Certified Incident Handler Training Course

This instructor-led, live training in South Africa (online or onsite) targets entry-level cybersecurity professionals who want to learn how to utilise AI for enhanced threat detection and response capabilities.

Upon completion of this training, participants will be able to:

• Gain insight into AI applications within the cybersecurity sector.
• Deploy AI algorithms for threat detection.
• Automate incident response using AI tools.
• Incorporate AI into existing cybersecurity infrastructure.

This instructor-led, live training is available online or on-site, designed for intermediate to advanced cybersecurity professionals aiming to elevate their skills in AI-driven threat detection and incident response.

Upon completion of this training, participants will be capable of:

• Implementing advanced AI algorithms for real-time threat detection.
• Customising AI models to address specific cybersecurity challenges.
• Developing automation workflows for threat response.
• Securing AI-driven security tools against adversarial attacks.

This instructor-led, live training in South Africa (online or onsite) is aimed at intermediate-level IT security professionals who wish to develop skills in security monitoring, analysis, and response.

By the end of this training, participants will be able to:

• Understand the role of a Blue Team in cybersecurity operations.
• Use SIEM tools for security monitoring and log analysis.
• Detect, analyze, and respond to security incidents.
• Perform network traffic analysis and threat intelligence gathering.
• Apply best practices in security operations center (SOC) workflows.

Bug Bounty Hunting entails identifying security vulnerabilities within software, websites, or systems and responsibly reporting them to receive rewards or recognition.

This instructor-led, live training (available online or on-site) targets beginner-level security researchers, developers, and IT professionals who wish to master the fundamentals of ethical bug hunting and learn how to participate in bug bounty programmes.

By the conclusion of this training, participants will be capable of:

• Grasping the core concepts of vulnerability discovery and bug bounty programmes.
• Utilising key tools such as Burp Suite and browser developer tools for application testing.
• Identifying common web security flaws, including XSS, SQLi, and CSRF.
• Submitting clear, actionable vulnerability reports to bug bounty platforms.

Format of the Course

• Interactive lecture and discussion.
• Hands-on use of bug bounty tools in simulated testing environments.
• Guided exercises focused on discovering, exploiting, and reporting vulnerabilities.

Course Customization Options

• To request a customized training for this course based on your organization's applications or testing needs, please contact us to arrange.

Bug Bounty: Advanced Techniques and Automation offers an in-depth exploration of high-impact vulnerabilities, automation frameworks, reconnaissance techniques, and the tooling strategies employed by elite bug bounty hunters.

This instructor-led, live training (available online or onsite) is designed for intermediate to advanced security researchers, penetration testers, and bug bounty hunters looking to automate their workflows, scale their reconnaissance efforts, and uncover complex vulnerabilities across multiple targets.

Upon completion of this training, participants will be able to:

• Automate reconnaissance and scanning processes for multiple targets.
• Utilise state-of-the-art tools and scripts for bounty automation.
• Identify complex, logic-based vulnerabilities that extend beyond standard scans.
• Develop custom workflows for subdomain enumeration, fuzzing, and reporting.

Course Format

• Interactive lectures and discussions.
• Hands-on practice with advanced tools and scripting for automation.
• Guided labs focused on real-world bounty workflows and advanced attack chains.

Course Customisation Options

• To request a customised training session tailored to your bounty targets, automation requirements, or internal security challenges, please contact us to arrange.

The vendor-neutral Certified Digital Forensics Examiner certification is designed to equip Cyber Crime and Fraud Investigators with skills in electronic discovery and advanced investigative techniques. This course is vital for anyone who encounters digital evidence during an investigation.

The Certified Digital Forensics Examiner training instructs students on the methodology for conducting computer forensic examinations. Participants will learn to apply forensically sound investigative techniques to evaluate the scene, collect and document relevant information, interview key personnel, maintain the chain of custody, and compile a findings report.

The Certified Digital Forensics Examiner course is beneficial for organisations, individuals, government offices, and law enforcement agencies interested in pursuing litigation, proving guilt, or taking corrective action based on digital evidence.

This instructor-led, live training in South Africa (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to implement CTEM in their organisations.

By the end of this training, participants will be able to:

• Understand the principles and stages of CTEM.
• Identify and prioritise risks using CTEM methodologies.
• Integrate CTEM practices into existing security protocols.
• Utilise tools and technologies for continuous threat management.
• Develop strategies to validate and improve security measures continuously.

This instructor-led live training, offered in South Africa (online or onsite), is targeted at advanced-level cybersecurity professionals who wish to understand Cyber Threat Intelligence and gain the skills to effectively manage and mitigate cyber threats.

