Online Threat Detection and Response (TDR) Training in Australia

This instructor-led, live training in Australia (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to implement CTEM in their organisations.

By the end of this training, participants will be able to:

• Understand the principles and stages of CTEM.
• Identify and prioritise risks using CTEM methodologies.
• Integrate CTEM practices into existing security protocols.
• Utilise tools and technologies for continuous threat management.
• Develop strategies to validate and improve security measures continuously.

This instructor-led, live training in Australia (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to leverage DeepSeek for advanced threat detection and automation.

By the end of this training, participants will be able to:

• Utilize DeepSeek AI for real-time threat detection and analysis.
• Implement AI-driven anomaly detection techniques.
• Automate security monitoring and response using DeepSeek.
• Integrate DeepSeek into existing cybersecurity frameworks.

OpenEDR is an open-source endpoint detection and response platform that provides continuous telemetry, detection, and analysis of adversarial activity on endpoints.

This instructor-led, live training (online or onsite) is aimed at beginner-level to intermediate-level IT and security professionals who wish to deploy, configure, and operate OpenEDR to detect and respond to cyber threats.

By the end of this training, participants will be able to:

• Deploy and configure OpenEDR agents and server components for telemetry collection.
• Perform basic detection and monitoring using OpenEDR dashboards and event views.
• Analyse endpoint events to identify suspicious activity and potential threats.
• Integrate OpenEDR alerts into incident response workflows and reporting.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

OpenEDR is an open-source endpoint detection and response platform that provides analytic detection with MITRE ATT&CK visibility for event correlation and root cause analysis of adversarial activity in real time.

This instructor-led, live training (online or onsite) is aimed at advanced-level SOC analysts, threat hunters, and incident responders who wish to design and operate threat-hunting programs using OpenEDR and map detections to the MITRE ATT&CK framework.

By the end of this training, participants will be able to:

• Deploy and configure OpenEDR agents and server components for telemetry collection and analysis.
• Map observable endpoint telemetry to MITRE ATT&CK techniques and build detection logic accordingly.
• Design and execute threat-hunting workflows that use behavioural analytics and event correlation to identify adversarial activity.
• Integrate OpenEDR findings into incident response playbooks and perform root cause analysis.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Ransomware represents a type of malicious software specifically engineered to encrypt organisational data and facilitate extortion.

This instructor-led, live training session (available online or onsite) is designed for security professionals at an intermediate level who aim to refine their negotiation strategies and enhance their intelligence capabilities when handling ransomware incidents.

Upon completion of this training, participants will be equipped to:

• Evaluate the structure, behaviour, and lifecycle of contemporary ransomware campaigns
• Apply established negotiation frameworks to real-world ransomware scenarios
• Collect, analyse, and operationalise threat intelligence to bolster ransomware defences
• Coordinate effectively with stakeholders, law enforcement agencies, and external partners during an attack

Course Format:

• Expert-led presentations underpinned by real case studies
• Interactive exercises simulating ransomware negotiations
• Practical application of intelligence tools within a controlled lab environment

Course Customisation Options:

• If your organisation requires a tailored version of this training, please contact us to discuss customisation options.

This instructor-led, live training in Australia (online or onsite) is designed for advanced-level cyber security professionals seeking to comprehend Cyber Threat Intelligence and acquire the skills necessary to effectively manage and mitigate cyber threats.

Upon completion of this training, participants will be able to:

• Grasp the fundamentals of Cyber Threat Intelligence (CTI).
• Assess the contemporary cyber threat landscape.
• Gather and process intelligence data.
• Conduct advanced threat analysis.
• Utilise Threat Intelligence Platforms (TIPs) and automate threat intelligence processes.

Detection engineering involves the design, implementation, and refinement of strategies to identify malicious activity across systems and networks.

This instructor-led live training, available online or on-site, is designed for entry-level cybersecurity professionals looking to develop practical skills in creating and fine-tuning security detections.

Upon completing this training, participants will be equipped with the skills to:

• Create effective detection rules and signatures using widely used security tools.
• Analyse logs and telemetry data to identify suspicious behaviour.
• Leverage threat intelligence to enhance detection logic.
• Optimise alerts and reduce false positives within a SOC workflow.

Course Format

• Guided instruction accompanied by practical demonstrations.
• Scenario-based exercises and hands-on analysis.
• Real-world detection development within an interactive lab environment.

Customisation Options

• If your organisation requires a tailored version of this program, please contact us to discuss customisation options.

The Certified Incident Handler course delivers a structured methodology for managing and responding to cybersecurity incidents with efficiency and precision.

Designed for intermediate-level IT security professionals, this instructor-led live training (available online or on-site) equips participants with the tactical skills and knowledge required to plan, classify, contain, and manage security incidents effectively.

Upon completion of this training, participants will be able to:

• Comprehend the incident response lifecycle and its distinct phases.
• Implement procedures for incident detection, classification, and notification.
• Effectively apply strategies for containment, eradication, and recovery.
• Develop post-incident reports and continuous improvement plans.

Course Format

• Interactive lectures and discussions.
• Practical application of incident handling procedures within simulated scenarios.
• Guided exercises focusing on detection, containment, and response workflows.

Course Customisation Options

• To arrange bespoke training tailored to your organisation's incident response procedures or tools, please contact us.

Bug Bounty: Advanced Techniques and Automation offers an in-depth exploration of high-impact vulnerabilities, automation frameworks, reconnaissance strategies, and the tooling approaches employed by top-tier bug bounty hunters.

