Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting Training Cursus

OpenEDR is an open-source endpoint detection and response platform that provides analytic detection with MITRE ATT&CK visibility for event correlation and root cause analysis of adversarial activity in real time.

This instructor-led, live training (online or onsite) is aimed at advanced-level SOC analysts, threat hunters, and incident responders who wish to design and operate threat-hunting programs using OpenEDR and map detections to the MITRE ATT&CK framework.

By the end of this training, participants will be able to:

Deploy and configure OpenEDR agents and server components for telemetry collection and analysis.
Map observable endpoint telemetry to MITRE ATT&CK techniques and build detection logic accordingly.
Design and execute threat-hunting workflows that use behavioral analytics and event correlation to identify adversarial activity.
Integrate OpenEDR findings into incident response playbooks and perform root cause analysis.

Format of the Course

Interactive lecture and discussion.
Lots of exercises and practice.
Hands-on implementation in a live-lab environment.

Course Customization Options

To request a customized training for this course, please contact us to arrange.

Bedankt voor uw aanvraag! Een van onze medewerkers neemt binnenkort contact met u op

Bedankt voor uw boeking! Een van onze medewerkers neemt binnenkort contact met u op.

Cursusaanbod

Introduction & Course Orientation

Course objectives, expected outcomes, and lab environment setup
High-level EDR architecture and OpenEDR components
Review of MITRE ATT&CK framework and threat-hunting fundamentals

OpenEDR Deployment & Telemetry Collection

Installing and configuring OpenEDR agents on Windows endpoints
Server components, data ingestion pipelines, and storage considerations
Configuring telemetry sources, event normalization, and enrichment

Understanding Endpoint Telemetry & Event Modeling

Key endpoint event types, fields, and how they map to ATT&CK techniques
Event filtering, correlation strategies, and noise reduction techniques
Creating reliable detection signals from low-fidelity telemetry

Mapping Detections to MITRE ATT&CK

Translating telemetry into ATT&CK technique coverage and detection gaps
Using ATT&CK Navigator and documenting mapping decisions
Prioritizing techniques for hunting based on risk and telemetry availability

Threat Hunting Methodologies

Hypothesis-driven hunting vs indicator-led investigations
Hunt playbook development and iterative discovery workflows
Hands-on hunting labs: identifying lateral movement, persistence, and privilege escalation patterns

Detection Engineering & Tuning

Designing detection rules using event correlation and behavioral baselines
Rule-testing, tuning to reduce false positives, and measuring effectiveness
Creating signatures and analytic content for reuse across the environment

Incident Response & Root Cause Analysis with OpenEDR

Using OpenEDR to triage alerts, investigate incidents, and timeline attacks
Forensic artifact collection, evidence preservation, and chain-of-custody considerations
Integrating findings into IR playbooks and remediation workflows

Automation, Orchestration & Integration

Automating routine hunts and alert enrichment using scripts and connectors
Integrating OpenEDR with SIEM, SOAR, and threat intelligence platforms
Scaling telemetry, retention, and operational considerations for enterprise deployments

Advanced Use Cases & Red Team Collaboration

Simulating adversary behavior for validation: purple-team exercises and ATT&CK-based emulation
Case studies: real-world hunts and post-incident analyses
Designing continuous improvement cycles for detection coverage

Capstone Lab & Presentations

Guided capstone: full hunt from hypothesis through containment and root cause analysis using lab scenarios
Participant presentations of findings and recommended mitigations
Course wrap-up, materials distribution, and recommended next steps

Vereisten

An understanding of endpoint security fundamentals
Experience with log analysis and basic Linux/Windows administration
Familiarity with common attack techniques and incident response concepts

Audience

Security operations center (SOC) analysts
Threat hunters and incident responders
Security engineers responsible for detection engineering and telemetry

21 Uren

Leveringsopties

PRIVÉGROEPSTRAINING

Onze identiteit draait om het leveren van precies wat onze klanten nodig hebben.

Pre-cursusgesprek met uw trainer
Aanpassing van de leerervaring om uw doelen te bereiken -

Op maat gemaakte overzichten
Praktische, praktische oefeningen met gegevens / scenario's die herkenbaar zijn voor de cursisten

Training gepland op een datum naar keuze
Gegeven online, op locatie/klaslokaal of hybride door experts die ervaring uit de echte wereld delen

Private Group Prices RRP from €6840 online delivery, based on a group of 2 delegates, €2160 per additional delegate (excludes any certification / exam costs). We recommend a maximum group size of 12 for most learning events.

