Cloud Detection Engineering — The Cloud Detection Stack

A hands-on mid-level course that builds detections specifically for cloud control planes and cloud-native services - not a generic detection pipeline, not incident response. Work the cloud detection stack - eight layers from control-plane logs to guardrailed automated response: Control-Plane Logs, Identity Signals, Network & Flow, Workload & Runtime, Data-Plane Access, Managed Detections, Custom Detections, and Response Hooks - collecting the right telemetry, tuning and verifying managed detections, writing detection-as-code mapped to ATT&CK Cloud, and wiring safe automated containment, with real AWS/Azure/GCP CLI and KQL/SQL-style query work. Four hands-on activities in every lesson.

What you'll learn

• Build organization-wide, integrity-checked control-plane logging across every account and region.
• Detect identity abuse through role-assumption chains, credential misuse, and correlated IdP signals.
• Detect lateral movement, C2, and exfiltration through flow logs, DNS logging, and egress baselining.
• Tune and verify managed detections, write custom detection-as-code mapped to ATT&CK Cloud, and wire guardrailed automated response.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.