Courses Catalog

ICS515 is a hands-on course designed to equip cybersecurity professionals with the skills needed to detect, analyze, and respond to threats targeting Industrial Control Systems (ICS) and Operational Technology (OT) environments. The course covers key topics such as network visibility, threat intelligence, incident detection, and forensic analysis specific to critical infrastructure sectors like energy, manufacturing, and transportation. Participants will learn how to implement and optimize monitoring solutions, analyze ICS network traffic, and develop response strategies to mitigate cyber threats. Through real-world scenarios and hands-on labs, ICS515 prepares defenders to enhance the security and resilience of industrial environments against evolving cyber risks.

ICS410 provides foundational knowledge and practical skills for securing Industrial Control Systems (ICS) and Supervisory Control and Data Acquisition (SCADA) environments. The course covers ICS architectures, protocols, risk management frameworks, and common attack vectors targeting critical infrastructure. Participants will learn essential security controls, incident response strategies, and best practices for securing industrial networks. With hands-on labs and real-world case studies, ICS410 equips IT and OT professionals with the expertise needed to protect ICS/SCADA environments from cyber threats while ensuring operational reliability and safety.

SEC503 is an advanced course designed to help security professionals master network monitoring, intrusion detection, and threat analysis. The course covers essential topics such as packet analysis, network forensics, SIEM optimization, and anomaly detection techniques. Participants will learn how to detect and respond to cyber threats by analyzing network traffic, logs, and attack patterns. The course also dives into advanced tactics used by attackers, including evasion techniques and encrypted traffic analysis. Through hands-on labs and real-world scenarios, SEC503 equips security analysts, SOC teams, and incident responders with the skills needed to enhance network visibility, improve detection capabilities, and respond effectively to cyber threats.

Smart Contract Hacking is a comprehensive online course that teaches you how to secure, hack, and use blockchain and smart contract technology. The course covers the fundamentals of blockchain, the popular Ethereum coding language Solidity, and the tools and techniques for auditing and exploiting smart contracts. You will learn how to deploy, scan, and test various blockchain implementations and protocols, such as Bitcoin, Ethereum, Solana, Cosmos, Near, NFTs, DeFi, and Web3. You will also get access to hands-on exercises, challenges, and quizzes to reinforce your learning and gain practical experience. By the end of the course, you will have the skills and knowledge to become a proficient web3 security professional.

SEC450 is an entry-level course designed to provide a strong foundation in cybersecurity operations, threat detection, and incident response. This course focuses on core Blue Team concepts, including network defense, security monitoring, log analysis, and threat intelligence. Participants will learn how to use SIEM tools, detect malicious activity, and respond to cyber threats effectively. The curriculum includes hands-on labs that simulate real-world attacks, helping students develop critical skills in security operations. SEC450 is ideal for aspiring SOC analysts, security engineers, and IT professionals looking to build a solid understanding of defensive cybersecurity strategies and techniques.

FOR710 is an expert-level course designed for cybersecurity professionals who want to master the art of reverse engineering and analyzing advanced malware threats. The course focuses on dissecting sophisticated malware, including rootkits, fileless malware, and evasive techniques used by advanced persistent threats (APTs). Participants will learn how to analyze malicious code at the assembly level, use dynamic and static analysis techniques, and leverage tools such as IDA Pro, Ghidra, and debuggers. Through hands-on labs and real-world case studies, FOR710 equips malware analysts, incident responders, and forensic investigators with the skills needed to uncover hidden malware behaviors, develop signatures, and enhance enterprise defense strategies.

FOR610 is an in-depth course designed to equip cybersecurity professionals with the skills needed to analyze and reverse-engineer malicious software. The course covers key malware analysis techniques, including static and dynamic analysis, behavioral analysis, and code disassembly. Participants will work with industry-standard tools such as IDA Pro, Ghidra, x64dbg, and Wireshark to dissect malware, identify indicators of compromise (IOCs), and understand obfuscation and anti-analysis techniques used by threat actors. Through hands-on labs and real-world case studies, FOR610 prepares malware analysts, incident responders, and forensic investigators to detect, analyze, and mitigate modern malware threats effectively.

FOR572 is an advanced course designed for cybersecurity professionals seeking to master network forensics, threat hunting, and incident response. The course focuses on deep packet analysis, intrusion detection, and uncovering adversary activity within large-scale enterprise environments. Participants will learn how to analyze network traffic, identify anomalies, and reconstruct cyber attacks using tools such as Zeek (Bro), Suricata, Wireshark, and Security Information and Event Management (SIEM) solutions.

SEC541 is an advanced course that focuses on understanding and defending against attacker techniques in cloud environments. Participants will learn how adversaries exploit misconfigurations, abuse cloud-native services, and bypass security controls across AWS, Azure, and Google Cloud. The course covers threat detection, cloud monitoring, and incident response strategies to counter real-world cloud threats.

SEC504 is a foundational course that provides a comprehensive understanding of the tools and techniques used by attackers, as well as strategies for detecting and responding to cyber incidents. The course teaches participants to think like an attacker while strengthening their defensive skills. Key topics include reconnaissance, scanning, exploitation, post-exploitation tactics, and malware analysis.

SEC401 is a comprehensive cybersecurity fundamentals course designed to equip professionals with the essential skills needed to secure networks, endpoints, and cloud environments. The course covers key security concepts, including risk management, cryptography, access controls, incident response, and security operations. Participants will learn how to identify vulnerabilities, defend against cyber threats, and implement security best practices across modern IT infrastructures.

Detection Engineering with Sigma will teach you how to write and tune Sigma rules to find evil in logs using real-world examples that take you through the detection engineering process. We’ll dissect real Sigma detection rules focused on finding a variety of malicious activity in diverse log sources. Once you have a good handle on these components, you’ll start writing and tuning your own rules in a series of case studies. In some case studies, I’ll describe a detection gap and you’ll write a rule on your own before I show you how I tackled the problem myself. In other scenarios, you’ll write or modify a rule on your own and submit it to me for feedback. In this course, you are never alone! I will be with you 100% of the way to help you understand the structure of Sigma rules, how to get from idea to finished rule, and best practices for writing resilient rules.