Security Education

ICS515 is a hands-on course designed to equip cybersecurity professionals with the skills needed to detect, analyze, and respond to threats targeting Industrial Control Systems (ICS) and Operational Technology (OT) environments. The course covers key topics such as network visibility, threat intelligence, incident detection, and forensic analysis specific to critical infrastructure sectors like energy, manufacturing, and transportation. Participants will learn how to implement and optimize monitoring solutions, analyze ICS network traffic, and develop response strategies to mitigate cyber threats. Through real-world scenarios and hands-on labs, ICS515 prepares defenders to enhance the security and resilience of industrial environments against evolving cyber risks.

ICS410 provides foundational knowledge and practical skills for securing Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) environments. The course covers ICS architectures, protocols, risk management frameworks, and common attack vectors targeting critical infrastructure. Participants will learn essential security controls, incident response strategies, and best practices for securing industrial networks. With hands-on labs and real-world case studies, ICS410 equips IT and OT professionals with the expertise needed to protect ICS/SCADA environments from cyber threats while ensuring operational reliability and safety.

SEC503 is an advanced course designed to help security professionals master network monitoring, intrusion detection, and threat analysis. The course covers essential topics such as packet analysis, network forensics, SIEM optimization, and anomaly detection techniques. Participants will learn how to detect and respond to cyber threats by analyzing network traffic, logs, and attack patterns. The course also dives into advanced tactics used by attackers, including evasion techniques and encrypted traffic analysis. Through hands-on labs and real-world scenarios, SEC503 equips security analysts, SOC teams, and incident responders with the skills needed to enhance network visibility, improve detection capabilities, and respond effectively to cyber threats.

SEC450 is an entry-level course designed to provide a strong foundation in cybersecurity operations, threat detection, and incident response. This course focuses on core Blue Team concepts, including network defense, security monitoring, log analysis, and threat intelligence. Participants will learn how to use SIEM tools, detect malicious activity, and respond to cyber threats effectively. The curriculum includes hands-on labs that simulate real-world attacks, helping students develop critical skills in security operations. SEC450 is ideal for aspiring SOC analysts, security engineers, and IT professionals looking to build a solid understanding of defensive cybersecurity strategies and techniques.

FOR710 is an expert-level course designed for cybersecurity professionals who want to master the art of reverse engineering and analyzing advanced malware threats. The course focuses on dissecting sophisticated malware, including rootkits, fileless malware, and evasive techniques used by advanced persistent threats (APTs). Participants will learn how to analyze malicious code at the assembly level, use dynamic and static analysis techniques, and leverage tools such as IDA Pro, Ghidra, and debuggers. Through hands-on labs and real-world case studies, FOR710 equips malware analysts, incident responders, and forensic investigators with the skills needed to uncover hidden malware behaviors, develop signatures, and enhance enterprise defense strategies.

FOR610 is an in-depth course designed to equip cybersecurity professionals with the skills needed to analyze and reverse-engineer malicious software. The course covers key malware analysis techniques, including static and dynamic analysis, behavioral analysis, and code disassembly. Participants will work with industry-standard tools such as IDA Pro, Ghidra, x64dbg, and Wireshark to dissect malware, identify indicators of compromise (IOCs), and understand obfuscation and anti-analysis techniques used by threat actors. Through hands-on labs and real-world case studies, FOR610 prepares malware analysts, incident responders, and forensic investigators to detect, analyze, and mitigate modern malware threats effectively.

FOR578 is a comprehensive course designed to teach cybersecurity professionals how to collect, analyze, and operationalize cyber threat intelligence (CTI) to proactively defend against advanced threats. The course covers intelligence lifecycle fundamentals, adversary tracking, attribution analysis, and threat modeling techniques such as the MITRE ATT&CK framework. Participants will learn how to leverage open-source intelligence (OSINT), analyze threat actor tactics, techniques, and procedures (TTPs), and integrate CTI into security operations. Through hands-on labs and real-world case studies, FOR578 equips analysts, SOC teams, and security leaders with the skills needed to transform raw data into actionable intelligence that enhances threat detection, incident response, and strategic decision-making.

FOR572 is an advanced course designed for cybersecurity professionals seeking to master network forensics, threat hunting, and incident response. The course focuses on deep packet analysis, intrusion detection, and uncovering adversary activity within large-scale enterprise environments. Participants will learn how to analyze network traffic, identify anomalies, and reconstruct cyber attacks using tools such as Zeek (Bro), Suricata, Wireshark, and Security Information and Event Management (SIEM) solutions.

SEC541 is an advanced course that focuses on understanding and defending against attacker techniques in cloud environments. Participants will learn how adversaries exploit misconfigurations, abuse cloud-native services, and bypass security controls across AWS, Azure, and Google Cloud. The course covers threat detection, cloud monitoring, and incident response strategies to counter real-world cloud threats.

SEC504 is a foundational course that provides a comprehensive understanding of the tools and techniques used by attackers, as well as strategies for detecting and responding to cyber incidents. The course teaches participants to think like an attacker while strengthening their defensive skills. Key topics include reconnaissance, scanning, exploitation, post-exploitation tactics, and malware analysis.

SEC401 is a comprehensive cybersecurity fundamentals course designed to equip professionals with the essential skills needed to secure networks, endpoints, and cloud environments. The course covers key security concepts, including risk management, cryptography, access controls, incident response, and security operations. Participants will learn how to identify vulnerabilities, defend against cyber threats, and implement security best practices across modern IT infrastructures.

SEC275 is an entry-level course designed to provide a fundamental understanding of computing, technology, and cybersecurity concepts. It is ideal for individuals new to cybersecurity or those looking to build a strong technical foundation. The course covers essential topics such as computer hardware and software, networking basics, operating systems, and cybersecurity principles.