This instructor-led live training, available either online or onsite, is designed for security researchers, penetration testers, and bug bounty hunters at intermediate to advanced levels who aim to automate their workflows, scale their reconnaissance efforts, and uncover complex vulnerabilities across multiple targets.

By the conclusion of this training, participants will be equipped to:

• Automate reconnaissance and scanning processes for numerous targets.
• Utilise state-of-the-art tools and scripts integral to bounty automation.
• Identify complex, logic-based vulnerabilities that go beyond standard scanning capabilities.
• Develop custom workflows for subdomain enumeration, fuzzing, and reporting.

Course Format

• Interactive lectures and discussions.
• Practical application of advanced tools and scripting for automation.
• Guided labs focusing on real-world bounty workflows and advanced attack chains.

Course Customisation Options

• To request customised training tailored to your specific bounty targets, automation requirements, or internal security challenges, please contact us to arrange a session.

Bug Bounty Hunting involves detecting security vulnerabilities in software, web applications, or systems, and reporting them responsibly to earn rewards or recognition.

This instructor-led, live training (available online or onsite) is designed for beginner-level security researchers, developers, and IT professionals keen on learning the fundamentals of ethical bug hunting and participating in bug bounty programs.

Upon completing this training, participants will be able to:

• Grasp the core concepts of vulnerability discovery and bug bounty programmes.
• Utilise essential tools such as Burp Suite and browser developer tools for application testing.
• Identify prevalent web security flaws, including XSS, SQLi, and CSRF.
• Submit clear, actionable vulnerability reports to bug bounty platforms.

Course Format

• Interactive lectures and discussions.
• Hands-on practice with bug bounty tools in simulated testing environments.
• Guided exercises focused on discovering, exploiting, and reporting vulnerabilities.

Course Customisation Options

• To request a customised training for this course tailored to your organisation's applications or testing requirements, please contact us to arrange.

This instructor-led, live training in Australia (online or onsite) is designed for intermediate-level duty managers and operational leaders who aim to develop robust cyber resilience strategies to protect their organisations from cyber threats.

Upon completion of this training, participants will be able to:

• Grasp the fundamentals of cyber resilience and their application to duty management.
• Create incident response plans to sustain operational continuity.
• Identify potential cyber threats and vulnerabilities within their environment.
• Implement security protocols to reduce risk exposure.
• Coordinate team responses during cyber incidents and recovery processes.

This instructor-led, live training in Australia (online or onsite) is aimed at intermediate-level IT security professionals who wish to develop skills in security monitoring, analysis, and response.

By the end of this training, participants will be able to:

• Understand the role of a Blue Team in cybersecurity operations.
• Use SIEM tools for security monitoring and log analysis.
• Detect, analyze, and respond to security incidents.
• Perform network traffic analysis and threat intelligence gathering.
• Apply best practices in security operations center (SOC) workflows.

This instructor-led, live training in Australia (online or onsite) is designed for intermediate to advanced cybersecurity professionals seeking to elevate their skills in AI-driven threat detection and incident response.

Upon completion of this training, participants will be able to:

• Implement advanced AI algorithms for real-time threat detection.
• Customise AI models to address specific cybersecurity challenges.
• Develop automation workflows for threat response.
• Protect AI-driven security tools against adversarial attacks.

This instructor-led, live training in Australia (online or onsite) targets beginner-level cybersecurity professionals keen on leveraging AI to enhance their threat detection and response capabilities.

By the end of this training, participants will be able to:

• Grasp AI applications in cybersecurity.
• Deploy AI algorithms for threat detection.
• Automate incident response using AI tools.
• Integrate AI into existing cybersecurity infrastructure.

The vendor-neutral Certified Digital Forensics Examiner certification is tailored to equip Cyber Crime and Fraud Investigators with essential skills in electronic discovery and advanced investigative methodologies. This course is a vital resource for any professional tasked with handling digital evidence during an inquiry.

The training provides a comprehensive framework for performing computer forensic examinations. Participants will master forensically sound techniques to assess the scene, gather and document pertinent information, conduct personnel interviews, uphold the chain of custody, and compile detailed findings reports.

This certification is valuable for organisations, individual professionals, government bodies, and law enforcement agencies seeking to pursue legal action, establish proof of guilt, or implement corrective measures grounded in digital evidence.

This course explores the management of an incident response team. Given the frequency and complexity of contemporary cyber attacks, the role of the first responder is pivotal, making incident response a critical function for organisations.

As the final line of defence, effective incident response relies on robust management processes to detect and respond to incidents efficiently. Managing such a team demands specialised skills and knowledge.

This instructor-led, live training in Australia (online or onsite) covers the different aspects of enterprise security, from AI to database security. It also includes coverage of the latest tools, processes and mindset needed to protect from attacks. 

In this course, you will master the principles and techniques underpinning digital forensics investigations, along with the range of computer forensics tools available. You will gain insight into core forensics procedures to ensure evidence is admissible in court, as well as the associated legal and ethical considerations.

You will learn how to conduct forensic investigations on both Unix/Linux and Windows systems across various file systems, covering advanced topics such as investigations into wireless, network, web, database, and mobile crimes.

This instructor-led, live training in Australia (online or onsite) is aimed at information system analysts who wish to use MITRE ATT&CK to decrease the risk of a security compromise.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start implementing MITRE ATT&CK.
• Classify how attackers interact with systems.
• Document adversary behaviours within systems.
• Track attacks, decipher patterns, and rate defence tools already in place.