Defensive securitySecurity operationsEvent correlationIncident triageThreat detectionEvidence documentationMITRE ATT&CK mapping
InfrastructureSystems & networkingWindows Event LogsSysmonOperating systemsComputer hardwareTCP/IP fundamentals