Threat Hunting Courses and Certifications

OS Analysis with The Sleuth Kit & Autopsy

In this course you will learn how to parse file systems and extract forensic artifacts that can be invaluable to incident responders, security analysts, and threat hunters.

• Pluralsight
• 16 minutes
• On-Demand
• Free Trial Available

OS Analysis with HELK

HELK provides machine learning and graph analysis to world class windows log collection and analysis across your enterprise not found in other tools, for free! In this course, you will learn to hunt adversary activity on endpoints using HELK.

• Pluralsight
• On-Demand
• Free Trial Available

Utilizing Zeek in an Enterprise Environment or for Distributed Operations

Zeek is an open-source network security monitoring (NSM) tool. This course will teach you how to deploy Zeek at scale and how to use Zeek data for continuous monitoring, threat hunting, and incident response.

• Pluralsight
• 1 hour 51 minutes
• On-Demand
• Free Trial Available

Analyze Network Event Activity Data with Elasticsearch

As our infrastructures grow, the quality of our data from these devices is becoming critical to cyber operations. This course will teach you how to ingest and use network event and telemetry data for threat hunting operations.

• Pluralsight
• 2 hours 33 minutes
• On-Demand
• Free Trial Available

Learn to configure Windows Event Forwarding for threat detection, collect events from servers and workstations, and use MITRE ATT&CK framework to hunt for malicious activities like Lateral Movement.

• Cybrary
• 1-2 hours
• On-Demand
• Paid Course

Explore cybersecurity analytics, threat hunting, and risk mitigation using CyberEASY. Learn to identify limitations of current tools and leverage advanced techniques for enhanced network protection.

• Cybrary
• On-Demand
• Paid Course

Learn to monitor network traffic using SIEM tools, understand threat hunting, and master Splunk for effective cybersecurity and incident response.

• Cybrary
• On-Demand
• Paid Course

Advanced Threat Hunting With Splunk

Learn advanced threat hunting techniques using Splunk, covering installation, data analysis, search queries, and complex event analysis for enhanced cybersecurity operations.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Dragos: ICS Cybersecurity

Rising Cyber Escalation: US, Iran, Russia ICS Threats and Response

Explore rising cyber tensions between US, Iran, and Russia, with insights on threat intelligence, defense strategies, and response planning for industrial control systems and critical infrastructure.

• YouTube
• 1 hour
• On-Demand
• Free Video

Dragos: ICS Cybersecurity

Lessons Learned from Threat Hunting and Responding to Industrial Intrusions

Insights from industrial cybersecurity experts on threat hunting and incident response, highlighting key findings from the 2018 ICS Year in Review report.

• YouTube
• 33 minutes
• On-Demand
• Free Video

The Need for Proactive Defense and Threat Hunting Within Organizations

Explore proactive defense and threat hunting strategies to enhance organizational security. Learn about process analysis, network monitoring, and incident response preparedness.

• YouTube
• 1 hour 9 minutes
• On-Demand
• Conference Talk

Human Hunting - Sean Gillespie

Explore advanced cybersecurity techniques for detecting and countering human adversaries, focusing on automation, threat research, and practical hunting strategies using GRR.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Detecting WMI Exploitation

Learn techniques to detect and prevent WMI exploitation, covering tools, processes, and best practices for enhanced Windows security and threat hunting.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Process is No One Hunting for Token Manipulation

Learn hypothesis-driven hunting techniques for detecting access token manipulation in Windows authentication, with practical case studies and demonstrations.

• YouTube
• 25 minutes
• On-Demand
• Conference Talk

Threat Hunting - Defining the Process While Circumventing Corporate Obstacles

Learn effective threat hunting techniques, overcoming corporate challenges, and implementing data-driven methodologies for enhanced cybersecurity in this comprehensive presentation.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk