Want an instructor and a cohort? Browse the live trainings
2 courses.
Standalone sessions on how analysts think: storytelling, context, the Pyramid of Pain and pivoting
A series of standalone sessions on how analysts really think: reading an intrusion as a story, building context, going after the indicators that hurt the attacker, and pivoting without getting lost.
A practical incident response series: one intrusion, followed from the first alert to the domain controller
Follow Rider.exe through a real intrusion, from Tier 1 triage in Elastic to PsExec, identity, file and network telemetry, and the incident response decisions along the way. New episodes are added as the series continues.
