Blue Team Fundamentals: Security Operations and Analysis Training Course

The vendor-neutral Certified Digital Forensics Examiner certification is designed to equip Cyber Crime and Fraud Investigators with the skills necessary for electronic discovery and advanced investigative methods. This course is indispensable for any professional who encounters digital evidence during an investigation.

The Certified Digital Forensics Examiner training provides the methodology required to conduct a computer forensic examination. Participants will learn to apply forensically sound investigative techniques to assess the scene, collect and document all pertinent information, interview relevant personnel, maintain the chain of custody, and draft a findings report.

The Certified Digital Forensics Examiner course offers significant benefits to organizations, individuals, government bodies, and law enforcement agencies seeking to pursue litigation, establish proof of guilt, or implement corrective actions based on digital evidence.

The Certified Incident Handler course offers a structured methodology for the effective and efficient management and response to cybersecurity incidents.

Delivered through live, instructor-led training (available online or onsite), this program targets intermediate-level IT security professionals seeking to acquire the tactical skills and knowledge required to plan, classify, contain, and manage security incidents.

Upon completion of this training, participants will be equipped to:

• Grasp the incident response lifecycle and its various phases.
• Implement procedures for incident detection, classification, and notification.
• Apply containment, eradication, and recovery strategies effectively.
• Create post-incident reports and plans for continuous improvement.

Course Format

• Interactive lectures and discussions.
• Practical application of incident handling procedures within simulated scenarios.
• Guided exercises focused on detection, containment, and response workflows.

Course Customization Options

• For organizations wishing to tailor this training to their specific incident response procedures or tools, please contact us to arrange a customized session.

This instructor-led, live training (available online or onsite) is targeted at intermediate-level cybersecurity professionals who aim to implement CTEM within their organizations.

By the conclusion of this training, participants will be equipped to:

• Grasp the fundamental principles and stages of CTEM.
• Identify and prioritize risks using CTEM methodologies.
• Integrate CTEM practices into existing security protocols.
• Utilize tools and technologies for continuous threat management.
• Develop strategies to validate and improve security measures continuously.

This guided, live training in Greece (online or onsite) is designed for senior cybersecurity experts aiming to grasp the principles of Cyber Threat Intelligence and acquire practical skills to manage and counter cyber threats effectively.

Upon completion of this course, participants will be able to:

• Grasp the core principles of Cyber Threat Intelligence (CTI).
• Evaluate the contemporary cyber threat landscape.
• Gather and process intelligence data.
• Conduct sophisticated threat analysis.
• Utilize Threat Intelligence Platforms (TIPs) to streamline threat intelligence workflows.

This instructor-led, live training in Greece (online or onsite) explores various aspects of enterprise security, including artificial intelligence and database security. It also covers the latest tools, processes, and mindsets necessary to protect against cyber attacks. 

This instructor-led, live training in Greece (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to leverage DeepSeek for advanced threat detection and automation.

By the end of this training, participants will be able to:

• Utilize DeepSeek AI for real-time threat detection and analysis.
• Implement AI-driven anomaly detection techniques.
• Automate security monitoring and response using DeepSeek.
• Integrate DeepSeek into existing cybersecurity frameworks.

This instructor-led, live training in Greece (online or onsite) is designed for duty managers and operational leaders at an intermediate level who wish to build robust cyber resilience strategies to safeguard their organizations against cyber threats.

Upon completion of this training, participants will be able to:

• Grasp the fundamentals of cyber resilience and its importance to duty management.
• Create incident response plans to sustain operational continuity.
<
• Recognise potential cyber threats and vulnerabilities within their operational environment.
• Apply security protocols to reduce risk exposure.
• Coordinate team responses during cyber incidents and subsequent recovery efforts.

Detection engineering involves creating, deploying, and enhancing strategies to pinpoint malicious activities across systems and networks.

This live, instructor-led training (available online or in-person) targets entry-level cybersecurity professionals aiming to acquire practical expertise in constructing and calibrating security detections.

After completing this course, participants will be equipped with the capabilities to:

• Create robust detection rules and signatures using widely adopted security tools.
• Analyze logs and telemetry data to uncover suspicious behaviour.
• Leverage threat intelligence to enhance detection logic.
• Refine alerts and decrease false positives within a SOC environment.

Course Format

• Guided teaching accompanied by practical demonstrations.
• Exercises driven by real-world scenarios and hands-on analysis.
• Building detection rules in real-time within an interactive lab setting.

Customisation Options

• If your organisation needs a bespoke version of this programme, please get in touch to explore customisation possibilities.

This instructor-led, live training in Greece (online or on-site) is designed for information systems analysts who wish to utilize MITRE ATT&CK to reduce the risk of security compromises.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start implementing MITRE ATT&CK.
• Classify how attackers interact with systems.
• Document adversary behaviors within systems.
• Track attacks, decipher patterns, and rate defense tools already in place.

OpenEDR is an open-source endpoint detection and response solution that offers continuous telemetry, detection, and analysis of adversarial activity on endpoints.

This instructor-led, live training (available online or onsite) is designed for beginner-level to intermediate-level IT and security professionals who want to deploy, configure, and operate OpenEDR to detect and respond to cyber threats.

By the end of this training, participants will be able to:

• Deploy and configure OpenEDR agents and server components for telemetry collection.
• Perform basic detection and monitoring using OpenEDR dashboards and event views.
• Analyse endpoint events to identify suspicious activity and potential threats.
• Integrate OpenEDR alerts into incident response workflows and reporting.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

OpenEDR is an open-source endpoint detection and response platform that delivers analytic detection capabilities with full MITRE ATT&CK visibility, enabling event correlation and root cause analysis of adversarial activity in real time.

This instructor-led live training (available online or onsite) is designed for advanced SOC analysts, threat hunters, and incident responders who aim to design and operate threat-hunting programmes using OpenEDR, mapping detections to the MITRE ATT&CK framework.

Upon completion of this training, participants will be able to:

• Deploy and configure OpenEDR agents and server components for telemetry collection and analysis.
• Map observable endpoint telemetry to MITRE ATT&CK techniques and construct detection logic accordingly.
• Design and execute threat-hunting workflows utilising behavioural analytics and event correlation to identify adversarial activity.
• Integrate OpenEDR findings into incident response playbooks and perform root cause analysis.

Course Format

• Interactive lecture and discussion.
• Ample exercises and practical application.
• Hands-on implementation within a live-lab environment.

Course Customization Options

• To request customized training for this course, please contact us to arrange.