Blue Team Skills

Investigate, detect and hunt modern attacks, using recent real-world intrusions as the material.

Attackers change their techniques constantly. This course builds the practical skills defenders use every day and keeps them current. Every module is based on recent real-world attacks.

Who it is for

Defensive and offensive practitioners who want to know how current attacks work and how to catch them. Attendees need experience or education beyond junior level.

Format

1 to 5 days, on-site or online, for up to 10 people. Run it as a one-off course or as recurring shorter sessions.

Example topics

  • Investigating phishing emails, including the attachment types attackers favor
  • The many ways attackers execute code on Windows
  • Network analysis with PCAPs
  • Writing YARA rules
  • Advanced YARA that goes beyond strings
  • Threat hunting
  • Putting cyber threat intelligence to work

What you will be able to do

  • Investigate a phishing attack from the email to the payload
  • Recognize how current attackers gain execution and move through a network
  • Find signs of an attack in network traffic
  • Hunt for threats that got past your controls, and write rules to catch them next time

Pricing

  • Priced per team
  • From £1,750 a day for up to 4 people
  • From £2,750 a day for up to 10 people1
  • Prices exclude VAT
  • See pricing for every option

  1. Discounts: 15% off for businesses based on the Isle of Man and 10% off for retainer clients, up to 25% combined. Micro businesses with 4 or fewer employees get heavily discounted pricing, so contact us for details. See the terms. ↩︎