Threat Detection and Response (TDR) Training in Évora

This instructor-led, live training in Évora (online or onsite) is designed for intermediate-level cybersecurity professionals aiming to implement CTEM within their organizations.

Upon completion of this training, participants will be able to:

• Grasp the core principles and stages of CTEM.
• Identify and prioritize risks using CTEM methodologies.
• Integrate CTEM practices into existing security protocols.
• Leverage tools and technologies for continuous threat management.
• Develop strategies to validate and enhance security measures on an ongoing basis.

This instructor-led, live training in Évora (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to leverage DeepSeek for advanced threat detection and automation.

By the end of this training, participants will be able to:

• Utilize DeepSeek AI for real-time threat detection and analysis.
• Implement AI-driven anomaly detection techniques.
• Automate security monitoring and response using DeepSeek.
• Integrate DeepSeek into existing cybersecurity frameworks.

OpenEDR is an open-source Endpoint Detection and Response (EDR) platform designed to deliver continuous telemetry, detection, and analysis of adversarial activities on endpoints.

This instructor-led live training (available online or onsite) is tailored for IT and security professionals at the beginner to intermediate levels who wish to deploy, configure, and operate OpenEDR to detect and respond to cyber threats.

Upon completion of this training, participants will be able to:

• Deploy and configure OpenEDR agents and server components to collect telemetry.
• Execute basic detection and monitoring tasks using OpenEDR dashboards and event views.
• Analyze endpoint events to identify suspicious activities and potential threats.
• Integrate OpenEDR alerts into incident response workflows and reporting processes.

Course Format

• Interactive lectures and discussions.
• Numerous exercises and practical practice sessions.
• Hands-on implementation within a live laboratory environment.

Customization Options

• To request a customized training session for this course, please contact us to make arrangements.

OpenEDR is an open-source endpoint detection and response platform that provides analytic detection with MITRE ATT&CK visibility for event correlation and root cause analysis of adversarial activity in real time.

This instructor-led, live training (online or onsite) is aimed at advanced-level SOC analysts, threat hunters, and incident responders who wish to design and operate threat-hunting programs using OpenEDR and map detections to the MITRE ATT&CK framework.

By the end of this training, participants will be able to:

• Deploy and configure OpenEDR agents and server components for telemetry collection and analysis.
• Map observable endpoint telemetry to MITRE ATT&CK techniques and build detection logic accordingly.
• Design and execute threat-hunting workflows that use behavioral analytics and event correlation to identify adversarial activity.
• Integrate OpenEDR findings into incident response playbooks and perform root cause analysis.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Ransomware constitutes a type of malicious software engineered to encrypt data and extort financial gain from organizations.

This instructor-led, live training session (available online or onsite) targets intermediate-level security professionals looking to refine their negotiation tactics and enhance their intelligence-gathering capabilities during ransomware crises.

Upon completion of this training, participants will be equipped to:

• Evaluate the structure, behavioural patterns, and lifecycle of contemporary ransomware campaigns
• Implement established negotiation frameworks within real-world ransomware contexts
• Collect, analyse, and operationalize threat intelligence to bolster ransomware defence efforts
• Coordinate seamlessly with stakeholders, law enforcement agencies, and external partners during an attack

Course Format:

• Expert-led presentations augmented by real-world case studies
• Interactive exercises that simulate ransomware negotiation scenarios
• Practical application of intelligence tools within a secure, controlled lab environment

Customization Options:

• Should your organization require a bespoke version of this training, please reach out to us for customization details.

This instructor-led, live training in Évora (online or onsite) is designed for advanced cyber security professionals aiming to understand Cyber Threat Intelligence and develop the skills to effectively manage and mitigate cyber threats.

Upon completion of this training, participants will be able to:

• Comprehend the fundamental concepts of Cyber Threat Intelligence (CTI).
• Evaluate the contemporary cyber threat landscape.
• Gather and process intelligence data.
• Conduct advanced threat analysis.
• Utilize Threat Intelligence Platforms (TIPs) to automate threat intelligence workflows.

Detection engineering involves the design, implementation, and continuous refinement of methods to identify malicious activity across systems and networks.

This instructor-led, live training (available online or onsite) is designed for beginner-level cybersecurity professionals seeking to acquire practical skills in creating and tuning security detections.

Upon completing this training, participants will possess the necessary skills to:

• Create effective detection rules and signatures using widely adopted security tools.
• Analyze logs and telemetry data to pinpoint suspicious activities.
• Leverage threat intelligence to enhance detection logic.
• Refine alerts and minimize false positives within a SOC workflow.

Course Format

• Guided instruction accompanied by practical demonstrations.
• Scenario-based exercises and hands-on analysis.
• Development of real-world detections within an interactive lab environment.

Customization Options

• If your organization requires a customized version of this programme, please contact us to discuss your needs.

The Certified Incident Handler course delivers a structured methodology for effectively and efficiently managing and responding to cybersecurity incidents.

Designed as an instructor-led live training session (available online or onsite), this programme targets intermediate-level IT security professionals seeking to acquire the tactical skills and knowledge required to plan, classify, contain, and manage security incidents.

Upon completion of this training, participants will be able to:

• Comprehend the incident response lifecycle and its distinct phases.
• Carry out incident detection, classification, and notification procedures.
• Effectively apply containment, eradication, and recovery strategies.
• Develop post-incident reports and continuous improvement plans.

