Explore practical, self-paced cybersecurity courses in threat intelligence, OSINT, security operations, cloud security and human risk.
Self-paced learning built around evidence, decisions and work you can use.
You do not need to know the right security terminology. Pick a route and we will narrow the catalogue.
Build a practical foundation in security, intelligence, networks and safer digital decision-making with courses designed for new learners.
10 courses Investigate and explain Turn evidence into threat intelligenceLearn to collect, evaluate, analyze and communicate cyber threat intelligence and open-source evidence for defensible decisions.
8 courses Detect and respond Build sharper security operationsPractice alert triage, detection engineering, network and endpoint analysis, incident response and evidence-led handoffs.
21 courses Design for trust Secure the systems modern teams depend onConnect cloud architecture, identity controls and software supply-chain assurance to the operational decisions that keep services trustworthy.
3 courses Protect people Make safer decisions under pressureRecognize manipulation, interrupt social-engineering scripts and build security habits that work in realistic, high-pressure moments.
4 coursesYou will learn to: Reason from a security concern to evidence and a bounded analytical claim.
Best for An intelligent individual learner who understands basic security concepts but is new to this specific subject.
Explore Detection Engineering as a Way of ReasoningYou will learn to: Explain shared responsibility and map the provider, customer, and application-owner controls for a cloud workload.
Best for Practitioners ready to apply concepts in investigations and operations
Explore Cloud Security Foundations: Design, Operate, and RecoverYou will learn to: Explain the CVE ecosystem, including identifiers, records, disclosure processes, and the roles of organizations involved in vulnerability tracking.
Best for Practitioners ready to apply concepts in investigations and operations
Explore CVE Intelligence: Vulnerability Lifecycle, Analysis, and Defensive DecisionsYou will learn to: Distinguish a threat feed from finished intelligence and explain the value and limits of common feed data.
Best for Practitioners ready to apply concepts in investigations and operations
Explore Cyber Threat Intelligence FeedsYou will learn to: Trace a DNS answer through client, recursive, cache, delegation, and authoritative roles.
Best for Practitioners ready to apply concepts in investigations and operations
Explore DNS Investigations: Resolution, Telemetry, and Threat DecisionsYou will learn to: Reconstruct process lineage using host-scoped identifiers, time, image paths, users, and command lines.
Best for Practitioners ready to apply concepts in investigations and operations
Explore Endpoint Process-Tree Analysis: From Alert to BehaviorYou will learn to: Map an end-to-end access path and distinguish identity proofing, authentication, authorization, session management, and governance responsibilities.
Best for Practitioners ready to apply concepts in investigations and operations
Explore Identity and Access Management Foundations: From Sign-In to Accountable AccessYou will learn to: Establish incident roles, authority, playbooks, evidence access, and decision thresholds before an incident begins.
Best for Practitioners ready to apply concepts in investigations and operations
Explore Incident Response Foundations: From First Signal to Durable RecoveryYou will learn to: Explain the purpose, scope, and limitations of OSINT and distinguish publicly available information from intelligence produced through analysis.
Best for Practitioners ready to apply concepts in investigations and operations
Explore Open Source Intelligence (OSINT) Foundations: From Public Data to Defensible IntelligenceYou will learn to: Translate an operational security decision into scoped intelligence requirements, priority information needs, collection tasks, and explicit review triggers.
Best for Practitioners ready to apply concepts in investigations and operations
Explore Operational Cyber Threat Intelligence: Investigations, Campaigns, and Defensive ActionYou will learn to: Preserve and inspect a suspicious message without activating links, attachments, or remote content.
Best for Practitioners ready to apply concepts in investigations and operations
Explore Phishing Email Triage: From Message Evidence to ContainmentYou will learn to: Translate an unfamiliar alert into a precise claim, required evidence, and initial safety checks.
Best for Practitioners ready to apply concepts in investigations and operations
Explore Security Alert Triage: Evidence, Scope, and Handoff
