Threat Hunting Courses and Certifications

Practical Cyber Threat Hunting

509 ratings at Udemy

Master advanced cyber threat hunting techniques, from network forensics and memory analysis to ELK-based threat detection, using real-world attack scenarios and hands-on practice with industry tools.

• Udemy
• 7 hours 24 minutes
• On-Demand
• Paid Course

Threat Hunt with PowerShell

15 ratings at Pluralsight

As a defensive security professional, you're responsible for improving defenses by performing threat hunting exercises. This course will teach you how to perform threat hunting with PowerShell within a Microsoft environment.

• Pluralsight
• 1 hour 32 minutes
• On-Demand
• Free Trial Available

Threat Hunting: Endpoint Hunting

16 ratings at Pluralsight

Being responsible to go find the anomalies within an environment can be a daunting task. This course will teach you how to hunt through endpoint artifacts to find malicious behavior.

• Pluralsight
• 1 hour 22 minutes
• On-Demand
• Free Trial Available

Specialized Hunts: Threat Hunting within Mail Servers

10 ratings at Pluralsight

This course will teach you how you can perform threat hunting analysis on email servers.

• Pluralsight
• 56 minutes
• On-Demand
• Free Trial Available

Threat Hunting: Review, Automate, and Improve

10 ratings at Pluralsight

What are the follow-on tasks after completing a threat hunt? This course will teach you how to generate tangible outcomes and improve your threat hunting process.

• Pluralsight
• 1 hour 37 minutes
• On-Demand
• Free Trial Available

Threat Hunting: Hypothesize and Plan

13 ratings at Pluralsight

Being responsible for finding malicious anomalies within an environment can be a daunting task. This course will teach you about different methodologies for threat hunting, and how to take action on indicators provided through threat intelligence.

• Pluralsight
• 45 minutes
• On-Demand
• Free Trial Available

The Cyber Academy

Threat Hunting in the O365 Ecosystem - David Stubley, 7Elements

Explore threat hunting techniques in Office 365, focusing on audit logs, login patterns, and data exfiltration. Learn from a real-world compromise case study.

• YouTube
• 34 minutes
• On-Demand
• Free Video

Learn TTP-based threat hunting from MITRE ATT&CK® experts. Develop hypotheses, create analytics, determine data requirements, and detect malicious activity to enhance cybersecurity effectiveness.

• Cybrary
• 2-3 hours
• On-Demand
• Paid Course

Security Onion

Security Onion Essentials 2.4 - Threat Hunting

Explore threat hunting techniques in Security Onion 2.4, covering workflow essentials and practical strategies for proactive cybersecurity defense and network monitoring.

• YouTube
• 18 minutes
• On-Demand
• Free Video

Security Onion

Hunting Malware with Suricata Metadata - Security Onion Conference 2021

Explore advanced threat hunting techniques using Suricata metadata, focusing on malware detection, incident response, and proactive network security strategies.

• YouTube
• 58 minutes
• On-Demand
• Free Video

Security Onion

Achieving PEAK Performance: Introducing the PEAK Threat Hunting Framework

Discover PEAK, a new threat hunting framework enabling diverse techniques like exploratory data analysis and machine learning to uncover elusive threats and elevate your security program.

• YouTube
• 1 hour 6 minutes
• On-Demand
• Free Video

Cooper

Kunai - A New Threat Hunting Tool for Linux

Discover Kunai, an innovative threat hunting tool for Linux systems. Learn its features, capabilities, and how it enhances cybersecurity through advanced detection techniques.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Dragos: ICS Cybersecurity

Six Steps to Effective ICS Threat Hunting

Learn effective ICS threat hunting with a 6-step model, real-world scenarios, and expert insights. Explore environment vs threat hunting, intel feeds, and practical approaches to enhance industrial cybersecurity.

• YouTube
• 1 hour 10 minutes
• On-Demand
• Free Video

x33fcon

Busting Red Team Trends with Style - Building a Custom ETW-Based Sysmon Replacement

Dive into advanced threat hunting with a custom ETW-based Sysmon replacement, exploring enhanced telemetry capabilities for detecting sophisticated red team techniques and threat actor fingerprinting.

• YouTube
• 33 minutes
• On-Demand
• Free Video

x33fcon

Threat Hunting Space and Digital Energy with Physics - Session 5

Explore innovative physics-based approaches to threat hunting in ICS/SCADA networks, focusing on IoMT and IoST monitoring techniques for detecting complex adversarial activities.

• YouTube
• 40 minutes
• On-Demand
• Free Video