Understanding Indicators of Compromise Cyber Range Training (IR208)

#1732874: Understanding Indicators of Compromise Cyber Range Training (IR208)

Description:	CISA is proud to offer the Understanding Indicators of Compromise Cyber Range Training (IR208) event. We are excited to share this information with stakeholders across the Federal enterprise and nationally. Cyberattacks have made headlines for years, and the pace of threat activity faced by government and private sector organizations is accelerating. Indicators of compromise (IOCs) are the digital and informational “clues” that incident responders use to detect, diagnose, halt, and remediate malicious activity in their networks. In this training, participants will be introduced to common IOCs and common protocols used to find them in their own systems. Experience these benefits and more: Importance of IOCs: Define IOCs and why tracking, investigating, and reporting IOCs are crucial to enterprise cybersecurity. Students will understand how IOCs are used for threat hunting and incident response, different types of indicators, and how to collect different categories of IOCs. Practice in a realistic environment: Learn about the MITRE ATT&CK® Framework and how it supports the analysis of IOCs, potential threat actors related to the activity, and their associated tactics, techniques, and procedures (TTPs). Perform lab activities to detect IOCs using the MITRE ATT&CK Framework. Expert facilitation and peer discussion: Throughout the course, expert cybersecurity engineers moderate discussion and conduct a recovery debrief for the exercises. Participants are encouraged to help one another and offer relevant input to address peers' questions. Approved registrants must attend a mandatory student technical check the day before the training to establish a connection to the course content and lab environment. Due to participation requirements, please register no later than 48 hours before the course start.
More info:	https://cisa.webex.com/webappng/sites/cisa/meeting/register/ca63e4c0527d48ce805932707d5ed764?ticket=4832534b000000065ed42a434a18b065be3534cf48b8b09df7ad102e263a04939121636190b2122e&timestamp=1776094808900&RGID=rdcd50550b966c922fdcb3556ef0857a9&isAutoPopRegisterForm=false

Description:

CISA is proud to offer the Understanding Indicators of Compromise Cyber Range Training (IR208) event. We are excited to share this information with stakeholders across the Federal enterprise and nationally.

Cyberattacks have made headlines for years, and the pace of threat activity faced by government and private sector organizations is accelerating. Indicators of compromise (IOCs) are the digital and informational “clues” that incident responders use to detect, diagnose, halt, and remediate malicious activity in their networks. In this training, participants will be introduced to common IOCs and common protocols used to find them in their own systems.

Experience these benefits and more:

Importance of IOCs: Define IOCs and why tracking, investigating, and reporting IOCs are crucial to enterprise cybersecurity. Students will understand how IOCs are used for threat hunting and incident response, different types of indicators, and how to collect different categories of IOCs.

Practice in a realistic environment: Learn about the MITRE ATT&CK® Framework and how it supports the analysis of IOCs, potential threat actors related to the activity, and their associated tactics, techniques, and procedures (TTPs). Perform lab activities to detect IOCs using the MITRE ATT&CK Framework.

Expert facilitation and peer discussion: Throughout the course, expert cybersecurity engineers moderate discussion and conduct a recovery debrief for the exercises. Participants are encouraged to help one another and offer relevant input to address peers' questions.

Approved registrants must attend a mandatory student technical check the day before the training to establish a connection to the course content and lab environment.

Due to participation requirements, please register no later than 48 hours before the course start.

More info:

https://cisa.webex.com/webappng/sites/cisa/meeting/register/ca63e4c0527d48ce805932707d5ed764?ticket=4832534b000000065ed42a434a18b065be3534cf48b8b09df7ad102e263a04939121636190b2122e&timestamp=1776094808900&RGID=rdcd50550b966c922fdcb3556ef0857a9&isAutoPopRegisterForm=false

Date added	April 13, 2026, 5:41 p.m.
Source	Webex
Subjects	Courses and Accreditations PodCasts / Webcast / Webinar / eSummit / Virtual Event etc. US Cybersecurity and Infrastructure Security Agency (CISA) - Previously US-CERT
Venue	May 12, 2026, midnight - May 13, 2026, midnight