Get in Touch
 Duration 21 hours

Course Outline

Basics of Detection Engineering

  • Core principles and key responsibilities
  • The detection engineering lifecycle
  • Essential tools and telemetry data sources

Identifying Log Sources

  • Endpoint logs and event artifacts
  • Network traffic and flow data
  • Logs from cloud services and identity providers

Applying Threat Intelligence to Detection

  • Categories of threat intelligence
  • Leveraging TI to guide detection design
  • Aligning threats with specific log sources

Creating Robust Detection Rules

  • Rule logic and pattern frameworks
  • Distinguishing between behavioral and signature-based activity
  • Utilizing Sigma, Elastic, and SO rules

Tuning and Optimizing Alerts

  • Reducing false positives
  • Iterative refinement of rules
  • Comprehending alert context and thresholds

Investigation Methodologies

  • Verifying detections
  • Pivoting across various data sources
  • Documenting insights and investigation records

Implementing Detections Operationally

  • Version control and change management
  • Deploying rules to production environments
  • Tracking rule performance over time

Advanced Topics for Junior Engineers

  • Alignment with MITRE ATT&CK
  • Data standardization and parsing
  • Automation possibilities in detection workflows

Wrap-Up and Future Pathways

Requirements

  • Knowledge of fundamental networking principles
  • Practical experience with operating systems like Windows or Linux
  • Basic familiarity with core cybersecurity terminology

Target Audience

  • Entry-level analysts focused on security monitoring
  • New members of SOC teams
  • IT professionals transitioning into detection engineering roles

Need help picking the right course?
southafrica@nobleprog.co.za or +27 (0)10 005 5793

Testimonials (2)

Clarity and pace of explanations

Federica Galeazzi - Aethra Telecomunications SRL
Course - AI-Powered Cybersecurity: Advanced Threat Detection & Response

It did give me the insight what I needed :) I am starting teaching on a BTEC Level 3 qualification and wanted to widen my knowledge in this area.

Otilia Pasareti - Merthyr College
Course - Fundamentals of Corporate Cyber Warfare

Related Courses

AI-Powered Cybersecurity: Threat Detection & Response

 21 Hours

This instructor-led, live training in Nigeria (online or in-person) is tailored for entry-level cybersecurity professionals who want to learn how to leverage AI for better threat detection and response capabilities.

Upon completing this training, participants will be able to:

  • Grasp how AI is applied in cybersecurity.
  • Deploy AI algorithms for threat identification.
  • Automate incident response using AI tools.
  • Incorporate AI into current cybersecurity infrastructure.
Read more...

AI-Powered Cybersecurity: Advanced Threat Detection & Response

 28 Hours

This instructor-led, live training in Nigeria (online or onsite) targets intermediate to advanced-level cybersecurity professionals keen on elevating their skills in AI-driven threat detection and incident response.

By the end of this training, participants will be able to:

  • Deploy advanced AI algorithms for real-time threat detection.
  • Tailor AI models to address specific cybersecurity challenges.
  • Develop automation workflows for threat response.
  • Safeguard AI-driven security tools against adversarial attacks.
Read more...

Blue Team Fundamentals: Security Operations and Analysis

 21 Hours

This instructor-led, live training in Nigeria (online or onsite) is aimed at intermediate-level IT security professionals who wish to develop skills in security monitoring, analysis, and response.

By the end of this training, participants will be able to:

  • Understand the role of a Blue Team in cybersecurity operations.
  • Use SIEM tools for security monitoring and log analysis.
  • Detect, analyze, and respond to security incidents.
  • Perform network traffic analysis and threat intelligence gathering.
  • Apply best practices in security operations center (SOC) workflows.
Read more...

Bug Bounty Hunting

 21 Hours
This live, instructor-led training in Nigeria provides beginners with the essentials of ethical bug hunting, highlighting key tools like Burp Suite and common vulnerabilities such as XSS, SQLi, and CSRF. Learners will gain the skills to identify flaws and submit comprehensive reports.
Read more...

Bug Bounty: Advanced Techniques and Automation

 21 Hours
This advanced training on Nigeria empowers security researchers with the ability to automate workflows and scale reconnaissance for bug bounty hunting. Participants will gain mastery in detecting high-impact vulnerabilities, building custom scripts, and managing complex targets with efficiency.
Read more...

