Network telemetry Monitoring and Detection: Bootcamp Unit
RCCE students will learn cloud network security fundamentals including virtual network design, subnet architecture, security groups, network ACLs, load balancer security, CDN protection, and hybrid connectivity security. RCCE students will learn to design secure cloud network architectures across AWS VPC, Azure VNet, and GCP VPC, implement micro-segmentation strategies, configure web application firewalls for cloud workloads, secure inter-region and hybrid connections using VPN and private connectivity services, monitor cloud network traffic for anomalies, and troubleshoot cloud network security issues while maintaining least-privilege network access. This monitoring course teaches comprehensive detection and observability strategies for proactive security operations. Starting from foundational concepts, RCCE students will learn to instrument systems for security telemetry, build detection pipelines, configure alerting, and maintain monitoring coverage as environments evolve. Students gain the visibility and detection capabilities needed to catch threats early.
- Security Engineers building defensive controls
- Security Analysts and Blue Team members
- Systems Administrators with security responsibilities
- GRC and Risk Professionals supporting controls
- Professionals implementing Network telemetry Monitoring and Detection: Bootcamp Unit
- Monitor and audit privilege usage; detect escalation attempts
- Execute hands-on tasks for key security benefits — covering Early threat detection reduces blast radius.
- Explain Telemetry Data Sources Overview fundamentals
- Execute hands-on tasks for flow data
- Execute hands-on tasks for packet capture
- Execute hands-on tasks for device logs — covering Critical for baseline behavior.
- Execute hands-on tasks for network flow data deep dive — covering Cisco-originated protocol, Packet sampling approach.
- Execute hands-on tasks for packet capture strategies
- Execute hands-on tasks for firewall logs — covering Allow/deny decisions, Query and response records.
| Module 01 | Network Telemetry |
| Module 02 | Monitoring and Detection |
| Module 03 | What Is Network Telemetry |
| Module 04 | Key Security Benefits |
| Module 05 | Observability vs Monitoring |
| Module 06 | Telemetry Data Sources Overview |
| Module 07 | Flow Data |
| Module 08 | Packet Capture |
| Module 09 | Device Logs |
| Module 10 | Network Flow Data Deep Dive |
| Module 11 | Packet Capture Strategies |
| Module 12 | Firewall Logs |
| Module 13 | DNS Logs |
| Module 14 | Authentication Logs |
All hands-on labs run on Rocheston Rose X OS. Students practice network telemetry monitoring and detection: bootcamp unit by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.
- Lab 1: Monitor and audit privilege usage; detect escalation attempts
- Lab 2: Monitor and audit privilege usage; detect escalation attempts
- Lab 3: Monitor and audit privilege usage; detect escalation attempts
- Lab 4: Execute hands-on tasks for key security benefits
- Lab 5: Monitor and audit privilege usage; detect escalation attempts
Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Network telemetry Monitoring and Detection: Bootcamp Unit, verifiable through the Rocheston certification portal.
- Full access to all course materials and slide decks
- Hands-on lab access on Rocheston Rose X OS environment
- Access to Rocheston CyberNotes
- Access to Rocheston Zelfire — EDR/XDR SIEM platform
- Access to Rocheston Raven — online cyber range exercise platform
- Access to Rocheston Vulnerability Vines AI