[{"id":"76682","title":"Course overview","description":"

This module introduces the audience, prerequisites, and agenda for the learning pathway.

","steps":[{"id":"529380","prompt":null,"isOptional":true,"activities":[{"id":"522229","href":"/paths/2150/course_templates/1195/video/522229","isLocked":false,"duration":279000,"title":"Course overview","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"76683","title":"Monitoring and intake for Tier 1 analysts","description":"

In this module, you will explore two critical phases of the incident management lifecycle: incident monitoring and intake. Then, you will investigate how cyber events are detected. You will learn about automated and manual detection methods, the difference between internal and external alerts, and how to distinguish between false positives and true positives. You will also learn to assess the impact of an incident, use an incident response plan, and appropriately categorize an incident in order to determine your response strategy. You will then leverage real-world examples for Cymbal Federal to illustrate common containment strategies and their application in remediation scenarios. Finally, you will learn about the SecOps support activities that are essential during the monitoring and intake phases. The focus here will be on the implementation of standard operating procedures.

","steps":[{"id":"529381","prompt":null,"isOptional":true,"activities":[{"id":"522230","href":"/paths/2150/course_templates/1195/video/522230","isLocked":false,"duration":95000,"title":"Module overview","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529382","prompt":null,"isOptional":true,"activities":[{"id":"522231","href":"/paths/2150/course_templates/1195/video/522231","isLocked":false,"duration":129000,"title":"Monitoring security events","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529383","prompt":null,"isOptional":true,"activities":[{"id":"522232","href":"/paths/2150/course_templates/1195/video/522232","isLocked":false,"duration":167000,"title":"Automated detection methods","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529384","prompt":null,"isOptional":true,"activities":[{"id":"522233","href":"/paths/2150/course_templates/1195/video/522233","isLocked":false,"duration":201000,"title":"Internal detection methods","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529385","prompt":null,"isOptional":true,"activities":[{"id":"522234","href":"/paths/2150/course_templates/1195/video/522234","isLocked":false,"duration":192000,"title":"External detection methods","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529386","prompt":null,"isOptional":true,"activities":[{"id":"522235","href":"/paths/2150/course_templates/1195/video/522235","isLocked":false,"duration":223000,"title":"Incident intake","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529387","prompt":null,"isOptional":true,"activities":[{"id":"522236","href":"/paths/2150/course_templates/1195/video/522236","isLocked":false,"duration":103000,"title":"Alert triage","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529388","prompt":null,"isOptional":true,"activities":[{"id":"522237","href":"/paths/2150/course_templates/1195/video/522237","isLocked":false,"duration":147000,"title":"The alert triage process","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529389","prompt":null,"isOptional":true,"activities":[{"id":"522238","href":"/paths/2150/course_templates/1195/video/522238","isLocked":false,"duration":356000,"title":"Alert triage at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529390","prompt":null,"isOptional":true,"activities":[{"id":"522239","href":"/paths/2150/course_templates/1195/video/522239","isLocked":false,"duration":72000,"title":"Alert triage best practices","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529391","prompt":null,"isOptional":true,"activities":[{"id":"522240","href":"/paths/2150/course_templates/1195/video/522240","isLocked":false,"duration":136000,"title":"Data collection","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529392","prompt":null,"isOptional":true,"activities":[{"id":"522241","href":"/paths/2150/course_templates/1195/video/522241","isLocked":false,"duration":95000,"title":"Data categorization","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529393","prompt":null,"isOptional":true,"activities":[{"id":"522242","href":"/paths/2150/course_templates/1195/video/522242","isLocked":false,"duration":98000,"title":"Impact Assessment","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529394","prompt":null,"isOptional":true,"activities":[{"id":"522243","href":"/paths/2150/course_templates/1195/video/522243","isLocked":false,"duration":84000,"title":"Tier 1 remediation actions","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529395","prompt":null,"isOptional":true,"activities":[{"id":"522244","href":"/paths/2150/course_templates/1195/video/522244","isLocked":false,"duration":79000,"title":"A phishing attack at Cymbal Federal is fully resolved in Tier 1","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529396","prompt":null,"isOptional":true,"activities":[{"id":"522245","href":"/paths/2150/course_templates/1195/video/522245","isLocked":false,"duration":263000,"title":"A phishing attack at Cymbal Federal is escalated to Tier 2","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529397","prompt":null,"isOptional":true,"activities":[{"id":"522246","href":"/paths/2150/course_templates/1195/video/522246","isLocked":false,"duration":245000,"title":"Support processes","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529398","prompt":null,"isOptional":true,"activities":[{"id":"522247","href":"/paths/2150/course_templates/1195/video/522247","isLocked":false,"duration":131000,"title":"ServiceNow tickets","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529399","prompt":null,"isOptional":true,"activities":[{"id":"522248","href":"/paths/2150/course_templates/1195/video/522248","isLocked":false,"duration":285000,"title":"Collaborating with other Tier 1 analysts","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529400","prompt":null,"isOptional":true,"activities":[{"id":"522249","href":"/paths/2150/course_templates/1195/video/522249","isLocked":false,"duration":171000,"title":"Support processes at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529401","prompt":null,"isOptional":true,"activities":[{"id":"522250","href":"/paths/2150/course_templates/1195/video/522250","isLocked":false,"duration":70000,"title":"Module review","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529402","prompt":null,"isOptional":false,"activities":[{"id":"522251","href":"/paths/2150/course_templates/1195/quizzes/522251","isLocked":false,"duration":600000,"title":"Knowledge check","description":null,"type":"quiz","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"76684","title":"Incident response for Tier 2 analysts","description":"