CHFI - Certified Digital Forensics Examiner

 35 Hours
This vendor-neutral CHFI training in Nigeria provides investigators with critical digital forensics capabilities, including evidence collection, chain-of-custody management, and advanced analysis techniques. It readies professionals to manage digital evidence for legal proceedings and corrective measures through practical, hands-on laboratory exercises.
Read more...

Certified Incident Handler

 21 Hours
Instructor-led training in Nigeria tailored for IT security professionals. Master the art of planning, classifying, containing, and managing incidents through hands-on simulations. Develop practical capabilities in detection, eradication, and recovery strategies to enhance your organization's overall response efficiency.
Read more...

Mastering Continuous Threat Exposure Management (CTEM)

 28 Hours

This instructor-led live training in Nigeria (online or onsite) is tailored for intermediate-level cybersecurity professionals aiming to implement CTEM in their organisations.

By the conclusion of this training, participants will be equipped to:

  • Comprehend the fundamental principles and stages of CTEM.
  • Identify and prioritise risks through CTEM methodologies.
  • Integrate CTEM practices into existing security protocols.
  • Leverage tools and technologies for continuous threat management.
  • Develop strategies to validate and continuously improve security measures.
Read more...

Cyber Threat Intelligence

 35 Hours

This instructor-led live training, conducted in Nigeria (online or onsite), targets advanced cybersecurity professionals who wish to understand Cyber Threat Intelligence and develop skills to effectively manage and mitigate cyber threats.

By the conclusion of this training, participants will be able to:

  • Understand the fundamentals of Cyber Threat Intelligence (CTI).
  • Analyze the current cyber threat landscape.
  • Collect and process intelligence data.
  • Perform advanced threat analysis.
  • Leverage Threat Intelligence Platforms (TIPs) and automate threat intelligence processes.
Read more...

Fundamentals of Corporate Cyber Warfare

 14 Hours

This instructor-led live training in Nigeria (online or onsite) covers the diverse aspects of enterprise security, from AI to database security. It also includes coverage of the latest tools, processes and mindset needed to protect from attacks. 

Read more...

DeepSeek for Cybersecurity and Threat Detection

 14 Hours

This instructor-led, live training in Nigeria (online or onsite) is aimed at intermediate-level cybersecurity professionals who wish to leverage DeepSeek for advanced threat detection and automation.

By the end of this training, participants will be able to:

  • Utilize DeepSeek AI for real-time threat detection and analysis.
  • Implement AI-driven anomaly detection techniques.
  • Automate security monitoring and response using DeepSeek.
  • Integrate DeepSeek into existing cybersecurity frameworks.
Read more...

Duty Managers Cyber Resilience

 14 Hours

This live, instructor-led training in Nigeria (online or onsite) targets duty managers and operational leaders at an intermediate level who wish to develop strong cyber resilience strategies to protect their organisations from cyber threats.

By the conclusion of this training, participants will be able to:

  • Understand the fundamentals of cyber resilience and its importance to duty management.
  • Formulate incident response plans to maintain operational continuity.
  • Detect potential cyber threats and vulnerabilities within their environment.
  • Deploy security protocols to minimise risk exposure.
  • Coordinate team responses during cyber incidents and recovery phases.
Read more...

MITRE ATT&CK

 7 Hours

This instructor-led, live training in Nigeria (online or onsite) is aimed at information system analysts who wish to use MITRE ATT&CK to decrease the risk of a security compromise.

By the end of this training, participants will be able to:

  • Set up the necessary development environment to start implementing MITRE ATT&CK.
  • Classify how attackers interact with systems.
  • Document adversary behaviors within systems.
  • Track attacks, decipher patterns, and rate defense tools already in place.
Read more...

Open-Source EDR Fundamentals: Deployment, Detection & Response

 14 Hours
Participate in this instructor-led training in Nigeria to gain mastery over OpenEDR fundamentals. Acquire the skills to deploy agents, configure telemetry, and analyze endpoint events for effective threat detection. Our hands-on labs in Nigeria emphasize incident response and the integration of alerts into security workflows.
Read more...

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

 21 Hours
This advanced training in Nigeria empowers SOC analysts and threat hunters with the hands-on expertise required to deploy OpenEDR and align it with the MITRE ATT&CK framework. Learners will acquire the skills to design sophisticated detection logic, execute effective hunting workflows, and conduct root cause analysis to fortify organizational security.
Read more...

Related Categories

Threat Detection and Response (TDR)
Threat Detection and Response (TDR)