Threat Hunting and Detection Engineering (Advanced) (Self-Paced)
Stop hunting by instinct. Build the same work into a program that can be repeated, measured and defended — on open, published standards, not a vendor's proprietary framework.
Stop hunting by instinct. Build the same work into a program that can be repeated, measured and defended — on open, published standards, not a vendor's proprietary framework.
This course is self-paced. For live online or in-person instruction, take Threat Hunting and Detection Engineering (Advanced).
You already hunt. You already write detections. What you may not yet have is a program around that work solid enough to survive an audit, a leadership review or a change of staff — and that is precisely what this self-paced course sets out to give you. It covers a hunting methodology you can run again and get comparable results from, analytic techniques that blunt the cognitive biases every hunter carries, and the detection engineering lifecycle end to end, from the requirement that prompts a rule to the decision to retire it. Running alongside all of it are the validation and measurement habits that let you demonstrate risk actually falling, instead of asserting it.
The distinguishing feature is where the methodology comes from. Most training in this space hands you a vendor's proprietary model; here the hunt process is assembled from NIST SP 800-53 RA-10 (Threat Hunting), the Detect outcomes in NIST CSF 2.0, and the Diamond Model of Intrusion Analysis. Validation leans on NIST SP 800-115 alongside the 2024 SP 800-55 measurement guidance, and ATT&CK mapping follows CISA's own guide and its Decider tool. Every piece traces back to a citable public standard that a buyer can go and check, which almost nothing else in this market can claim.
Learn the concepts and skills covered in this course or your tuition is on us. See details and terms & conditions.
Work on projects proven to boost retention
Refined over many cohorts for an optimal learning experience
The teaching method at Noble Desktop is perfect and the classes provide you with infinite knowledge that makes you eager to take everything they offer. I love Noble!
—Ivonne Ackerman
Experienced educators who are driven to help you succeed
Refresh the materials for free within one year
Upon completion of this course, you’ll receive an official certificate testifying to your mastery of the curriculum. We’ll send you a link where you can download your certificate, share it online with your friends, post it to your professional network on LinkedIn, and view all your earned certificates. Congratulations on your achievement!
Shareable on
Foundations for Advanced Threat Hunting
A Government-Grounded Threat Hunting Methodology
Advanced Hunting Concepts
The Detection Engineering Lifecycle
Validation and Metrics
Program Governance and Synthesis
Capstone Project
Final Assessment
Aimed at Tier II and Tier III SOC analysts, threat hunters, detection engineers, and security engineers who live in a SIEM and an EDR console every day. Deliberately not a starting point for someone new to security operations.
Yes, this course is open to beginners. Students must be comfortable using a computer. No other prior knowledge is required.
This course does not qualify for payment plans or student financing. See our Payment Plan FAQ to find related programs that qualify.
This course is available for 365 days. You can choose when to start your access period. Once you activate, you will have 365 days to complete it (access the course materials, quizzes, projects and videos). You may request one extension of seven (7) days. Other extension requests will be evaluated on a case-by-case basis. Videos are not downloadable.
For this course, you are entitled to a 90% refund (your payment less the nonrefundable 10% registration fee) within 30 days of purchase if you have not accessed the course materials.
There are no extra fees or taxes for our courses. The price you see on this page is the maximum you’ll pay us.
We don’t currently offer discounts as we do our best to affordably prices our courses.
These related courses share skills and topics with Threat Hunting and Detection Engineering (Advanced) (Self-Paced). Select up to two and tap Compare selected courses to view a side-by-side comparison.
Get a comprehensive understanding of computer communication and security systems, including network models, authentication, authorization, admin roles, foundational cybersecurity concepts, Linux, Python, and networking protocols.
Take Intro to Cybersecurity & Networks first if you're new to the field -- this course assumes daily hands-on experience with a SIEM and an EDR platform.
Discover the inner workings of a Security Operations Center (SOC) and learn how to protect an organization's critical assets from various threats in this comprehensive course. Gain insights into security monitoring and logging, incident response, and the role of a SOC Analyst in preventing data loss.
Choose Digital Forensics if you want SOC fundamentals and incident response basics rather than an advanced hunting methodology.
Eight hours of self-paced AI security monitoring and incident response: the four monitoring categories, a signals table that maps what you observe to what it means, and the containment actions specific to AI systems.
Pair this with AI Security Monitoring and Incident Response if your environment includes AI systems alongside traditional infrastructure.
Start your cybersecurity career and prepare for a new job in a growing field. Learn the skills for cybersecurity roles like Engineer and Analyst, and gain in-demand technical skills including Python programming, computer networking, Linux, and cloud computing in AWS.
Choose the Cybersecurity Bootcamp if you want the full career-prep path rather than this advanced, specialized course.
Purchase group class vouchers at a discount for our regularly-scheduled group classes, or create a custom training program at your offices.
We’ve trained thousands of companies!
Let us create the perfect program for your team.
The first installment is due one week before the first class. Subsequent installments are spread out evenly across the duration of the course.
| Installments | |
|---|---|
| 10% non-refundable deposit | |
| $1,049.00 | Total You Pay |
See the Installment plan FAQ for more information.