In this module, you will learn how to investigate an incident, including data correlation and data analysis. You will also learn advanced techniques that Tier 2 analysts can use for containing and remediating incidents. This may involve more complex solutions, such as re-configuring network devices, applying sophisticated patches, or executing custom scripts to neutralize threats and secure systems. Then, you will learn how to oversee the recovery process so that all systems return to normal function securely and efficiently. You will explore how to compile comprehensive reports that detail the incident timeline, actions taken, and recommendations for preventing future incidents. Finally, you will learn about the importance of collaborating with other teams, such as incident response teams or external experts. This includes understanding when and how to escalate further and how to coordinate effectively for a swift and thorough resolution of the incident.

","steps":[{"id":"529403","prompt":null,"isOptional":true,"activities":[{"id":"522252","href":"/paths/2150/course_templates/1195/video/522252","isLocked":false,"duration":108000,"title":"Module overview","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529404","prompt":null,"isOptional":true,"activities":[{"id":"522253","href":"/paths/2150/course_templates/1195/video/522253","isLocked":false,"duration":219000,"title":"Incident response for Tier 2","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529405","prompt":null,"isOptional":true,"activities":[{"id":"522254","href":"/paths/2150/course_templates/1195/video/522254","isLocked":false,"duration":166000,"title":"Reception of an escalated incident ticket","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529406","prompt":null,"isOptional":true,"activities":[{"id":"522255","href":"/paths/2150/course_templates/1195/video/522255","isLocked":false,"duration":113000,"title":"Review of an escalated ticket","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529407","prompt":null,"isOptional":true,"activities":[{"id":"522256","href":"/paths/2150/course_templates/1195/video/522256","isLocked":false,"duration":210000,"title":"Ticket management with ServiceNow","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529408","prompt":null,"isOptional":true,"activities":[{"id":"522257","href":"/paths/2150/course_templates/1195/video/522257","isLocked":false,"duration":146000,"title":"An escalated ticket at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529409","prompt":null,"isOptional":true,"activities":[{"id":"522258","href":"/paths/2150/course_templates/1195/video/522258","isLocked":false,"duration":180000,"title":"Incident investigation","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529410","prompt":null,"isOptional":true,"activities":[{"id":"522259","href":"/paths/2150/course_templates/1195/video/522259","isLocked":false,"duration":287000,"title":"Data correlation during investigation","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529411","prompt":null,"isOptional":true,"activities":[{"id":"522260","href":"/paths/2150/course_templates/1195/video/522260","isLocked":false,"duration":285000,"title":"Key sources for data correlation","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529412","prompt":null,"isOptional":true,"activities":[{"id":"522261","href":"/paths/2150/course_templates/1195/video/522261","isLocked":false,"duration":100000,"title":"Data correlation at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529413","prompt":null,"isOptional":true,"activities":[{"id":"522262","href":"/paths/2150/course_templates/1195/video/522262","isLocked":false,"duration":126000,"title":"Incident analysis during investigation","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529414","prompt":null,"isOptional":true,"activities":[{"id":"522263","href":"/paths/2150/course_templates/1195/video/522263","isLocked":false,"duration":41000,"title":"System analysis strategies","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529415","prompt":null,"isOptional":true,"activities":[{"id":"522264","href":"/paths/2150/course_templates/1195/video/522264","isLocked":false,"duration":555000,"title":"System analysis at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529416","prompt":null,"isOptional":true,"activities":[{"id":"522265","href":"/paths/2150/course_templates/1195/video/522265","isLocked":false,"duration":247000,"title":"Malware analysis strategies","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529417","prompt":null,"isOptional":true,"activities":[{"id":"522266","href":"/paths/2150/course_templates/1195/video/522266","isLocked":false,"duration":585000,"title":"Malware analysis at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529418","prompt":null,"isOptional":true,"activities":[{"id":"522267","href":"/paths/2150/course_templates/1195/video/522267","isLocked":false,"duration":130000,"title":"Network