Make sure to subscribe to the Threat Hunting Academy Community blog! After each episode, a post will be created that includes all the resources mentioned during the session.
Become a certified EDR Admin by attending our 2021 Threat Hunting Academy. Get the hands-on practical training needed to conduct an active threat hunt and learn how to stop attackers in their tracks, using our top-rated endpoint protection solution, Sophos EDR. The goal of this series is to get you comfortable with how to conduct a threat hunt, using the appropriate EDR tools to conduct advanced threat hunting and IT security operations hygiene.
In this seven-session series, we’ll provide an in-depth understanding of the entire threat hunting landscape. We’ll explore the methods cyber attackers use to gain their foothold and how they are able to hide themselves and move bi-laterally across an entire organization’s network. More importantly, you’ll learn how to use Sophos EDR to help you detect these invasions before they escalate and, ultimately, eliminate the threat. We’ll give you actionable tasks to detect and destroy with each scenario using EDR, so you can learn how to be a true threat hunting expert. Best of all, this series culminates in a live, interactive session in which the participants will help guide the direction of a real-world hunt, using Sophos EDR.
Attend all seven sessions and become a Sophos EDR Certified Admin!
Thinking Like A Threat Hunter
March 2, 2021
10 am. -11 am
Threat Journey: Running Code On Remote Systems
March 3, 2021
Threat Journey: Gaining A Privileged Foothold
March 4, 2021
Threat Journey: Understanding the Target Environment
March 9, 2021
Threat Journey: Remote Access Control
March 10, 2021
Using the EDR Threat Hunting Framework
March 11, 2021
Putting it all together - Live Threat Hunting Exercise
March 16, 2021
Even if you may not be able to attend any of the live sessions, be sure to still register. Recordings of the live events will be made available for on-demand viewing.
Is session' recording available or not?
I also need this session.
i need today's recorded session