By the end of this training, participants will be able to:

• Understand the fundamentals of Cyber Threat Intelligence (CTI).
• Analyse the current cyber threat landscape.
• Collect and process intelligence data.
• Perform advanced threat analysis.
• Leverage Threat Intelligence Platforms (TIPs) and automate threat intelligence processes.

This instructor-led, live training in South Africa (online or onsite) addresses various facets of enterprise security, ranging from AI applications to database protection. It also examines the latest tools, processes, and strategic mindsets essential for defending against attacks. 

This instructor-led, live training in South Africa (online or onsite) targets intermediate-level cybersecurity professionals eager to leverage DeepSeek for advanced threat detection and automation.

Upon completing this training, participants will be equipped to:

• Apply DeepSeek AI for real-time threat detection and analysis.
• Deploy AI-driven techniques for anomaly detection.
• Automate security monitoring and response processes using DeepSeek.
• Seamlessly integrate DeepSeek into existing cybersecurity frameworks.

This instructor-led, live training in South Africa (online or onsite) is designed for duty managers and operational leaders at an intermediate level who wish to develop robust cyber resilience strategies to safeguard their organisations against cyber threats.

By the end of this training, participants will be able to:

• Comprehend the fundamentals of cyber resilience and its application to duty management.
• Formulate incident response plans to uphold operational continuity.
• Recognise potential cyber threats and vulnerabilities within their operational environment.
• Deploy security protocols to reduce risk exposure.
• Lead team responses during cyber incidents and the subsequent recovery phases.

Detection engineering involves the design, implementation, and refinement of methods used to identify malicious activities across systems and networks.

This instructor-led, live training session (available online or onsite) is designed for beginner-level cybersecurity professionals seeking to acquire practical skills in creating and fine-tuning security detections.

Upon completing this training, participants will possess the following capabilities:

• Craft effective detection rules and signatures using standard security tools.
• Analyze logs and telemetry data to pinpoint suspicious behaviours.
• Utilise threat intelligence to enhance detection logic.
• Optimise alerts and reduce false positives within a SOC workflow.

Course Format

• Guided instruction accompanied by practical demonstrations.
• Scenario-driven exercises and hands-on analysis.
• Building real-world detections within an interactive lab environment.

Customization Options

• Should your organisation require a bespoke version of this programme, please contact us to discuss customization possibilities.

This instructor-led, live training in South Africa (online or onsite) is aimed at information system analysts who wish to use MITRE ATT&CK to decrease the risk of a security compromise.

By the end of this training, participants will be able to:

• Set up the necessary development environment to start implementing MITRE ATT&CK.
• Classify how attackers interact with systems.
• Document adversary behaviors within systems.
• Track attacks, decipher patterns, and rate defense tools already in place.

OpenEDR is an open-source endpoint detection and response platform that delivers continuous telemetry, detection, and analysis of adversarial activity across endpoints.

This instructor-led, live training (available online or onsite) is designed for beginner to intermediate IT and security professionals who wish to deploy, configure, and operate OpenEDR to detect and respond to cyber threats.

By the end of this training, participants will be able to:

• Deploy and configure OpenEDR agents and server components for telemetry collection.
• Perform basic detection and monitoring using OpenEDR dashboards and event views.
• Analyse endpoint events to identify suspicious activity and potential threats.
• Integrate OpenEDR alerts into incident response workflows and reporting.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

OpenEDR is an open-source endpoint detection and response (EDR) platform that delivers analytic detection with full MITRE ATT&CK visibility, enabling real-time event correlation and root cause analysis of adversarial activity.

This instructor-led live training (available online or onsite) is designed for advanced-level SOC analysts, threat hunters, and incident responders who aim to design and operate threat-hunting programmes by leveraging OpenEDR and mapping detections to the MITRE ATT&CK framework.

Upon completing this training, participants will be able to:

• Deploy and configure OpenEDR agents and server components to facilitate telemetry collection and analysis.
• Map observable endpoint telemetry to MITRE ATT&CK techniques and construct corresponding detection logic.
• Design and execute threat-hunting workflows that utilise behavioural analytics and event correlation to identify adversarial activity.
• Integrate OpenEDR findings into incident response playbooks and conduct root cause analysis.

Course Format

• Interactive lectures and discussions.
• Extensive exercises and practical sessions.
• Hands-on implementation within a live laboratory environment.

Customisation Options

• To arrange a bespoke training session for this course, please contact us.