RCCE Course
Course #145

GCP Threats and Detection: Bootcamp Module

📊 Level: Advanced
⏱️ Duration: 2 Days
🏷️ Track: Cloud Security
📋 Prerequisites: Cloud foundations
🖥️ Mode: Online Instructor-Led
📝 Course Description

RCCE students will learn Google Cloud Platform security including IAM configuration, VPC security, Cloud Armor, Security Command Center, Cloud Audit Logs, BigQuery security, and GKE cluster security. RCCE students will learn to secure GCP workloads using native security services, configure IAM roles and permissions following least privilege, design secure VPC architectures with firewall rules and shared VPCs, enable and analyze Cloud Audit Logs for security monitoring, detect misconfigurations using Security Command Center, protect web applications with Cloud Armor, secure GKE clusters, and implement automated security remediation using Cloud Functions. This threat-focused course teaches students to think like adversaries while building robust defenses. At an expert level, RCCE students will learn to analyze attack techniques, build detection logic, and implement defensive strategies that proactively identify threats before they cause damage. Students develop a threat-informed mindset that drives better security decisions across all operational activities.

🎯 Target Audience
  • Cloud Security Architects and Engineers
  • DevSecOps and Platform Engineers
  • Identity and Access Management Specialists
  • Security Analysts securing cloud workloads
  • Professionals implementing GCP Threats and Detection: Bootcamp Module
🧠 What You Will Learn
  • Build detections and response workflows for privilege escalation
  • Execute hands-on tasks for advanced cyber defense mastery
  • Explain Executive Overview fundamentals
  • Execute hands-on tasks for business drivers
  • Execute hands-on tasks for threat landscape — covering Regulatory mandates (FedRAMP, SOC 2, ISO, Credential theft and IAM privilege escalation.
  • Execute hands-on tasks for supply chain security across gcp services — covering Credential theft and IAM privilege escalation.
  • Explain GCP Security Architecture Overview fundamentals
  • Execute hands-on tasks for application layer
  • Integrate privilege controls with identity providers and SIEM telemetry
  • Execute hands-on tasks for network security
  • Execute hands-on tasks for vpc, firewall rules, shared vpc, private google access
  • Execute hands-on tasks for data protection
📚 Course Outline
Module 01GCP Threats and Detection: Mastery
Module 02Advanced Cyber Defense Mastery
Module 03Executive Overview
Module 04Business Drivers
Module 05Threat Landscape
Module 06Supply chain security across GCP services
Module 07GCP Security Architecture Overview
Module 08Application Layer
Module 09Identity & Access
Module 10Network Security
Module 11VPC, Firewall Rules, Shared VPC, Private Google Access
Module 12Data Protection
Module 13Monitoring & Detection
Module 14Core IAM Principles
🧪 Lab Details

All hands-on labs run on Rocheston Rose X OS. Students practice gcp threats and detection: bootcamp module by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.

  • Lab 1: Build detections and response workflows for privilege escalation
  • Lab 2: Execute hands-on tasks for advanced cyber defense mastery
  • Lab 3: Explain Executive Overview fundamentals
  • Lab 4: Execute hands-on tasks for business drivers
  • Lab 5: Execute hands-on tasks for threat landscape
📊 Skill Level
Advanced
Beginner Intermediate Advanced Expert
Duration
2 Days
🎓
Certificate
Completion
🖥️
Lab Platform
Rose X OS
👨‍🏫
Mode of Training
Online Instructor-Led
🔥
Platform
Zelfire
🐦‍⬛
Cyber Range
Raven
📓
Study Material
CyberNotes
🏆 Certificate

Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for GCP Threats and Detection: Bootcamp Module, verifiable through the Rocheston certification portal.

🔑 Student Access & Materials
  • Full access to all course materials and slide decks
  • Hands-on lab access on Rocheston Rose X OS environment
  • Access to Rocheston CyberNotes
  • Access to Rocheston Zelfire — EDR/XDR SIEM platform
  • Access to Rocheston Raven — online cyber range exercise platform
  • Access to Rocheston Vulnerability Vines AI