OK

5

s

g

k

n

The topic "Sound the Alarm: Detection and Response" delves into the critical aspects of cybersecurity related to detecting and responding to security incidents effectively. This review will explore the key points covered in the topic and provide an assessment of its relevance and importance in the realm of cybersecurity. First and foremost, the topic emphasizes the significance of timely detection of security incidents. It underscores the fact that early detection can significantly mitigate the impact of cyber threats, preventing them from escalating into full-blown security breaches. This is a crucial aspect of cybersecurity as it allows organizations to proactively identify and address potential threats before they cause substantial harm. Furthermore, the topic delves into the various techniques and tools used for detecting security incidents. It highlights the importance of having robust monitoring systems in place that can continuously track and analyze network traffic, system logs, and other relevant data sources for suspicious activities or anomalies. Additionally, the topic discusses the role of intrusion detection systems (IDS), intrusion prevention systems (IPS), security information and event management (SIEM) solutions, and other advanced detection technologies in enhancing the overall security posture of an organization. In terms of incident response, the topic emphasizes the need for a well-defined and structured response plan. It outlines the key steps involved in an effective incident response process, including identification, containment, eradication, recovery, and lessons learned. The importance of having a dedicated incident response team, clear communication channels, and predefined response procedures is also underscored in the topic. Overall, "Sound the Alarm: Detection and Response" provides valuable insights into the critical aspects of cybersecurity related to detecting and responding to security incidents. It serves as a reminder of the proactive measures that organizations must take to protect their assets, data, and systems from evolving cyber threats. By implementing robust detection mechanisms and establishing efficient incident response protocols, organizations can strengthen their cybersecurity posture and mitigate the risks associated with cyber attacks.

I like the models and activities until the final section. There were two optional activities that were part of tests and I don't think that is fair to have activities that are optional and then test on them, without having another way of obtaining the information besides down loading software or fumbling around trying to find the answers on an application you have never seen. I am enjoying the readings and videos very much and they are very helpful most of the time.

The topics covered in the course gives the peak idea how the cybersecurity analyst performs in an organization. Freshers like me who are new to the topic feels little bit tough when compared to previous courses. Overall the way of delivering the subject makes any kind of person understand well. Practice Practice Practice ......Keep on understanding the subject that makes anyone strong..Thanks

This section was a lot of fun, but not as fun as it could be. Theres a lot of potential for hands on during this lesson which the Google IT certification had. The information was pretty text book so even if you have a degree in cybersecurity, you will need to brush up on some vocab and the coursera definitions for those words.

I would have given 5 stars but I expected more hands on with SPLUNK and CHRONICLE but it was just brief overview so I don't feel confident in including it in my resume. CHRONICLE link was not even working due to some issue - might be best to check that out too. Had to skip it because of that. Other than these, it was great.

It didn't flow as smoothly as the other courses and the videos of the main presenter were dubbed on the lower volume spectrum. Overall, another good course in the Google arsenal as I progress through this learning journey.

I really loved this the only addition I would recommend would be going in depth in understanding logs and traffic and whats actually happening..This is covered but not as good as it could be however, amazing lesson!!

I think a little more in depth training on (tcpdump-wireshark-splunk-chronicle) perhaps even with some real life data. It's one thing to capture data but interpreting it is a totally different skill.

I loved this coursed and learned so much. The only thing I would have liked to see is if the all of the SIEM tools were integrated into a lab like many of the other labs are directly in the courses.

The sound for the main videos was very low. Even with max volume I had trouble hearing. I didn't have this problem with the other courses in this certificate. Great content though!

More details and 2 or 3 Alternate approaches to completing tasks to give students better understanding of how Splunk, Chronicle, Suricata and TCP Dump work, would be useful.

Some of the later labs are missing steps for Splunk and Chronicle. Specifically on Chronicle it is missing a step telling the user to use legacy viewing mode.

just a few improvements that should be made, some parts confused me of not knowing what is being asked of me. Other than that, it's an excellent course.

some of the knowledge quiz questions are just an eyesore, it doesn't really help me understand the material, rather just created more confusion.

Excellent course. The only thing I would change would be to give more lab time to learn the SIEM tools since these are not easy to learn.

The training on Chronicle was lacking on details that would help a person successfully answer each of the required questions.

This was a challenging course. I had problems getting into some of the labs, so I was unable to complete them (2).

Loved the information provided wish there was more hands on items like the SIEMs tools to get more experience

great course just not something i was to excited to learn as i found this to be a bit more boring for myself.