EDR Courses and Certifications

EDR Internals – Research & Development (Live)

Dive into EDR architecture, reverse-engineering, bypass techniques, and build detection systems from scratch through hands-on labs and kernel-level programming.

• TrainSec
• 40 hours
• On-Demand
• Paid Course

Sophos Central Endpoint Security with EDR

302 ratings at Udemy

Master Sophos Central Endpoint Security and EDR implementation, including threat protection, anti-virus configuration, web filtering, and advanced security features for comprehensive endpoint defense.

• Udemy
• 12 hours 56 minutes
• On-Demand
• Paid Course

Black Hat

The Dark Side of EDR - Repurposing EDR as an Offensive Tool

Explore innovative attack vector transforming EDR into stealthy malware. Learn to bypass security features, exfiltrate data, and establish persistent control, focusing on Palo Alto Networks Cortex XDR.

• YouTube
• 43 minutes
• On-Demand
• Free Video

DEFCONConference

Defeating EDR Evading Malware with Memory Forensics

Discover advanced memory forensics techniques to detect and analyze EDR-evading malware, including system call manipulation, module overwriting, and debug register abuse.

• YouTube
• 44 minutes
• On-Demand
• Free Video

BSides SATX

EDR Internals for macOS and Linux - Telemetry Sources and Evasion Techniques

Explore EDR telemetry sources for macOS and Linux, comparing them to Windows equivalents. Gain insights into process monitoring, authentication, networking, and file activity detection techniques.

• YouTube
• 50 minutes
• On-Demand
• Free Video

NorthSec

Red Team Road Rage - Weaponizing Vulnerable Drivers to Blind EDR

Discover how attackers exploit vulnerable drivers to bypass sophisticated EDR tools and blind security monitoring in this deep dive into kernel-mode evasion techniques.

• YouTube
• 30 minutes
• On-Demand
• Free Video

Security BSides London

Using Minifilters to Disable EDR Systems - A Kernel-Based Attack Technique

Dive into advanced EDR bypass techniques using minifilters, exploring a novel approach to disable endpoint detection systems through kernel-level manipulation and PreOperation callback registration.

• YouTube
• 40 minutes
• On-Demand
• Free Video

BSides Budapest IT Security Conference

The Insider Threat: EDR Solutions for Detecting Rogue Personnel

Discover proactive methods for identifying insider threats using EDR solutions, focusing on unique threat hunting techniques to detect potential rogue personnel within organizations.

• YouTube
• 25 minutes
• On-Demand
• Free Video

Red Canary

Validating ATT&CK Technique Coverage Using EDR Telemetry

Master EDR telemetry analysis and validation techniques to effectively detect adversary tradecraft, automate testing workflows, and leverage ATT&CK framework for comprehensive security coverage.

• YouTube
• 52 minutes
• On-Demand
• Free Video

x33fcon

Unpacking the Unstoppable - How Loaders Continue to Outwit AI, EDR, and Sandboxes

Explore how malware loaders evolve to bypass AI, EDR, and sandboxes, examining their commoditization and advanced evasion techniques in modern cyberattacks.

• YouTube
• 46 minutes
• On-Demand
• Free Video

DEFCONConference

HookChain: A New Perspective for Bypassing EDR Solutions

Discover a sophisticated EDR bypass technique combining IAT Hooking, dynamic SSN resolution, and indirect system calls to redirect Windows subsystem execution flow while remaining undetected by traditional security measures.

• YouTube
• 39 minutes
• On-Demand
• Free Video

x33fcon

Bypassing EDR Detection: Userland Hooking Techniques and New Approaches

Explore advanced techniques for bypassing EDR solutions, including a new approach with Proof of Concept for understanding userland hooking and detection mechanisms.

• YouTube
• 37 minutes
• On-Demand
• Free Video

Confreaks

EDR Bypass - From Zero to Success

Discover how to bypass Endpoint Detection and Response systems through persistent experimentation, from beginner to successful implementation using obfuscated PowerShell techniques.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Cybersecurity Defense with AI and Gen AI

1195 ratings at Udemy

Strengthen Cyber Defense with Cutting-Edge AI and Generative AI Techniques | Understand the role of AI in Cybersecurity

• Udemy
• 1 hour 19 minutes
• On-Demand
• Paid Course

Master IBM QRadar EDR architecture, installation, and threat investigation through hands-on dashboard navigation and endpoint agent deployment in this practical security training.

• IBM Training
• 2 hours
• On-Demand
• Free Online Course