Course Format

• Interactive lectures and discussions.
• Practical application of incident handling procedures within simulated scenarios.
• Guided exercises focused on detection, containment, and response workflows.

Customization Options

• To arrange customized training tailored to your organization's specific incident response procedures or tools, please contact us.

Bug Bounty: Advanced Techniques and Automation delves into high-impact vulnerabilities, automation frameworks, reconnaissance techniques, and the tooling strategies employed by elite bug bounty hunters.

This instructor-led, live training (available online or onsite) is designed for intermediate to advanced security researchers, penetration testers, and bug bounty hunters aiming to automate their workflows, scale their reconnaissance efforts, and uncover complex vulnerabilities across multiple targets.

Upon completion of this training, participants will be able to:

• Automate reconnaissance and scanning processes for multiple targets.
• Leverage cutting-edge tools and scripts used in bounty automation.
• Identify complex, logic-based vulnerabilities that go beyond standard scans.
• Construct custom workflows for subdomain enumeration, fuzzing, and reporting.

Course Format

• Interactive lectures and discussions.
• Hands-on application of advanced tools and scripting for automation.
• Guided labs focused on real-world bounty workflows and advanced attack chains.

Course Customization Options

• To request customized training for this course based on your bounty targets, automation requirements, or internal security challenges, please contact us to arrange.

Bug Bounty Hunting involves the identification of security vulnerabilities within software, websites, or systems, followed by their responsible disclosure in exchange for rewards or recognition.

This instructor-led, live training (available online or onsite) is designed for beginner-level security researchers, developers, and IT professionals who wish to learn the fundamentals of ethical bug hunting and how to participate in bug bounty programs.

By the end of this training, participants will be able to:

• Understand the core concepts of vulnerability discovery and bug bounty programs.
• Use key tools like Burp Suite and browser dev tools for testing applications.
• Identify common web security flaws such as XSS, SQLi, and CSRF.
• Submit clear, actionable vulnerability reports to bug bounty platforms.

Format of the Course

• Interactive lecture and discussion.
• Hands-on use of bug bounty tools in simulated testing environments.
• Guided exercises focused on discovering, exploiting, and reporting vulnerabilities.

Course Customization Options

• To request a customized training for this course based on your organization's applications or testing needs, please contact us to arrange.

This instructor-led, live training in Évora (online or onsite) is designed for duty managers and operational leaders at an intermediate level who aim to develop strong cyber resilience strategies to protect their organisations from cyber threats.

By the conclusion of this training, participants will be able to:

• Grasp the fundamentals of cyber resilience and their significance to duty management.
• Create incident response plans to ensure operational continuity.
• Identify potential cyber threats and vulnerabilities within their environment.
• Implement security protocols to reduce risk exposure.
• Coordinate team responses during cyber incidents and recovery phases.

This instructor-led, live training in Évora (online or onsite) targets intermediate-level IT security professionals aiming to develop competencies in security monitoring, analysis, and response.

By the end of this training, participants will be able to:

• Understand the role of a Blue Team in cybersecurity operations.
• Use SIEM tools for security monitoring and log analysis.
• Detect, analyze, and respond to security incidents.
• Perform network traffic analysis and threat intelligence gathering.
• Apply best practices in security operations center (SOC) workflows.

This instructor-led, live training in Évora (online or onsite) is designed for intermediate to advanced cybersecurity professionals aiming to enhance their skills in AI-driven threat detection and incident response.

By the end of this training, participants will be able to:

• Implement advanced AI algorithms for real-time threat detection.
• Customize AI models to address specific cybersecurity challenges.
• Develop automation workflows for threat response.
• Secure AI-driven security tools against adversarial attacks.

This instructor-led, live training in Évora (online or onsite) is designed for beginner-level cybersecurity professionals seeking to harness AI to enhance their threat detection and response capabilities.

Upon completion of this training, participants will be able to:

• Comprehend the role of AI in cybersecurity.
• Deploy AI algorithms for effective threat detection.
• Automate incident response processes using AI tools.
• Integrate AI solutions into current cybersecurity infrastructure.

The vendor-neutral Certified Digital Forensics Examiner certification is designed to equip Cyber Crime and Fraud Investigators with skills in electronic discovery and advanced investigation techniques. This course is indispensable for professionals who need to handle digital evidence during investigative processes.

The Certified Digital Forensics Examiner training covers the methodology for performing computer forensic examinations. Participants will learn to apply forensically sound techniques to assess the scene, collect and document relevant information, interview key personnel, maintain the chain of custody, and draft comprehensive findings reports.

The Certified Digital Forensics Examiner course offers significant value to organizations, individuals, government bodies, and law enforcement agencies seeking to pursue litigation, establish proof of guilt, or implement corrective measures based on digital evidence.

This instructor-led, live training in Évora (available online or on-site) covers various aspects of enterprise security, spanning from AI to database security. It also includes the latest tools, processes, and mindsets required to protect against attacks.

This instructor-led, live training in Évora (online or onsite) is aimed at information system analysts who wish to use MITRE ATT&CK to decrease the risk of a security compromise.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start implementing MITRE ATT&CK.
• Classify how attackers interact with systems.
• Document adversary behaviors within systems.
• Track attacks, decipher patterns, and rate defense tools already in place.