Threat Detection Courses and Certifications

Packt

SOC Operations for Blue Team Professionals (2026)

Analyze cyber threats and strengthen blue-team defenses using MITRE ATT&CK, Splunk, VirusTotal, PCAP files, log analysis, and static and dynamic malware techniques.

• Coursera
• 9 weeks, 1 hour a week
• Self-Paced
• Paid Course

Whizlabs

AWS Identity & Security Services

Secure AWS environments with IAM users, roles and policies, IAM Identity Center, Cognito, Secrets Manager, KMS encryption, WAF, Shield, GuardDuty, Inspector and Macie.

• Coursera
• 2 weeks, 2 hours a week
• Self-Paced
• Paid Course

Getting Started with Security Command Center Enterprise

Use Google Cloud Security Command Center Enterprise to identify, investigate, and remediate risks: vulnerability and posture management, threat detection, and case management across multi-cloud environments.

• Coursera
• 4 weeks, 1 hour a week
• Self-Paced
• Paid Course

AI-Enabled Cybersecurity

Learn to apply AI to cybersecurity operations by improving threat detection, automating tasks, strengthening access controls, and supporting incident response while considering ethical risks.

• Coursera
• 4 weeks, 5 hours a week
• Self-Paced
• Paid Course

Packt

Ransomware Playbook - A Complete Guide for IT Professionals

Learn to defend against ransomware: build an incident response plan, spot early attack indicators, contain and eradicate threats, restore systems, and apply Zero Trust architecture.

• Coursera
• 8 weeks, 1 hour a week
• Self-Paced
• Paid Course

AWS Security Eng. - Detection and Response Services

Focuses on integrating third-party security tools, configuring organization-wide logging, and implementing automated remediation workflows for AWS threat detection and response.

• Coursera
• 1 hour
• Self-Paced
• Paid Course

AWS Security Eng. - Incident Response Planning & Execution

Practice AWS incident response across preparation, operations, and post-incident phases using ransomware and cryptomining scenarios, security tools, simulations, and continuous improvement.

• Coursera
• 1 hour
• Self-Paced
• Paid Course

Packt

Advanced Security Intelligence with Sumo Logic

Implement threat detection and response with Sumo Logic Cloud SIEM, MITRE ATT&CK, SOAR playbooks, threat intelligence, and automated compliance reporting.

• Coursera
• 6 weeks, 1 hour a week
• Self-Paced
• Paid Course

Packt

Implementing the ATT&CK Framework in Your SOC

Turn ATT&CK mappings into measurable SOC improvements by validating detections, identifying coverage gaps, measuring detection ROI, and guiding response after alerts.

• Coursera
• 9 weeks, 1 hour a week
• Self-Paced
• Paid Course

Packt

SOC Analyst Training - From the Ground Up

A practical SOC analyst pathway combining incident-response methods with cloud security, automation, ChatGPT use, and targeted strategies for entering and advancing in cybersecurity.

• Coursera
• 15 weeks, 1 hour a week
• Self-Paced
• Paid Course

Career Certificate

Google Cybersecurity

69200 ratings at Coursera

Aprende a proteger redes y sistemas, investigar incidentes y automatizar tareas de ciberseguridad con Linux, SQL y Python.

• Coursera
• 24 weeks, 7 hours a week
• Self-Paced
• Paid Course
• 9 courses

Confluent

Real-Time Threat Detection Using Machine Learning and Apache Kafka

Explore real-time threat detection using machine learning, Apache Kafka, and ksqlDB. Learn about ZIEM, a network mapping and intrusion detection platform that generates instant network diagrams for quick anomaly detection.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Cyber Mentor

Using Stacking to Find Evil - Data Analysis Techniques for Threat Detection

Master data stacking techniques to uncover malicious artifacts and perform effective intrusion analysis using command line tools and Splunk for threat hunting.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Black Hat

FACADE - High-Precision Insider Threat Detection Using Contrastive Learning

Discover Google's FACADE AI system for detecting insider threats with 99.99% accuracy using contrastive learning and self-supervised ML on billions of daily events.

• YouTube
• 38 minutes
• Self-Paced
• Free Video

Security BSides London

Unmasking the Deepfake Threat: Detection, Prevention, and Navigating the Future

Explore the world of deepfake technology, learning detection methods, prevention strategies, and future implications for digital security and personal protection in this eye-opening analysis.

• YouTube
• 14 minutes
• Self-Paced
• Free Video