The ability to work directly with raw data is an extremely useful skill for analysts in any realm. The Python scripting language is a powerful tool for data analysis and manipulation. While the syntax for Python is relatively easy, learning how to apply Python to analysis can be challenging.

Data Science is rapidly emerging as one of the most sought-after fields in industry today. In an oft-cited study by McKinsey & Co., the United States faces a shortage of 1.5 million managers and analysts with the skills to understand and make decisions based on the analysis of big data. GTK Cyber provides training aimed at stakeholders at all corporate levels.

This interactive course will teach cybersecurity professionals how to use data science techniques to quickly manipulate and analyze network and security data and ultimately uncover valuable insights from this data. The course will cover the entire data science process from data preparation, feature engineering and selection, exploratory data analysis, data visualization, machine learning, model evaluation and optimization and finally, implementing at scale—all with a focus on security related problems.

Structured Query Language or SQL is one of the most useful means of data analysis that is no longer confined to relational databases. Many tools, including Spark, Flink, Drill, Cassandra and even ElasticSearch now support SQL queries. A solid understanding of SQL will expand the number of different data sources that an analyst can access.

Data Science is rapidly becoming a necessity within the threat hunting realm. Analysts must be able to identify anomalies, reduce false positives and train the machine to rapidly make decisions for them at scale. With the abundance of data and analyst time constraints, alert efficacy is more important than it has ever been.

Data exploration is a key step in any analyst’s workflow. As data volume and variety continue to expand, the challenge of exploring security data is likewise growing exponentially. This course will teach analysts how to take advantage of the latest open source tools to rapidly explore and obtain value from a variety of security data sources.