Training programme · Outcomes first
Turn telemetry into testable detection and investigation skill.
Designed for soc analysts, detection engineers, incident responders and threat hunters.
| Programme detail | What to expect |
|---|---|
| Audience | SOC analysts, detection engineers, incident responders and threat hunters |
| Prerequisites | Basic security operations and log-analysis knowledge |
| Learning outcomes | Map attacker behaviour to data; write and validate detections; investigate evidence; document a hunt |
| Delivery format | Instructor-led labs with synthetic telemetry and after-action review |
| Typical duration | 3–5 days; platform-specific modules scoped separately |
| Assessment | Scenario decisions, lab evidence or practical action plan as appropriate |
| Certificate | HAPSA participation/completion record; not represented as an accredited professional certification |
Included in final programme brief
Every delivery is confirmed in writing before scheduling.
- Named learning outcomes and module sequence.
- Lab/environment requirements and acceptable-use rules.
- Trainer and participant responsibilities.
- Accessibility and language requirements.
- Schedule, fees, cancellation terms and data handling.
Scope the right training programme.
Share the audience, current skill level, desired outcome, preferred dates and delivery location. We will return a clear programme brief.