traffic analysis strategies","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529419","prompt":null,"isOptional":true,"activities":[{"id":"522268","href":"/paths/2150/course_templates/1195/video/522268","isLocked":false,"duration":694000,"title":"Network traffic analysis at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529420","prompt":null,"isOptional":true,"activities":[{"id":"522269","href":"/paths/2150/course_templates/1195/video/522269","isLocked":false,"duration":81000,"title":"Key points about incident investigation","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529421","prompt":null,"isOptional":true,"activities":[{"id":"522270","href":"/paths/2150/course_templates/1195/video/522270","isLocked":false,"duration":204000,"title":"Remediation of an incident","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529422","prompt":null,"isOptional":true,"activities":[{"id":"522271","href":"/paths/2150/course_templates/1195/video/522271","isLocked":false,"duration":94000,"title":"Containing a malware outbreak at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529423","prompt":null,"isOptional":true,"activities":[{"id":"522272","href":"/paths/2150/course_templates/1195/video/522272","isLocked":false,"duration":147000,"title":"Containing a malware outbreak at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529424","prompt":null,"isOptional":true,"activities":[{"id":"522273","href":"/paths/2150/course_templates/1195/video/522273","isLocked":false,"duration":91000,"title":"Remediation of a DDoS attack at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529425","prompt":null,"isOptional":true,"activities":[{"id":"522274","href":"/paths/2150/course_templates/1195/video/522274","isLocked":false,"duration":56000,"title":"Key points on containment and remediation","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529426","prompt":null,"isOptional":true,"activities":[{"id":"522275","href":"/paths/2150/course_templates/1195/video/522275","isLocked":false,"duration":150000,"title":"The recovery process","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529427","prompt":null,"isOptional":true,"activities":[{"id":"522276","href":"/paths/2150/course_templates/1195/video/522276","isLocked":false,"duration":86000,"title":"Recovery from a DDoS attack at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529428","prompt":null,"isOptional":true,"activities":[{"id":"522277","href":"/paths/2150/course_templates/1195/video/522277","isLocked":false,"duration":170000,"title":"Report on an incident","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529429","prompt":null,"isOptional":true,"activities":[{"id":"522278","href":"/paths/2150/course_templates/1195/video/522278","isLocked":false,"duration":80000,"title":"Postmortem","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529430","prompt":null,"isOptional":true,"activities":[{"id":"522279","href":"/paths/2150/course_templates/1195/video/522279","isLocked":false,"duration":273000,"title":"Postmortem for a malware attack at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529431","prompt":null,"isOptional":true,"activities":[{"id":"522280","href":"/paths/2150/course_templates/1195/video/522280","isLocked":false,"duration":165000,"title":"Support processes for escalation and collaboration","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529432","prompt":null,"isOptional":true,"activities":[{"id":"522281","href":"/paths/2150/course_templates/1195/video/522281","isLocked":false,"duration":139000,"title":"Common questions on support processes","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529433","prompt":null,"isOptional":true,"activities":[{"id":"522282","href":"/paths/2150/course_templates/1195/video/522282","isLocked":false,"duration":53000,"title":"Module review.mp4","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529434","prompt":null,"isOptional":false,"activities":[{"id":"522283","href":"/paths/2150/course_templates/1195/quizzes/522283","isLocked":false,"duration":720000,"title":"Knowledge check","description":null,"type":"quiz","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"76685","title":"Runbooks in action: Predefined incident response processes for Tier 1 and Tier 2 analysts","description":"

In this module, you will learn about runbook processes that handle common incident response processes on Google Distributed Cloud (GDC) air-gapped. Then, you will learn how runbooks assist in incident response by Tier 1 and Tier 2 analysts. Next, you will explore the high-level, end-to-end incident management processes that are provided by a runbook. Finally, you will learn about the most common incidents covered in the GDC runbooks. You will see this in practice by exploring a runbook example at Cymbal Federal.

