Red Canary Courses

Building Effective AI Agents for Cybersecurity - A Step-by-Step Guide to SOC Workflows

1 rating

Master building effective AI agents for cybersecurity operations through hands-on demonstrations of phishing classification workflows and production-ready automation techniques.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

How to Investigate and Analyze Suspicious Security Alerts - A Step-by-Step Guide

1 rating

Learn step-by-step techniques for analyzing suspicious security alerts through command lines, process trees, and event logs to effectively determine legitimate threats from false positives.

• YouTube
• 12 minutes
• Self-Paced
• Free Video

Threat Emulation Using Atomic Red Team for Ransomware Detection and Response

Master threat emulation techniques using Atomic Red Team to validate detection capabilities against ransomware threats, incorporating cyber threat intelligence for enhanced security response and validation.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Mastering Security Detection and Prevention - From False Positives to Effective Threat Response

Master behavioral detection strategies and prevention techniques to effectively identify malicious activities, reduce false positives, and strengthen security defenses using open-source tools.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Detecting and Responding to Stealer Malware in 2024

Discover comprehensive strategies for detecting and combating information-stealing malware, from identification and detection methods to practical mitigation techniques for both Windows and macOS systems.

• YouTube
• 58 minutes
• Self-Paced
• Free Video

Detecting Malicious WMI Tradecraft with Microsoft Defender - Part 2

Dive into advanced WMI threat detection techniques and investigation methods using Microsoft Defender for Endpoint to identify and counter malicious lateral movement attempts.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Detecting Windows Management Instrumentation Abuse - Part 1

Discover how adversaries exploit Windows Management Instrumentation (WMI) for persistence, with expert insights on detection strategies and real-world examples from MITRE ATT&CK® and Microsoft specialists.

• YouTube
• 28 minutes
• Self-Paced
• Free Video

Detecting and Defending Against Malicious Installer Packages

Discover how adversaries exploit installer packages across operating systems and learn effective investigation techniques and defensive strategies against malicious installers with MITRE ATT&CK expertise.

• YouTube
• 1 hour 2 minutes
• Self-Paced
• Free Video

Establishing an Effective Response Capability for Incident Response

Master essential incident response strategies to enhance organizational security through planning, detection, communication, and continuous drilling programs for rapid threat mitigation.

• YouTube
• 40 minutes
• Self-Paced
• Free Video

Strategies for AWS Cloud Security Challenges and Threat Detection

Discover effective tactics to protect AWS environments from threats, enhance cloud security monitoring, and implement robust detection and response strategies for modern cloud infrastructure.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Bringing GenAI into Security Operations - A Practical Implementation Guide

Discover how to effectively integrate GenAI into security operations, focusing on practical implementation strategies, optimal use cases, and real-world SOC applications.

• YouTube
• 48 minutes
• Self-Paced
• Free Video

Building a Modern Security Operations Center - Essential Goals and Framework

Discover how to modernize your Security Operations Center with effective strategies, from leveraging new technologies to optimizing insourcing and outsourcing decisions for enhanced threat response.

• YouTube
• 51 minutes
• Self-Paced
• Free Video

Validating ATT&CK Technique Coverage Using EDR Telemetry

Master EDR telemetry analysis and validation techniques to effectively detect adversary tradecraft, automate testing workflows, and leverage ATT&CK framework for comprehensive security coverage.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

How to Detect Business Email Compromise and Email Account Compromise

Discover essential techniques for detecting and preventing Business Email Compromise attacks, including MFA bypass methods, authentication protocols, and effective monitoring strategies for organizational security.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Cloud Security: Detecting and Mitigating Common Attack Techniques in Azure and AWS

Explore real-world cloud security threats and defense strategies in AWS and Azure, covering access exploitation, privilege escalation, and effective countermeasures for robust protection.

• YouTube
• 1 hour 8 minutes
• Self-Paced
• Free Video