Threat Detection Courses and Certifications

Red Canary

Threat Emulation Using Atomic Red Team for Ransomware Detection and Response

Master threat emulation techniques using Atomic Red Team to validate detection capabilities against ransomware threats, incorporating cyber threat intelligence for enhanced security response and validation.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

Red Canary

Five Key Insights in Threat Detection and Cybersecurity - 2024 Report Analysis

Discover key cybersecurity misconceptions and emerging threat insights from Red Canary's 2024 analysis, challenging conventional wisdom about industry risks, attribution, and malware threats.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

NANOG

Reputational Providers and What Makes Them Effective - Understanding IP and Domain Threat Detection

Discover how Spamhaus threat researchers detect malicious IPs and domains, explore their policies and escalation processes, and learn effective ways to protect networks through real-world examples and collaborative approaches.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

BSidesCharm

What's in the Cloud? - Cloud Threat Detection and Hunting Strategies

Discover cloud threat hunting strategies using Jupyter notebooks with MITRE ATT&CK mapping and unsupervised machine learning techniques for anomaly detection and visualization in mature SOC environments.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Red Canary

Master Anomaly Detection - Advanced Threat Hunting for Identity-Based Attacks

Master advanced threat hunting techniques for detecting identity-based attacks through behavioral analysis, authentication patterns, and adversary-in-the-middle phishing detection methods.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

SC-200: Mitigate threats using Microsoft Defender

The "SC-200: Mitigate threats using Microsoft Defender" course focuses on learning how to defend against security threats using Microsoft Defender. It covers threat mitigation strategies and technique

• edX
• 2 weeks, 2-3 hours a week
• Self-Paced
• Free Online Course (Audit)

Google Security Operations - Fundamentals

This course covers the baseline skills needed for the Chronicle Security Operations Platform, exploring the specific actions and features that security engineers must be familiar with to start using t

• edX
• 1 week, 1-2 hours a week
• Self-Paced
• Free Certificate

Azure Security Operations Foundation

Master the essentials of cloud defense with the Azure Security Operations Foundation. This course provides a comprehensive introduction to protecting cloud environments using Microsoft Azure’s native

• edX
• 2 weeks, 5-10 hours a week
• Self-Paced
• Free Online Course (Audit)

Getting Started with Security Command Center Enterprise

Explore Google Cloud Security Command Center (SCC) Enterprise, a solution for preventing, detecting, and responding to threats. Learn about enhanced threat detection, vulnerability management, and its

• edX
• 1 week, 1-2 hours a week
• Self-Paced
• Free Certificate

Career Certificate

Google Security Operations

Gain a holistic understanding of Google’s Chronicle Security Operations (CSO) Platform and the principles of modern, adaptive threat management across three interconnected courses.

• edX
• Self-Paced
• Paid Course

Learn to use Guardium Data Protection to secure sensitive data, monitor data end to end, uncover threats, and automate compliance.

• IBM Training
• 44 hours
• Self-Paced
• Free Online Course

Introduction to Google Security Operations (SIEM)

Learn end-to-end Google SecOps SIEM workflows, from data ingestion and UDM searches to YARA-L detection engineering.

• Google Skills
• 5 hours
• Self-Paced
• Free Online Course

Incident Detection & Response is an engaging and foundational course that introduces the essential concepts and workflows of modern incident response. You'll begin by exploring what incident response

• INE
• 6 hours
• Self-Paced
• Paid Course

AWS Advanced Security Topics

Businesses and enterprises must be able to monitor and secure their AWS environments and prove compliance. In this course, you will learn about the AWS services that you can use to manage federated us

• INE
• 6 hours
• Self-Paced
• Paid Course

Practical Incident Handling

The Practical Incident Handling course will cover how you can prepare and defend against each stage of the cyber kill chain. The goal of this is to first educate you on the techniques, tactics, and pr

• INE
• 2 hours
• Self-Paced
• Paid Course