Recovery testing Monitoring and Detection: Primer
RCCE students will learn business continuity planning, disaster recovery, ransomware preparedness, high availability architectures, and recovery testing. RCCE students will learn to design and implement resilient systems that maintain operations during disruptions, develop and validate recovery procedures, conduct realistic recovery exercises, and build organizational resilience that withstands ransomware, natural disasters, and infrastructure failures. This monitoring course teaches comprehensive detection and observability strategies for proactive security operations. Starting from foundational concepts, RCCE students will learn to instrument systems for security telemetry, build detection pipelines, configure alerting, and maintain monitoring coverage as environments evolve. Students gain the visibility and detection capabilities needed to catch threats early.
- Security Engineers building defensive controls
- Security Analysts and Blue Team members
- Systems Administrators with security responsibilities
- GRC and Risk Professionals supporting controls
- Professionals implementing Recovery testing Monitoring and Detection: Primer
- Execute hands-on tasks for recovery testing
- Monitor and audit privilege usage; detect escalation attempts
- Execute hands-on tasks for primer — beginner level
- Execute hands-on tasks for business continuity, disaster recovery, ransomware preparedness,
- Build detections and response workflows for privilege escalation
- Explain Course Overview & Learning Path fundamentals
- Execute hands-on tasks for resilience & recovery — covering Business continuity planning, Disaster recovery fundamentals.
- Execute hands-on tasks for hands-on labs & artifacts — covering Recovery exercise scenarios, Detection rule building.
- Monitor and audit privilege usage; detect escalation attempts, including Security telemetry fundamentals, and Detection pipeline design.
- Execute hands-on tasks for what is organizational resilience?
- Execute hands-on tasks for key dimensions — covering Ability to absorb and recover from disruptions, Technical: infrastructure redundancy.
- Execute hands-on tasks for why resilience matters — covering Downtime costs average $5,600 per minute.
| Module 01 | Recovery Testing |
| Module 02 | Monitoring and Detection |
| Module 03 | Primer — Beginner Level |
| Module 04 | Business Continuity, Disaster Recovery, Ransomware Preparedness, |
| Module 05 | High Availability, Recovery Testing, Detection & Observability |
| Module 06 | Course Overview & Learning Path |
| Module 07 | Resilience & Recovery |
| Module 08 | Hands-On Labs & Artifacts |
| Module 09 | Monitoring & Detection |
| Module 10 | What Is Organizational Resilience? |
| Module 11 | Key Dimensions |
| Module 12 | Why Resilience Matters |
| Module 13 | Business Continuity Planning Fundamentals |
| Module 14 | BCP Lifecycle |
All hands-on labs run on Rocheston Rose X OS. Students practice recovery testing monitoring and detection: primer by implementing the controls discussed in class, with a focus on real-world deployment, monitoring, and validation.
- Lab 1: Execute hands-on tasks for recovery testing
- Lab 2: Monitor and audit privilege usage; detect escalation attempts
- Lab 3: Execute hands-on tasks for primer — beginner level
- Lab 4: Execute hands-on tasks for business continuity, disaster recovery, ransomware preparedness,
- Lab 5: Build detections and response workflows for privilege escalation
Upon successful completion of this course, students will receive an official RCCE Course Completion Certificate for Recovery testing Monitoring and Detection: Primer, verifiable through the Rocheston certification portal.
- Full access to all course materials and slide decks
- Hands-on lab access on Rocheston Rose X OS environment
- Access to Rocheston CyberNotes
- Access to Rocheston Zelfire — EDR/XDR SIEM platform
- Access to Rocheston Raven — online cyber range exercise platform
- Access to Rocheston Vulnerability Vines AI