Red Canary Courses

Fake PuTTY Ads Spreading CleanUpLoader Malware

Discover how fake PuTTY ads spread CleanUpLoader malware and learn about June's top 10 cyber threats, including Atomic Stealer family tactics and Rhysida ransomware delivery methods.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

NPM Package Compromise and What Recent Exploits Teach Us About Threat Intelligence Overload

Explore NPM package security threats and learn to manage threat intelligence overload through real-world examples of supply chain attacks and cybersecurity incident analysis.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

A Real-World Look at an OAuth Attack

Explore OAuth security vulnerabilities through a real-world attack case study, learning to identify malicious applications and audit permissions effectively.

• YouTube
• 32 minutes
• Self-Paced
• Free Video

A New Approach to Identity Security

Discover how to combat rising identity security threats in cloud accounts through context-aware detection, behavior analysis, and strategic partnerships with Microsoft for effective threat mitigation.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Threat Emulation Using Atomic Red Team for Ransomware Detection and Response

Master threat emulation techniques using Atomic Red Team to validate detection capabilities against ransomware threats, incorporating cyber threat intelligence for enhanced security response and validation.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Mastering Security Detection and Prevention - From False Positives to Effective Threat Response

Master behavioral detection strategies and prevention techniques to effectively identify malicious activities, reduce false positives, and strengthen security defenses using open-source tools.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Detecting and Responding to Stealer Malware in 2024

Discover comprehensive strategies for detecting and combating information-stealing malware, from identification and detection methods to practical mitigation techniques for both Windows and macOS systems.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Detecting Malicious WMI Tradecraft with Microsoft Defender - Part 2

Dive into advanced WMI threat detection techniques and investigation methods using Microsoft Defender for Endpoint to identify and counter malicious lateral movement attempts.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Detecting Windows Management Instrumentation Abuse - Part 1

Discover how adversaries exploit Windows Management Instrumentation (WMI) for persistence, with expert insights on detection strategies and real-world examples from MITRE ATT&CK® and Microsoft specialists.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Detecting and Defending Against Malicious Installer Packages

Discover how adversaries exploit installer packages across operating systems and learn effective investigation techniques and defensive strategies against malicious installers with MITRE ATT&CK expertise.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

Establishing an Effective Response Capability for Incident Response

Master essential incident response strategies to enhance organizational security through planning, detection, communication, and continuous drilling programs for rapid threat mitigation.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Strategies for AWS Cloud Security Challenges and Threat Detection

Discover effective tactics to protect AWS environments from threats, enhance cloud security monitoring, and implement robust detection and response strategies for modern cloud infrastructure.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Bringing GenAI into Security Operations - A Practical Implementation Guide

Discover how to effectively integrate GenAI into security operations, focusing on practical implementation strategies, optimal use cases, and real-world SOC applications.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Building a Modern Security Operations Center - Essential Goals and Framework

Discover how to modernize your Security Operations Center with effective strategies, from leveraging new technologies to optimizing insourcing and outsourcing decisions for enhanced threat response.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Validating ATT&CK Technique Coverage Using EDR Telemetry

Master EDR telemetry analysis and validation techniques to effectively detect adversary tradecraft, automate testing workflows, and leverage ATT&CK framework for comprehensive security coverage.

• YouTube
• 52 minutes
• Self-Paced
• Free Video