Threat Hunting & Detection Engineering Training Course
Shows how to build hunting hypotheses, analyse endpoint, network and identity telemetry, and engineer detections that catch advanced threats earlier.
5 Days·Classroom
Works through the intelligence lifecycle, from setting requirements and collecting sources to analysing threat actors and turning findings into defence.
Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy
This advanced practical course develops the capabilities required to collect, analyse, validate, and operationalize Cyber Threat Intelligence to support proactive cybersecurity decision-making. It focuses on transforming threat information from multiple sources into actionable intelligence that can improve detection, prevention, investigation, and response. The program covers the intelligence lifecycle, threat intelligence requirements, collection methods, source evaluation, threat actor analysis, indicators of compromise, tactics, techniques and procedures, threat analysis, intelligence correlation, and intelligence reporting. Participants learn how to distinguish raw security information from validated intelligence and assess its relevance to organizational risks and priorities. Through practical analysis exercises and intelligence scenarios, participants will investigate threat activity, correlate technical and contextual information, assess adversary behaviour, develop intelligence products, and communicate findings to technical teams, security operations, and decision-makers.
Selected date
Lisbon · 29 Mar – 2 Apr 2027 · Classroom
Need more details?Chat with us on WhatsApp
| City | Dates | Price per Participant | Early Bird | |
|---|---|---|---|---|
MilanScheduled | 2 – 6 Nov 2026 | €7,000 | — | |
MunichScheduled | 9 – 13 Nov 2026 | €6,000 | — | |
MuscatScheduled | 16 – 20 Nov 2026 | €6,300 | — | |
OnlineScheduled | 22 – 26 Nov 2026 | €2,700 | €2,430until 2 Nov | |
ParisScheduled | 23 – 27 Nov 2026 | €6,700 | €6,030until 2 Nov | |
RiyadhScheduled | 30 Nov – 4 Dec 2026 | €4,800 | €4,320until 9 Nov | |
RomeScheduled | 7 – 11 Dec 2026 | €7,000 | €6,300until 16 Nov | |
SalalahScheduled | 14 – 18 Dec 2026 | €6,300 | €5,670until 23 Nov | |
SingaporeScheduled | 21 – 25 Dec 2026 | €8,000 | €7,200until 30 Nov | |
TrabzonScheduled | 28 Dec 2026 – 1 Jan 2027 | €5,300 | €4,770until 7 Dec | |
TunisiaScheduled | 4 – 8 Jan 2027 | €4,300 | €3,870until 14 Dec | |
ViennaScheduled | 4 – 8 Jan 2027 | €6,400 | €5,760until 14 Dec | |
AmmanScheduled | 10 – 14 Jan 2027 | €4,000 | €3,600until 21 Dec | |
AmsterdamScheduled | 18 – 22 Jan 2027 | €6,000 | €5,400until 28 Dec | |
BakuScheduled | 25 – 29 Jan 2027 | €5,300 | €4,770until 4 Jan | |
BarcelonaScheduled | 1 – 5 Feb 2027 | €6,000 | €5,400until 11 Jan | |
CairoScheduled | 8 – 12 Feb 2027 | €3,800 | €3,420until 18 Jan | |
CasablancaScheduled | 15 – 19 Feb 2027 | €4,700 | €4,230until 25 Jan | |
DohaScheduled | 22 – 26 Feb 2027 | €4,700 | €4,230until 1 Feb | |
DammamScheduled | 22 – 26 Feb 2027 | €4,800 | €4,320until 1 Feb | |
DubaiScheduled | 28 Feb – 4 Mar 2027 | €4,700 | €4,230until 8 Feb | |
GenevaScheduled | 8 – 12 Mar 2027 | €7,300 | €6,570until 15 Feb | |
IstanbulScheduled | 15 – 19 Mar 2027 | €5,300 | €4,770until 22 Feb | |
Kuala LumpurScheduled | 22 – 26 Mar 2027 | €4,700 | €4,230until 1 Mar | |
LisbonScheduled | 29 Mar – 2 Apr 2027 | €6,000 | €5,400until 8 Mar | |
LondonScheduled | 5 – 9 Apr 2027 | €5,800 | €5,220until 15 Mar | |
MakkahScheduled | 12 – 16 Apr 2027 | €4,800 | €4,320until 22 Mar | |
MadridScheduled | 12 – 16 Apr 2027 | €6,000 | €5,400until 22 Mar | |
ManamaScheduled | 19 – 23 Apr 2027 | €5,300 | €4,770until 29 Mar | |
MarrakeshScheduled | 26 – 30 Apr 2027 | €4,700 | €4,230until 5 Apr |
Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam
Shows how to build hunting hypotheses, analyse endpoint, network and identity telemetry, and engineer detections that catch advanced threats earlier.
5 Days·Classroom
Sets up an end-to-end program to scan for vulnerabilities, rank them by risk and exploitability, and roll out patches through a controlled, tested process.
5 Days·Classroom
Uses MITRE ATT&CK tactics and techniques to map adversary activity, profile threats and find gaps in detection, hunting and incident response coverage.
5 Days·Classroom
Speak with our advisors about upcoming programmes or a bespoke corporate training plan.