Threat Detection Courses and Certifications

OWASP Foundation

Attack-Driven Defense: Countering Real-World Attack Behaviors

Build network defenses from attackers’ perspective by detecting initial compromise, persistence, command-and-control, and lateral movement.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

HackMiami

Detection as Code - Buzzword or Panacea?

Explore the reality of Detection-as-Code in cybersecurity. Separate hype from facts and understand its potential benefits for blue teams and threat detection programs.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

BSidesLV

PhishDefend - A Reinforcement Learning Framework for AI-Augmented Phishing Detection and Response

Explore a reinforcement learning framework for measuring AI-augmented phishing detection and response, enhancing cybersecurity strategies against evolving threats.

• YouTube
• 52 minutes
• Self-Paced
• Free Video

Security BSides San Francisco

Next-Gen Detection: Harnessing LLMs for Sigma Rule Automation

Explore innovative approaches to automate Sigma rule generation using LLMs, comparing techniques like RAG, fine-tuning, and prompt-chaining for enhanced threat detection efficiency.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Red Canary

Detecting Malicious WMI Tradecraft with Microsoft Defender - Part 2

Dive into advanced WMI threat detection techniques and investigation methods using Microsoft Defender for Endpoint to identify and counter malicious lateral movement attempts.

• YouTube
• 53 minutes
• Self-Paced
• Free Video

Red Canary

Remote Access Tools: Detection Strategies and Security Response

Explore detection strategies for remote access tools, their legitimate uses versus malicious abuse, and effective response methods for security threats in network environments.

• YouTube
• 56 minutes
• Self-Paced
• Free Video

Mapping Motives: Analysis of 2,000 Enterprise Cloud Detections - Strengthening Multi-Cloud SOC

An analysis of 2,000 cloud detections maps attacker motives into practical control stories and exposes gaps in enterprise defenses.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

HackerSploit

Threat Detection and Active Response with Wazuh

1 rating

Learn how Wazuh collects and analyzes security data to detect intrusions, vulnerabilities, attacks, and malicious activity in blue team operations.

• YouTube
• 46 minutes
• Self-Paced
• Free Video

Real-Time Cyber Threat Detection and Mitigation

665 ratings at Coursera

Learn to defend TCP/IP networks in real time: design stateless and stateful firewalls, packet filters, proxies, intrusion detection and SOC architectures, and counter DDOS and APT attacks.

• Coursera
• 4 weeks, 4 hours a week
• Self-Paced
• Paid Course

Defending and Securing Systems

3 ratings at Udacity

Learn to combine layered defenses, network security, monitoring, and applied cryptography to detect intrusions and secure computer systems.

• Udacity
• 16 hours
• Self-Paced
• Paid Course

Systems Security

1 rating at Udacity

In this course, you will learn about implementing authentication and authorization You will learn how to build and utilize tools that can alert you to system security breaches and you'll know how to effectively counter them.

• Udacity
• 22 hours
• Self-Paced
• Paid Course

Infrastructure Security

1 rating at Udacity

In this course, you will be introduced to the industry best practices for security configurations and controls.

• Udacity
• 26 hours
• Self-Paced
• Paid Course

Detect, Respond, and Recover from Cloud Cybersecurity Attacks

This is the fourth of five courses in the Google Cloud Cybersecurity Certificate.

• DataCamp
• 26 hours
• Self-Paced
• Free Trial Available

Cloud Security Foundations

Build a practical foundation in cloud security, from Zero Trust and least-privilege IAM to encryption, workload monitoring, Infrastructure as Code, and AWS threat detection.

• Udacity
• 12 hours
• Self-Paced
• Paid Course

Career Certificate

AI Security Monitoring and Incident Response

Learn to monitor AI systems, distinguish security incidents from performance blips, and respond during the crucial first hour.

• Noble Desktop
• 6 hours
• Self-Paced
• $799.00