RCCE Course
Course #501

Infrastructure as Code Monitoring and Detection: Lab Series

📊 Level: Advanced
⏱️ Duration: 2 Days
🏷️ Track: DevSecOps
📋 Prerequisites: DevSecOps foundations
🖥️ Mode: Online Instructor-Led
📝 Course Description

RCCE students will learn secure CI/CD pipelines, infrastructure as code security, container hardening, supply chain risk management, and automated security testing. RCCE students will learn to integrate security into every phase of the software development lifecycle, shift security left with automated tooling, protect build and deployment pipelines from supply chain attacks, and build security automation that scales with development velocity. This monitoring course teaches comprehensive detection and observability strategies for proactive security operations. At an expert level, RCCE students will learn to instrument systems for security telemetry, build detection pipelines, configure alerting, and maintain monitoring coverage as environments evolve. Students gain the visibility and detection capabilities needed to catch threats early.

🎯 Target Audience
  • Security Engineers building defensive controls
  • Security Analysts and Blue Team members
  • Systems Administrators with security responsibilities
  • GRC and Risk Professionals supporting controls
  • Professionals implementing Infrastructure as Code Monitoring and Detection: Lab Series
🧠 What You Will Learn
  • Monitor and audit privilege usage; detect escalation attempts
  • Execute hands-on tasks for lab series
  • Explain Course Overview fundamentals
  • Monitor and audit privilege usage; detect escalation attempts, including Instrument systems for visibility.
  • Build detections and response workflows for privilege escalation, including Build automated detection workflows, and Secure build and deploy pipelines.
  • Execute hands-on tasks for ci/cd security — covering Secure build and deploy pipelines.
  • Execute hands-on tasks for proactive operations — covering Shift security left with automation.
  • Execute hands-on tasks for learning objectives
  • Execute hands-on tasks for instrumentation mastery
  • Build detections and response workflows for privilege escalation, including Deploy security agents across IaC, and detection-as-code pipelines.
  • Execute hands-on tasks for operational excellence — covering Harden CI/CD against supply chain TTPs.
  • Design a scalable privilege management architecture with policy and enforcement, including Git as single source of truth.
📚 Course Outline
Module 01Monitoring and Detection
Module 02Lab Series
Module 03Course Overview
Module 04Security Telemetry
Module 05Detection Pipelines
Module 06CI/CD Security
Module 07Proactive Operations
Module 08Learning Objectives
Module 09Instrumentation Mastery
Module 10Detection Engineering
Module 11Operational Excellence
Module 12GitOps Model
Module 13Immutable Infrastructure
Module 14Why IaC Monitoring Matters
🧪 Lab Details

All hands-on labs run on Rocheston Rose X OS. Students practice infrastructure as code monitoring and detection: lab series by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.

  • Lab 1: Monitor and audit privilege usage; detect escalation attempts
  • Lab 2: Execute hands-on tasks for lab series
  • Lab 3: Explain Course Overview fundamentals
  • Lab 4: Monitor and audit privilege usage; detect escalation attempts
  • Lab 5: Build detections and response workflows for privilege escalation
📊 Skill Level
Advanced
Beginner Intermediate Advanced Expert
Duration
2 Days
🎓
Certificate
Completion
🖥️
Lab Platform
Rose X OS
👨‍🏫
Mode of Training
Online Instructor-Led
🔥
Platform
Zelfire
🐦‍⬛
Cyber Range
Raven
📓
Study Material
CyberNotes
🏆 Certificate

Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Infrastructure as Code Monitoring and Detection: Lab Series, verifiable through the Rocheston certification portal.

🔑 Student Access & Materials
  • Full access to all course materials and slide decks
  • Hands-on lab access on Rocheston Rose X OS environment
  • Access to Rocheston CyberNotes
  • Access to Rocheston Zelfire — EDR/XDR SIEM platform
  • Access to Rocheston Raven — online cyber range exercise platform
  • Access to Rocheston Vulnerability Vines AI