TRAINING CATALOG
Practical training
for defenders.
Instructor-led courses connecting attacker behavior to telemetry, detection, and investigation. New public cohorts will be announced soon; inquire about private team training.
Flagship Curriculum · Instructor-led
4 Days (Hands-on labs + Capstone)
Intermediate / Practitioner
4 Days (Hands-on labs + Capstone) Intermediate / PractitionerBlue vs. Red with AI: From Attacker Playbooks to Defender Detections
Follow attacker playbooks, investigate the evidence, and build detections you can validate.
Core focus
Endpoint and network telemetrySigma detection engineeringInvestigation and timeline reconstructionResponsible AI with human validationCOHORT STATUS
Past delivery: DEF CON Training Las Vegas 2026. New cohort dates to be announced.
Delivered at DEF CON Training Las Vegas 2026 (August 8–11, 2026). Inquire for private team training or future cohort announcements.
No public cohorts are currently open. New dates will be announced via our Discord channel and contact page.
Discuss future cohorts