Courses Catalog

Suricata is the foundation for effective intrusion detection and prevention. With cyber attacks on the rise it’s more crucial than ever for businesses, enterprises or cybersecurity consultancies to have a comprehensive security strategy in place. And that’s where Suricata rules come to the rescue. The “Suricata for Incident Response and Threat Hunting” course from Kaspersky xTraining is the ultimate training program taught by Kaspersky’s leading security researcher who has spent years on the front lines of cyber defense, Tatyana Shishkova. She will share unique insights and sophisticated tips and tricks, giving you an unparalleled understanding of the IDS/IPS within the Suricata rules framework. The course is created for companies aiming to power up their security policy and individual learners, looking to advance their career in cyber security. Whether you’re a beginner specialist or a seasoned professional in security or SOC analysis, security administration, malware research or incident response, it will give you the knowledge and skills to stay ahead of the ever-evolving threat landscape. Learn how to write and implement Suricata rules to detect and block even the most advanced threats. Gain a deep understanding of how the framework works, and how to use it for identifying and responding to attacks in real-time. Get practical experience to enhance your network security with hands-on exercises and various real-life scenarios.

AUD507 is a comprehensive course designed for IT auditors, security professionals, and compliance specialists who need to assess and verify the security of systems, applications, and cloud environments. The course covers key auditing principles, risk management frameworks, and compliance requirements while providing hands-on techniques for evaluating security controls across on-premise and cloud infrastructures.

FOR528 is a specialized course designed to equip cybersecurity professionals with the skills to investigate, respond to, and mitigate ransomware and cyber extortion attacks. The course covers the entire lifecycle of a ransomware incident, from initial infection and encryption to ransom negotiation, recovery, and forensic analysis.

FOR508 is an advanced course designed for cybersecurity professionals who need to detect, investigate, and respond to sophisticated cyber threats, including advanced persistent threats (APTs) and targeted attacks. The course teaches cutting-edge digital forensics, threat hunting, and incident response techniques to track adversaries across compromised enterprise environments.

FOR498 is a specialized course designed for digital forensics professionals and incident responders who need to quickly acquire and assess evidence during critical cyber incidents. The course focuses on rapid data acquisition, efficient forensic analysis, and initial triage processes to support timely decision-making and incident response.

FOR500 is a specialized course designed to equip digital forensics professionals with the skills needed to investigate and analyze Windows-based systems. The course focuses on extracting and analyzing digital evidence from Windows operating systems, including artifacts related to user activity, system events, malware infections, and cyber attacks.

Have you ever wondered about how web applications are attacked in the real world and what you can do to mitigate every attack? The Web Defense Professional Learning Path will illustrate exactly how each attack works, what the impact of each attack is, how to fix it, and how the exploit no longer works after the fix. This learning path will also give you in-depth, practical advice about how to simplify your defense and how to implement attack mitigations that actually work (regardless of you having access to the source code or not). In addition, it will cover mitigation advice for multiple platforms and languages, the OWASP Testing Guide, detailed techniques and methodology to simplify the defense of web applications, advanced usage of OWASP ZAP, OWASP OWTF, ModSecurity, and more. The Web Defense Professional Learning Path also prepares you for the eWDP exam and certification. eWDP

The Advanced Penetration Testing Learning Path provides all the advanced skills required to carry out a thorough and professional penetration test against modern networks and infrastructure, such as the ability to execute state-sponsored-like operations and advanced adversary simulations. You must be familiar with PowerShell scripting, Active Directory administration and Windows internals knowledge, basic reverse engineering skills, and possess a good working knowledge of network protocols, as the content dives into all stages of a red-teaming engagement. Learning path at a glance: -Implementation details on numerous undocumented attacks -Obscure ways of exploitation and backdooring -Advanced client-side exploitation techniques -Custom attack vector and payload creation -Custom payload creation techniques -In-depth analysis of Active Directory exploitation -Stealthy lateral movement and evasion against modern defenses -In-depth analysis of critical domain infrastructure exploitation -In-depth details of common misconfigurations and weaknesses -Details for covert operations and stealthy persistence eCPTX

If you’re looking for the most practical way into the exploit development and software security world look no further. The Exploit Development Student Learning Path provides not only the fundamentals of Windows and Linux exploit development but also covers advanced Windows and Linux exploit development techniques, as well as anti-exploit mechanism bypasses. In addition, you’ll learn software debugging, shellcoding, how to identify and fully exploit 0-day vulnerabilities, bypassing modern anti-exploit mechanisms, how to use tools such as Immunity Debugger, x32dbg, Mona, Pwntools, GDB, RopperThis, and more. This learning path also prepares you for the eCXD exam and certification. eCXD

Interested in assessing and mitigating advanced web application risks an organization could potentially be exposed to? The Advanced Web Application Penetration Tester Professional Learning Path provides all the advanced skills necessary to carry out a thorough and advanced penetration test against modern web applications, as well as prepares you for the eWPTX exam and certification. Learning Objective: -Based on techniques professional pentesters use -Master advanced Web Application attacks & security tools -In-depth Web Application Vulnerabilities analysis -Covers XSS, SQL Injection, HTML5, and much more -In-depth obfuscation and encoding techniques -Bypassing filters and WAF techniques included -Explore HTML5 and XML attacks vectors and exploits -Explore advanced PHP, Java, Deserialization, LDAP, Server Side, and Authentication/SSO attacks -Learn effective API & Cloud-powered Application penetration testing -Demystifies Java RCE internals, attacking RMI-based JMX services, JNDI injection attacks, PHP Objection Instantiation, PHP Type Juggling, constructing Property Oriented Programming chains, and attacking memory-unsafe languages eWPTX

Interested in learning how to assess and mitigate real-world web application vulnerabilities an organization could potentially be exposed to? The Web Application Penetration Testing Learning Path is a comprehensive and structured journey designed to equip aspiring penetration testers, Web App Security Professionals, Bug Bounty Hunters, and web developers with the essential skills and knowledge required to plan and perform a thorough and professional web application penetration test and how to effectively identify, exploit, and mitigate vulnerabilities in modern web applications. The Web Application Penetration Tester Professional Learning Path provides you with all the advanced skills required to carry out a thorough and professional penetration test against modern web applications, as well as prepares you for the eWPTv2 exam and certification. Learning Objects Web Application Penetration Testing Methodology Information Gathering & Reconnaissance Web Application Analysis & Inspection Web Application Vulnerability Assessment Web Application Security Testing Manual exploitation of Common Web Application Vulnerabilities Web Service Security Testing eWPTv2

Would you like to expand your knowledge of how to code simple iOS and Android applications in order to build real-world POCs and exploits? The Mobile Application Security and Penetration Testing Learning path give penetration testers and IT security professionals the practical skills to understand the technical threats and attack vectors targeting mobile devices. This learning path covers the process of identifying security issues on Android and iOS applications, using a wide variety of techniques including Reverse Engineering, Static/Dynamic/Runtime, and Network Analysis, as well as prepares you for the eMAPT exam and certification. Learning Objects Android & Mobile App Pentesting iOS & Mobile App Pentesting eMAPT