Get in Touch
 Duration 21 hours

Course Outline

The Basics of Detection Engineering

  • Core principles and key responsibilities
  • The full cycle of detection engineering
  • Essential tools and sources of telemetry

Grasping Log Sources

  • Endpoint logs and related event artifacts
  • Network traffic patterns and flow data
  • Logs from cloud services and identity providers

Integrating Threat Intelligence

  • Various categories of threat intelligence
  • Utilizing TI to guide detection design
  • Connecting threats to pertinent log sources

Crafting Robust Detection Rules

  • Rule logic and structural patterns
  • Distinguishing between behavioral and signature-based detection
  • Applying Sigma, Elastic, and SO rules

Refining and Optimizing Alerts

  • Reducing the occurrence of false positives
  • Continuous refinement of rules
  • Comprehending alert context and threshold settings

Investigation Methodologies

  • Verifying detection validity
  • Pivoting between various data sources
  • Recording findings and investigation notes

Implementing Detections Operationally

  • Managing versions and changes
  • Deploying rules to production environments
  • Tracking rule performance over time

Advanced Topics for Junior Engineers

  • Alignment with MITRE ATT&CK
  • Data normalization and parsing techniques
  • Opportunities for automation in detection processes

Wrap-up and Future Directions

Requirements

  • A solid grasp of fundamental networking concepts
  • Practical experience with operating systems like Windows or Linux
  • Knowledge of basic cybersecurity terminology

Target Audience

  • Junior analysts keen on security monitoring
  • New members joining SOC teams
  • IT professionals transitioning into detection engineering

Need help picking the right course?
southafrica@nobleprog.co.za or +27 (0)10 005 5793

Testimonials (2)

Clarity and pace of explanations

Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response

It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.

Otilia Pasareti - Merthyr College
Course - Fundamentals of Corporate Cyber Warfare

Related Courses

AI-Powered Cybersecurity: Threat Detection & Response

 21 Hours

This instructor-led, live training in Kenya (online or at the client’s premises) is designed for entry-level cybersecurity professionals seeking to harness AI to enhance their threat detection and response capabilities.

Upon completion of this training, participants will be able to:

  • Grasp the role of AI within cybersecurity.
  • Deploy AI algorithms for effective threat detection.
  • Automate incident response using AI-powered tools.
  • Embed AI into current cybersecurity infrastructure.
Read more...

AI-Powered Cybersecurity: Advanced Threat Detection & Response

 28 Hours

This instructor-led, live training in Kenya (online or onsite) targets intermediate to advanced cybersecurity professionals who aim to enhance their skills in AI-driven threat detection and incident response.

By the end of this training, participants will be able to:

  • Implement advanced AI algorithms for real-time threat detection.
  • Customize AI models to address specific cybersecurity challenges.
  • Develop automation workflows for threat response.
  • Secure AI-driven security tools against adversarial attacks.
Read more...

Blue Team Fundamentals: Security Operations and Analysis

 21 Hours

This instructor-led, live training in Kenya (online or onsite) is aimed at intermediate-level IT security professionals who wish to develop skills in security monitoring, analysis, and response.

By the end of this training, participants will be able to:

  • Understand the role of a Blue Team in cybersecurity operations.
  • Use SIEM tools for security monitoring and log analysis.
  • Detect, analyze, and respond to security incidents.
  • Perform network traffic analysis and threat intelligence gathering.
  • Apply best practices in security operations center (SOC) workflows.
Read more...

Bug Bounty Hunting

 21 Hours
This live, instructor-led training in Kenya provides beginners with the essentials of ethical bug hunting, covering critical tools like Burp Suite and common vulnerabilities such as XSS, SQLi, and CSRF. Learners will gain the skills to identify flaws and produce clear, professional reports.
Read more...

Bug Bounty: Advanced Techniques and Automation

 21 Hours
This advanced training in Kenya empowers security researchers with the capability to automate workflows and scale reconnaissance efforts for bug bounty hunting. Participants will gain mastery in detecting high-impact vulnerabilities, creating custom scripts, and efficiently managing complex targets.
Read more...