","steps":[{"id":"529435","prompt":null,"isOptional":true,"activities":[{"id":"522284","href":"/paths/2150/course_templates/1195/video/522284","isLocked":false,"duration":61000,"title":"Module overview","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529436","prompt":null,"isOptional":true,"activities":[{"id":"522285","href":"/paths/2150/course_templates/1195/video/522285","isLocked":false,"duration":179000,"title":"Introduction to coded guidelines","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529437","prompt":null,"isOptional":true,"activities":[{"id":"522286","href":"/paths/2150/course_templates/1195/video/522286","isLocked":false,"duration":287000,"title":"Incident response plans, playbooks, and runbooks","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529438","prompt":null,"isOptional":true,"activities":[{"id":"522287","href":"/paths/2150/course_templates/1195/video/522287","isLocked":false,"duration":300000,"title":"Determining ownership assignment","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529439","prompt":null,"isOptional":true,"activities":[{"id":"522288","href":"/paths/2150/course_templates/1195/video/522288","isLocked":false,"duration":160000,"title":"Determining impact severity","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529440","prompt":null,"isOptional":true,"activities":[{"id":"522289","href":"/paths/2150/course_templates/1195/video/522289","isLocked":false,"duration":431000,"title":"Runbooks in SecOps","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529441","prompt":null,"isOptional":true,"activities":[{"id":"522290","href":"/paths/2150/course_templates/1195/video/522290","isLocked":false,"duration":291000,"title":"Runbooks for Tier 2 incident response","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529442","prompt":null,"isOptional":true,"activities":[{"id":"522291","href":"/paths/2150/course_templates/1195/video/522291","isLocked":false,"duration":269000,"title":"Runbooks for containment, remediation, and recovery","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529443","prompt":null,"isOptional":true,"activities":[{"id":"522292","href":"/paths/2150/course_templates/1195/video/522292","isLocked":false,"duration":94000,"title":"Runbooks for post-incident actions","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529444","prompt":null,"isOptional":true,"activities":[{"id":"522293","href":"/paths/2150/course_templates/1195/video/522293","isLocked":false,"duration":111000,"title":"Common runbooks for GDC","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529445","prompt":null,"isOptional":true,"activities":[{"id":"522294","href":"/paths/2150/course_templates/1195/video/522294","isLocked":false,"duration":548000,"title":"Runbooks at Cymbal Federal","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529446","prompt":null,"isOptional":true,"activities":[{"id":"522295","href":"/paths/2150/course_templates/1195/video/522295","isLocked":false,"duration":55000,"title":"Module review","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529447","prompt":null,"isOptional":false,"activities":[{"id":"522296","href":"/paths/2150/course_templates/1195/quizzes/522296","isLocked":false,"duration":240000,"title":"Knowledge check","description":null,"type":"quiz","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"76686","title":"Resources","description":"

Review course content

","steps":[{"id":"529448","prompt":null,"isOptional":true,"activities":[{"id":"522297","href":"/paths/2150/course_templates/1195/documents/522297","isLocked":false,"duration":1800000,"title":"Course Slides","description":null,"type":"document","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"529449","prompt":null,"isOptional":true,"activities":[{"id":"522298","href":"/paths/2150/course_templates/1195/documents/522298","isLocked":false,"duration":1800000,"title":"Additional Resources","description":null,"type":"document","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"next-steps","title":"Your Next Steps","description":null,"steps":[{"id":"badge-step","prompt":null,"isOptional":true,"activities":[{"id":"badge","href":null,"isLocked":true,"duration":null,"title":"Course Badge","description":null,"type":"badge","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":true}]

07

SecOps on GDC for Tier 1 and Tier 2 Analysts