A clear path from first response to certified operator.
Defenders — from first-line triage to detection engineering and SOC leadership.
Browse individual courses.
SOC analyst foundations
From alert triage to incident handoff. Hands-on with Splunk, Sentinel, and Elastic.
Threat hunting playbooks
Hypothesis-driven hunting with ATT&CK. You'll write detections that survive prod.
Active Directory attack paths
BloodHound, Kerberoasting, ADCS abuse, delegation chains. Lab-only — no live targets.
Web app exploitation, end-to-end
Past OWASP. Server-side request forgery, race conditions, deserialization, OAuth abuse.
Cyber range · purple team
Your team, our team, one network. Detection engineering against real adversary tooling.
Tabletop · board-level
Run a ransomware scenario with your executive team. We facilitate; you decide.
A whole environment, just for your team.
We build a replica of your stack — AD forest, cloud tenancy, prod-shape applications — and run a week of real adversary tooling against it. Your blue team defends, our red team attacks, and we close with a joint debrief.
Reserve a cohort