Security technician fundamentals: hardening, patching, logs and alert triage
A compact hands-on technician course for people starting in a security operations or IT security support role: the technician’s place in a security team, asset inventory and hardening, vulnerability and patch management, log collection and alert triage, and first response with clean handover. Based on cited public sources (NIST CSF 2.0, SP 800-40 Rev. 4, SP 800-92 and SP 800-61 Rev. 3; CISA performance goals and KEV Catalog; ENISA ECSF and Threat Landscape; MITRE ATT&CK). Not a vendor exam or certification.
What you will learn
- Explain and apply: Place the security technician’s tasks within the NIST CSF 2.0 functions and the ENISA ECSF role profiles, and respect the limits of authorisation.
- Explain and apply: Maintain an asset inventory and apply baseline hardening and account controls drawn from CISA’s performance goals.
- Explain and apply: Prioritise vulnerabilities and patches using NIST SP 800-40 Rev. 4 and the CISA KEV Catalog.
- Explain and apply: Collect and protect useful logs and triage alerts with clear questions, using NIST SP 800-92 and MITRE ATT&CK.
- Explain and apply: Perform a safe first response and a complete handover consistent with NIST SP 800-61 Rev. 3.
modules
- The technician’s place in a security team
- Asset inventory, hardening and account security
- Vulnerability and patch management
- Logs and alert triage
- First response and handover
Practical technician training only. It is not a vendor exam, an official course of any certification body, or a certification, and it does not authorise you to test, scan or access any system. Always work within written authorisation, your organisation’s procedures and applicable law. This course paraphrases public sources.