3-day lab-driven course on Windows kernel internals, memory management, and privilege escalation. Explore real-world vulnerabilities, exploitability analysis, data-only attacks, and modern mitigations to understand how Windows security boundaries break and how to defend them.

Learn DFIR investigative tradecraft for Windows enterprise intrusions using two open frameworks: Unified Kill Chain for the full attack narrative and MITRE ATT&CK for evidence-backed TTPs. Practice backward/forward scoping from triaged host to enterprise threat hunting; methods transfer.

Learn practical cyber threat intelligence, build a repeatable hunt methodology, hunt with endpoint data, and measure effectiveness. Hands-on labs develop hypotheses across social engineering, network/system compromise, and APT scenarios using CLI, Jupyter, and Velociraptor.

Hands-on course for security pros to build private, local AI workflows for malware analysis. Using Ghidra, local LLMs, scripting, headless execution, and MCP, students automate reverse engineering, manage agent drift, and move from triage to reversing obfuscated malware.

CTI in Agentic Times teaches analysts to deploy practical, verifiable AI for threat intelligence. It focuses on secure hybrid architectures, local and remote models, automated OSINT, malware analysis, and auditable pipelines with validation layers—avoiding cloud lock-in and reducing risk.

Hands-on web app pentesting course for security analysts moving into offensive security. Learn to find and exploit common vulnerabilities in modern web apps and APIs through guided labs, using industry tools, open-source frameworks, and LLM-assisted testing workflows.