Neem contact met ons op voor een exacte offerte en om onze laatste promoties te horen

OPENBARE TRAINING

Kijk op onze public courses

Hulp nodig bij het kiezen van de juiste cursus?

Reviews (4)

De trainer was zeer goed geïnformeerd en nam de tijd om een zeer goed inzicht te geven in cyberbeveiligingskwesties. Veel van deze voorbeelden kunnen worden gebruikt of aangepast voor onze leerlingen en een aantal zeer boeiende lesactiviteiten creëren.

Jenna - Merthyr College

Cursus - Fundamentals of Corporate Cyber Warfare

Automatisch vertaald

Pentestervaardigheden die de leraar demonstreren

Oleksii Adamovych - EY GLOBAL SERVICES (POLAND) SP Z O O

Cursus - Ethical Hacker

Automatisch vertaald

De instructeur heeft een zeer breed scala aan kennis en is toegewijd aan wat hij doet. Hij is in staat om de luisteraar te interesseren met zijn cursus. De omvang van de training voldeed volledig aan mijn verwachtingen.

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting Training Cursus

Cursusaanbod

Vereisten

Leveringsopties

PRIVÉGROEPSTRAINING

OPENBARE TRAINING

Reviews (4)

Jenna - Merthyr College

Cursus - Fundamentals of Corporate Cyber Warfare

Oleksii Adamovych - EY GLOBAL SERVICES (POLAND) SP Z O O

Cursus - Ethical Hacker

Karolina Pfajfer - EY GLOBAL SERVICES (POLAND) SP Z O O

Cursus - MasterClass Certified Ethical Hacker Program

Manar Abu Talib - Dubai Electronic Security Center

Cursus - MITRE ATT&CK

Voorlopige Aankomende Cursussen

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

Gerelateerde categorieën

Deze site in andere landen/regio's

Europe

Asia Pacific

North America

South America

Africa / Middle East

Other sites

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting Training Cursus

Cursusaanbod

Vereisten

Leveringsopties

PRIVÉGROEPSTRAINING

OPENBARE TRAINING

Reviews (4)

Jenna - Merthyr College

Cursus - Fundamentals of Corporate Cyber Warfare

Oleksii Adamovych - EY GLOBAL SERVICES (POLAND) SP Z O O

Cursus - Ethical Hacker

Karolina Pfajfer - EY GLOBAL SERVICES (POLAND) SP Z O O

Cursus - MasterClass Certified Ethical Hacker Program

Manar Abu Talib - Dubai Electronic Security Center

Cursus - MITRE ATT&CK

Voorlopige Aankomende Cursussen

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

Mastering Open-Source EDR & Mitre ATT&CK for Threat Hunting

Gerelateerde cursussen

AI-Aangedreven Cyberbeveiliging: Bedreigingsdetectie en Reactie

AI-Gestuurde Cyberbeveiliging: Geavanceerde Bedreigingsdetectie & Respons

Cyber Defence (SOC) Analyst Fundamenten

CHFI - Gecertificeerde Digitaal Forensisch Onderzoeker

Meester worden in Continuous Threat Exposure Management (CTEM)

Cyber Emergency Response Team (CERT)

Cyber Threat Intelligence

Fundamentals of Corporate Cyber Warfare

Digitaal Onderzoek - Geavanceerd

Ethical Hacker

Het doel van de Ethical Hacking Training is:

Audiëntie:

Certified Lead Ethical Hacker

Waarom zou u moeten deelnemen?

Waarvoor is het bedoeld?

Begrip en Beheer van de Bedreiging van Malware

MasterClass Certified Ethical Hacker Program

Vakbeschrijving

Voor wie

Over de Certified Ethical Hacker Master

Over de Certified Ethical Hacker Praktijk

Over CPENT

Over CHFI

MITRE ATT&CK

Social Engineering

Gerelateerde categorieën

Threat Detection and Response (TDR)

Deze site in andere landen/regio's

Europe

Asia Pacific

North America

South America

Africa / Middle East

Other sites