AI Automation for Cybersecurity Training in Colombo, Sri Lanka

This instructor-led training introduces participants to the use of Artificial Intelligence for cybersecurity automation, threat analysis, security operations, and incident response. The program covers AI fundamentals for security professionals, AI-assisted threat detection, security data analysis, automated workflows, incident investigation, and practical implementation approaches. Participants will work through guided hands-on activities using suitable open-source and freely available tools and features.

AI Fundamentals for Cybersecurity

AI & Cybersecurity Fundamentals

• Introduction to AI and its role in cybersecurity
• Machine learning and generative AI concepts
• AI applications across security operations
• Opportunities and limitations of AI in cybersecurity

AI-Assisted Threat Detection & Analysis

• Identifying suspicious activities using AI
• Threat classification and security event analysis
• AI-assisted anomaly detection concepts
• Analyzing indicators of compromise and threat information

Security Data & Log Analysis

• Working with security logs and structured data
• AI-assisted log analysis
• Identifying patterns and unusual activities
• Summarizing and correlating security events

Prompting for Cybersecurity Tasks

• Prompt engineering fundamentals for security professionals
• Creating effective prompts for threat analysis
• Security investigation and summarization prompts
• Validating AI-generated security outputs

• Hands-on exercises

Cybersecurity Automation & Threat Intelligence

Security Workflow Automation

• Fundamentals of cybersecurity automation
• Identifying repetitive security tasks for automation
• Designing AI-assisted security workflows
• Automating security analysis and reporting tasks

AI for Threat Intelligence

• Collecting and analyzing threat intelligence
• Processing indicators and threat information
• AI-assisted threat intelligence summarization
• Connecting threat intelligence with security investigations

AI-Assisted Security Operations

• Alert analysis and prioritization
• Security incident triage
• Identifying potential false positives
• Generating investigation summaries and recommendations

Automation with Scripts & APIs

• Introduction to scripting for security automation
• Working with security-related APIs
• Processing security data programmatically
• Building basic automated security workflows

• Hands-on exercises

AI-Assisted Incident Response & Security Workflows

AI for Incident Investigation

• Incident investigation workflow
• Analyzing alerts, logs, and indicators
• Building incident timelines with AI assistance
• Identifying potential attack patterns

AI-Assisted Incident Response

• Automating initial incident triage
• Response recommendations and investigation support
• Generating incident reports
• Human validation and analyst oversight

Security Automation Workflows

• Designing end-to-end AI-assisted security workflows
• Combining threat intelligence, analysis, and response activities
• Workflow testing and validation
• Handling errors and unreliable AI outputs

AI Security, Governance & Best Practices

• Data privacy and sensitive security information
• Risks of using AI in security operations
• AI output validation and human-in-the-loop controls
• Governance, access control, and responsible AI practices

• Hands-on exercises