Threat Detection and Response (TDR) Training in Nicosia

This instructor-led, live training (available online or onsite) is targeted at intermediate-level cybersecurity professionals who aim to implement CTEM within their organizations.

By the conclusion of this training, participants will be equipped to:

• Grasp the fundamental principles and stages of CTEM.
• Identify and prioritize risks using CTEM methodologies.
• Integrate CTEM practices into existing security protocols.
• Utilize tools and technologies for continuous threat management.
• Develop strategies to validate and improve security measures continuously.

This instructor-led, live training in Nicosia (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to leverage DeepSeek for advanced threat detection and automation.

By the end of this training, participants will be able to:

• Utilize DeepSeek AI for real-time threat detection and analysis.
• Implement AI-driven anomaly detection techniques.
• Automate security monitoring and response using DeepSeek.
• Integrate DeepSeek into existing cybersecurity frameworks.

OpenEDR is an open-source endpoint detection and response solution that offers continuous telemetry, detection, and analysis of adversarial activity on endpoints.

This instructor-led, live training (available online or onsite) is designed for beginner-level to intermediate-level IT and security professionals who want to deploy, configure, and operate OpenEDR to detect and respond to cyber threats.

By the end of this training, participants will be able to:

• Deploy and configure OpenEDR agents and server components for telemetry collection.
• Perform basic detection and monitoring using OpenEDR dashboards and event views.
• Analyse endpoint events to identify suspicious activity and potential threats.
• Integrate OpenEDR alerts into incident response workflows and reporting.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

OpenEDR is an open-source endpoint detection and response platform that delivers analytic detection capabilities with full MITRE ATT&CK visibility, enabling event correlation and root cause analysis of adversarial activity in real time.

This instructor-led live training (available online or onsite) is designed for advanced SOC analysts, threat hunters, and incident responders who aim to design and operate threat-hunting programmes using OpenEDR, mapping detections to the MITRE ATT&CK framework.

Upon completion of this training, participants will be able to:

• Deploy and configure OpenEDR agents and server components for telemetry collection and analysis.
• Map observable endpoint telemetry to MITRE ATT&CK techniques and construct detection logic accordingly.
• Design and execute threat-hunting workflows utilising behavioural analytics and event correlation to identify adversarial activity.
• Integrate OpenEDR findings into incident response playbooks and perform root cause analysis.

Course Format

• Interactive lecture and discussion.
• Ample exercises and practical application.
• Hands-on implementation within a live-lab environment.

Course Customization Options

• To request customized training for this course, please contact us to arrange.

Ransomware constitutes a type of malicious software engineered to encrypt data and extort organizations.

This instructor-led live training, available both online and onsite, targets intermediate-level security professionals seeking to enhance their negotiation strategies and boost their intelligence capabilities during ransomware incidents.

Upon completing this training, participants will be equipped to:

• Evaluate the structure, behaviour, and lifecycle of contemporary ransomware campaigns
• Apply established negotiation frameworks to real-world ransomware scenarios
• Collect, analyse, and operationalise threat intelligence for ransomware defence
• Coordinate effectively with stakeholders, law enforcement agencies, and external partners during an attack

Course Format:

• Expert-led presentations backed by real case studies
• Interactive exercises simulating ransomware negotiations
• Hands-on practice with intelligence tools within a controlled lab environment

Course Customization Options:

• Should your organization require a tailored version of this training, please contact us to discuss customization options.

This guided, live training in Nicosia (online or onsite) is designed for senior cybersecurity experts aiming to grasp the principles of Cyber Threat Intelligence and acquire practical skills to manage and counter cyber threats effectively.

Upon completion of this course, participants will be able to:

• Grasp the core principles of Cyber Threat Intelligence (CTI).
• Evaluate the contemporary cyber threat landscape.
• Gather and process intelligence data.
• Conduct sophisticated threat analysis.
• Utilize Threat Intelligence Platforms (TIPs) to streamline threat intelligence workflows.

Detection engineering involves creating, deploying, and enhancing strategies to pinpoint malicious activities across systems and networks.

This live, instructor-led training (available online or in-person) targets entry-level cybersecurity professionals aiming to acquire practical expertise in constructing and calibrating security detections.

After completing this course, participants will be equipped with the capabilities to:

• Create robust detection rules and signatures using widely adopted security tools.
• Analyze logs and telemetry data to uncover suspicious behaviour.
• Leverage threat intelligence to enhance detection logic.
• Refine alerts and decrease false positives within a SOC environment.

Course Format

• Guided teaching accompanied by practical demonstrations.
• Exercises driven by real-world scenarios and hands-on analysis.
• Building detection rules in real-time within an interactive lab setting.

Customisation Options

• If your organisation needs a bespoke version of this programme, please get in touch to explore customisation possibilities.

The Certified Incident Handler course offers a structured methodology for the effective and efficient management and response to cybersecurity incidents.

Delivered through live, instructor-led training (available online or onsite), this program targets intermediate-level IT security professionals seeking to acquire the tactical skills and knowledge required to plan, classify, contain, and manage security incidents.

Upon completion of this training, participants will be equipped to:

• Grasp the incident response lifecycle and its various phases.
• Implement procedures for incident detection, classification, and notification.
• Apply containment, eradication, and recovery strategies effectively.
• Create post-incident reports and plans for continuous improvement.

Course Format

• Interactive lectures and discussions.
• Practical application of incident handling procedures within simulated scenarios.
• Guided exercises focused on detection, containment, and response workflows.

Course Customization Options

• For organizations wishing to tailor this training to their specific incident response procedures or tools, please contact us to arrange a customized session.

\n Bug Bounty: Advanced Techniques and Automation offers an in-depth exploration of high-impact vulnerabilities, automation frameworks, reconnaissance methodologies, and the strategic tooling employed by top-tier bug bounty hunters.\n<\/p>\n

\n This instructor-led, live training (available online or onsite) is designed for security researchers, penetration testers, and bug bounty hunters at an intermediate to advanced level who aim to automate their workflows, scale their reconnaissance efforts, and uncover complex vulnerabilities across diverse targets.\n<\/p>\n

\n Upon completion of this training, participants will be able to:\n<\/p>\n

\n
• \n Automate reconnaissance and scanning processes for multiple targets.\n <\/li>\n
• \n Utilize state-of-the-art tools and scripts essential for bounty automation.\n <\/li>\n
• \n Identify complex, logic-based vulnerabilities that go beyond the scope of standard scans.\n <\/li>\n
• \n Develop custom workflows for subdomain enumeration, fuzzing, and vulnerability reporting.\n <\/li>\n<\/ul>\n

  \n Course Format<\/strong>\n<\/p>\n

  \n
  • \n Interactive lectures and discussions.\n <\/li>\n
  • \n Practical application of advanced tools and scripting for automation.\n <\/li>\n
  • \n Guided labs centered on real-world bounty workflows and sophisticated attack chains.\n <\/li>\n<\/ul>\n

    \n Course Customization Options<\/strong>\n<\/p>\n

    \n
    • \n To request a customized training session tailored to your specific bounty targets, automation requirements, or internal security challenges, please contact us to arrange.\n <\/li>\n<\/ul>