cybersecurity strategies. They also provide guidance on how to respond to security incidents. This course can help you develop the skills and knowledge you need to succeed as a Cybersecurity Consultant. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Cybersecurity Consultant position.

See salaries and explore the career path for Cybersecurity Consultant

Security Engineer

Security Engineers are responsible for designing, implementing, and maintaining an organization's security systems. They also work to identify and mitigate security risks. This course can help you develop the skills and knowledge you need to succeed as a Security Engineer. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Security Engineer position.

See salaries and explore the career path for Security Engineer

Network Security Engineer

Network Security Engineers are responsible for designing, implementing, and maintaining an organization's network security systems. They also work to identify and mitigate network security risks. This course can help you develop the skills and knowledge you need to succeed as a Network Security Engineer. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Network Security Engineer position.

See salaries and explore the career path for Network Security Engineer

Cybersecurity Incident Responder

Cybersecurity Incident Responders are responsible for responding to security incidents. They work to identify the source of the incident, contain the damage, and restore the affected systems. This course can help you develop the skills and knowledge you need to succeed as a Cybersecurity Incident Responder. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Cybersecurity Incident Responder position.

See salaries and explore the career path for Cybersecurity Incident Responder

Malware Analyst

Malware Analysts are responsible for analyzing malware and developing countermeasures. They work to identify the type of malware, its purpose, and how it can be stopped. This course can help you develop the skills and knowledge you need to succeed as a Malware Analyst. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Malware Analyst position.

See salaries and explore the career path for Malware Analyst

Forensic Analyst

Forensic Analysts are responsible for investigating computer crimes. They work to collect and analyze evidence from computer systems to determine what happened and who is responsible. This course can help you develop the skills and knowledge you need to succeed as a Forensic Analyst. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Forensic Analyst position.

See salaries and explore the career path for Forensic Analyst

Security Architect

Security Architects are responsible for designing and implementing an organization's security architecture. They work to identify and mitigate security risks and ensure that the organization's systems are secure. This course may be useful for those who want to pursue a career as a Security Architect. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Security Architect position.

See salaries and explore the career path for Security Architect

Penetration Tester

Penetration Testers are responsible for testing an organization's security systems to identify vulnerabilities. They work to exploit these vulnerabilities and provide recommendations on how to fix them. This course may be useful for those who want to pursue a career as a Penetration Tester. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Penetration Tester position.

See salaries and explore the career path for Penetration Tester

Cyber Threat Intelligence Analyst

Cyber Threat Intelligence Analysts are responsible for collecting and analyzing information about cyber threats. They work to identify new threats, assess their impact, and develop strategies to mitigate them. This course may be useful for those who want to pursue a career as a Cyber Threat Intelligence Analyst. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Cyber Threat Intelligence Analyst position.

See salaries and explore the career path for Cyber Threat Intelligence Analyst

Risk Analyst

Risk Analysts are responsible for identifying and assessing risks to an organization. They work to develop and implement strategies to mitigate these risks. This course may be useful for those who want to pursue a career as a Risk Analyst. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Risk Analyst position.

See salaries and explore the career path for Risk Analyst

Compliance Analyst

Compliance Analysts are responsible for ensuring that an organization is compliant with laws and regulations. They work to identify and mitigate compliance risks. This course may be useful for those who want to pursue a career as a Compliance Analyst. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Compliance Analyst position.

See salaries and explore the career path for Compliance Analyst

Information Security Manager

Information Security Managers are responsible for overseeing an organization's information security program. They work to develop and implement security policies and procedures, and ensure that the organization is compliant with laws and regulations. This course may be useful for those who want to pursue a career as an Information Security Manager. You will learn how to analyze network traffic, investigate security incidents, and use tools like SIEM and IDS to detect and respond to threats. This course can provide the skills and knowledge you need to qualify for an entry-level Information Security Manager position.

See salaries and explore the career path for Information Security Manager