Endpoint Detection & Response Operations — The Endpoint Defense Stack

A hands-on mid-level course that operates an EDR/XDR platform across a fleet of endpoints. Work the endpoint defense stack - eight layers from Prevention and Telemetry through Detection, Triage, Investigation, Containment, and Remediation to Threat Hunting - reading sensor telemetry, writing ATT&CK-mapped detections, isolating hosts, and hunting proactively. Strictly defensive: you operate on endpoints you manage. Four hands-on activities in every lesson.

What you'll learn

• Read endpoint telemetry and map behaviour to MITRE ATT&CK techniques.
• Write and tune behavioural detections that fire on the true positive.
• Triage, investigate, and reconstruct an attack from process and network events.
• Contain, remediate, and hunt proactively from threat-informed hypotheses.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.