Threat Hunting Courses and Certifications

Threat Hunting: Endpoint Hunting

16 ratings at Pluralsight

Being responsible to go find the anomalies within an environment can be a daunting task. This course will teach you how to hunt through endpoint artifacts to find malicious behavior.

• Pluralsight
• 1 hour 22 minutes
• On-Demand
• Free Trial Available

Threat Hunt with PowerShell

14 ratings at Pluralsight

As a defensive security professional, you're responsible for improving defenses by performing threat hunting exercises. This course will teach you how to perform threat hunting with PowerShell within a Microsoft environment.

• Pluralsight
• 1 hour 32 minutes
• On-Demand
• Free Trial Available

Specialized Hunts: Threat Hunting within Mail Servers

10 ratings at Pluralsight

This course will teach you how you can perform threat hunting analysis on email servers.

• Pluralsight
• 56 minutes
• On-Demand
• Free Trial Available

Threat Hunting: Hypothesize and Plan

13 ratings at Pluralsight

Being responsible for finding malicious anomalies within an environment can be a daunting task. This course will teach you about different methodologies for threat hunting, and how to take action on indicators provided through threat intelligence.

• Pluralsight
• 45 minutes
• On-Demand
• Free Trial Available

Threat Hunting: Review, Automate, and Improve

10 ratings at Pluralsight

What are the follow-on tasks after completing a threat hunt? This course will teach you how to generate tangible outcomes and improve your threat hunting process.

• Pluralsight
• 1 hour 37 minutes
• On-Demand
• Free Trial Available

Learn TTP-based threat hunting from MITRE ATT&CK® experts. Develop hypotheses, create analytics, determine data requirements, and detect malicious activity to enhance cybersecurity effectiveness.

• Cybrary
• 2-3 hours
• On-Demand
• Paid Course

The Cyber Academy

Threat Hunting in the O365 Ecosystem - David Stubley, 7Elements

Explore threat hunting techniques in Office 365, focusing on audit logs, login patterns, and data exfiltration. Learn from a real-world compromise case study.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Security Onion

Hunting Malware with Suricata Metadata - Security Onion Conference 2021

Explore advanced threat hunting techniques using Suricata metadata, focusing on malware detection, incident response, and proactive network security strategies.

• YouTube
• 58 minutes
• On-Demand
• Free Video

Security Onion

Security Onion Essentials 2.4 - Threat Hunting

Explore threat hunting techniques in Security Onion 2.4, covering workflow essentials and practical strategies for proactive cybersecurity defense and network monitoring.

• YouTube
• 18 minutes
• On-Demand
• Free Video

Cooper

Kunai - A New Threat Hunting Tool for Linux

Discover Kunai, an innovative threat hunting tool for Linux systems. Learn its features, capabilities, and how it enhances cybersecurity through advanced detection techniques.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Security Onion

Achieving PEAK Performance: Introducing the PEAK Threat Hunting Framework

Discover PEAK, a new threat hunting framework enabling diverse techniques like exploratory data analysis and machine learning to uncover elusive threats and elevate your security program.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Free Video

Dragos: ICS Cybersecurity

Six Steps to Effective ICS Threat Hunting

Learn effective ICS threat hunting with a 6-step model, real-world scenarios, and expert insights. Explore environment vs threat hunting, intel feeds, and practical approaches to enhance industrial cybersecurity.

• YouTube
• 1 hour 10 minutes
• On-Demand
• Free Video

Amazon Web Services;  Amazon

AWS SimuLearn: Threat Hunting

Hands-on AI-powered simulation for threat hunting on AWS. Practice designing and implementing security solutions using real-world scenarios and live AWS Console environment.

• AWS Skill Builder
• 1 hour
• On-Demand
• Paid Course

Specialized Hunts: Threat Hunting within Virtual Machines

VMs are part of the environment in which an adversary can operate. This course will teach you how to set up and perform a specialized threat hunt within VMs.

• Pluralsight
• 38 minutes
• On-Demand
• Free Trial Available

RSA Conference

Threat Hunting Evolution: From Sqrrl Cycle to PEAK Framework

Discover how the PEAK framework revolutionizes threat hunting, addressing past mistakes and incorporating a decade of lessons to enhance cybersecurity programs beyond traditional incident detection.

• YouTube
• 50 minutes
• On-Demand
• Free Video