CHFI - Certified Digital Forensics Examiner

 35 Hours
This vendor-neutral CHFI training in Kenya builds essential digital forensics competencies, encompassing evidence collection, chain-of-custody, and sophisticated analysis. It readies professionals to manage digital evidence for legal proceedings and corrective measures through practical, hands-on labs.
Read more...

Certified Incident Handler

 21 Hours
Instructor-led training in Kenya for IT security professionals. Master the art of planning, classifying, containing, and managing incidents through hands-on simulations. Develop practical skills in detection, eradication, and recovery strategies to enhance your organization's response capabilities.
Read more...

Mastering Continuous Threat Exposure Management (CTEM)

 28 Hours

This guided, live training in Kenya (online or in-person) is tailored for intermediate-level cybersecurity professionals looking to introduce CTEM into their organizations.

By the conclusion of this training, participants will be able to:

  • Comprehend the core principles and stages of CTEM.
  • Identify and prioritize risks using established CTEM methodologies.
  • Incorporate CTEM practices into existing security protocols.
  • Utilize appropriate tools and technologies for continuous threat management.
  • Develop strategies to validate and continually improve security measures.
Read more...

Cyber Threat Intelligence

 35 Hours

This instructor-led, live training in Kenya (online or onsite) is tailored for advanced-level cybersecurity professionals eager to understand Cyber Threat Intelligence and develop skills to effectively manage and mitigate cyber threats.

By the end of this training, participants will be able to:

  • Understand the fundamentals of Cyber Threat Intelligence (CTI).
  • Analyze the current cyber threat landscape.
  • Collect and process intelligence data.
  • Perform advanced threat analysis.
  • Leverage Threat Intelligence Platforms (TIPs) and automate threat intelligence processes.
Read more...

Fundamentals of Corporate Cyber Warfare

 14 Hours

This trainer-led, live training in Kenya (online or on-site) explores various facets of enterprise security, ranging from Artificial Intelligence to database protection. The course also addresses the contemporary tools, methodologies, and strategic outlook necessary to defend against such threats. 

Read more...

DeepSeek for Cybersecurity and Threat Detection

 14 Hours

This instructor-led, live training in Kenya (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to leverage DeepSeek for advanced threat detection and automation.

By the end of this training, participants will be able to:

  • Utilize DeepSeek AI for real-time threat detection and analysis.
  • Implement AI-driven anomaly detection techniques.
  • Automate security monitoring and response using DeepSeek.
  • Integrate DeepSeek into existing cybersecurity frameworks.
Read more...

Duty Managers Cyber Resilience

 14 Hours

This instructor-led, live training in Kenya (online or onsite) is tailored for intermediate-duty managers and operational leaders aiming to develop robust cyber resilience strategies to shield their organizations against cyber threats.

By the end of this training, participants will be able to:

  • Comprehend the fundamentals of cyber resilience and their application to duty management.
  • Create incident response plans to sustain operational continuity.
  • Detect potential cyber threats and vulnerabilities within their operational environment.
  • Execute security protocols to reduce risk exposure.
  • Orchestrate team responses during cyber incidents and subsequent recovery phases.
Read more...

MITRE ATT&CK

 7 Hours

This instructor-led live training in Kenya (available online or onsite) is tailored for information system analysts looking to utilize MITRE ATT&CK to mitigate the risk of security compromises.

By the end of this training, participants will be able to:

  • Set up the necessary development environment to start implementing MITRE ATT&CK.
  • Classify how attackers interact with systems.
  • Document adversary behaviors within systems.
  • Track attacks, decipher patterns, and rate defense tools already in place.
Read more...

Open-Source EDR Fundamentals: Deployment, Detection & Response

 14 Hours
Join this instructor-led session in Kenya to master the fundamentals of OpenEDR. Gain the skills to deploy agents, configure telemetry, and analyze endpoint events for effective threat detection. The hands-on labs in Kenya emphasize incident response and the integration of alerts into security workflows.
Read more...

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

 21 Hours
This specialized training in Kenya provides SOC analysts and threat hunters with the practical expertise needed to deploy OpenEDR and integrate it with MITRE ATT&CK. Attendees will master the creation of detection logic, the execution of hunting workflows, and the conduct of root cause analysis to bolster organizational security.
Read more...

Related Categories

Threat Detection and Response (TDR)
Threat Detection and Response (TDR)