From theoretical knowledge to daily procedures.
IT administrators manage the most critical accounts and systems and are often the first point of contact during an incident. The path develops prevention, detection and response capabilities through laboratories, configurations and cases consistent with the customer's environment.
Available modules
- hardening of exposed Windows, Linux, devices and services;
- patch management, exceptions and coverage verification;
- privileged accounts, MFA, service accounts and remote access;
- useful logging, time synchronization and retention;
- EDR/XDR alert triage, firewall, cloud and identity;
- backup, restore test and restart from a reliable environment;
- Microsoft 365, cloud security and share management;
- first incident response actions and log preservation;
- vulnerability management and remediation verification.
Didactic method
The level is defined through an initial comparison. The sessions alternate explanations, examples, exercises and discussion of existing procedures. Where possible, isolated laboratories or prepared data are used, avoiding uncontrolled changes to production systems.
Results
The customer receives technical material, operational checklists and indications for improvement that emerge during the course. The journey may conclude with a triage or response exercise to test capabilities, communications and escalation.