VU23225 Investigate Windows security features.

This unit investigates the fundamentals of Windows security features. It requires the ability to comprehend the basic architecture of Windows, identify security features such as log files, instrumentation and how a basic attack might occur. The unit investigates tools to collect security data centrally and query it to identify potential threats.

In this unit students will:

• Examine the structure of the Windows Operating System
• Examine System Administration tools
• Investigate tools used to examine basic Windows attacks
• Investigate the function and role of a Security Operation Centre (SOC) and Security Information Event Management (SIEM) tool
• Examine methods to collect data from multiple end points into a SIEM tool
• Implement mitigation strategies for threats.