Identity Threat Detection & Response — The Identity Defense Stack

A senior-level program course that builds identity-centric detection and response across an organization's entire identity fabric - Entra ID, on-prem AD, and Okta. Work the identity defense stack - eight layers: Identity Telemetry, Posture & Hygiene, Credential Attacks, Token & Session Abuse, Privilege Escalation, Lateral & Federation Abuse, Response Playbooks, and Program & Metrics - correlating telemetry, hardening posture, detecting credential, token, and privilege attacks on your own estate, containing fast, and measuring the program against MITRE ATT&CK, MTTD/MTTR, and a maturity roadmap. Four hands-on activities in every lesson.

What you'll learn

• Correlate identity telemetry - sign-in, audit, AD security events, Kerberos/NTLM/LDAP, MFA, and SaaS - across every IdP, and baseline it with UEBA.
• Run continuous identity security posture management, finding and prioritizing stale accounts, excess privilege, and dangerous AD/federation paths.
• Detect credential attacks (spray, stuffing, brute force, MFA fatigue, AiTM) and token/session abuse (theft, replay, OAuth consent abuse, device-code phishing).
• Detect privilege escalation and lateral/federation abuse, and run identity-centric containment as a measured ITDR program.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.