Master the essentials of threat hunting: Protect your network

OffSec Learning Path: Threat Hunting Essentials

In today's complex threat landscape, reactive security is no longer enough. This hands-on Learning Path will equip you with the essential skills to proactively hunt down and neutralize adversaries. Learn to:

Deep dive into the tactics, techniques, and procedures (TTPs) of ransomware groups, APTs, and other threat actors
Conduct meticulous network and endpoint forensic analysis to uncover hidden threats
Develop custom hunting strategies that go beyond relying on traditional Indicators of Compromise (IoCs)

Get Started

Hero image for Master the essentials of threat hunting: Protect your network

Start Threat Hunting with OffSec

Our TH-200: Foundational Threat Hunting course launches September 10th! Fill out the form to learn more about this exciting opportunity to develop your threat hunting skills, strengthen organizational security posture, and proactively mitigate attacks.

Track down elusive attacks

This Learning Path will equip you with the fundamental skills needed to protect your organization's critical assets. You'll learn to identify and investigate threats, uncover potential attack techniques, and proactively improve your security posture by addressing vulnerabilities.

Who is this Learning Path for?

Aspiring threat hunters seeking foundational skills
Security analysts looking to advance their threat detection capabilities
SOC team members aiming to master proactive threat identification

Learning objectives

Dissect the goals, techniques, and tools of common threat actors, including ransomware groups and APTs
Analyze network traffic and endpoint data to pinpoint malicious activity
Understand methodologies, investigative processes, and the threat hunting mindset
Master communication and reporting skills for efficient threat intelligence sharing

Key modules in the Threat Hunting Essentials Learning Path

Threat Hunting Concepts and Practices

This modules provides an overview of the basic objectives, concepts and practices of threat hunting. It covers how enterprises implement threat hunting and the different stages and types of threat hunts.

Threat Actor Landscape Overview

This module provides an overview of different types of threat actors with an emphasis on ransomware actors and Advanced Persistent Threats (APTs). It includes a number of more in-depth discussions of well-known threat actors.

Communication and Reporting for Threat Hunters

This module introduces the way in which threat hunters receive and use trheat intelligence, and create threat reports. It covers the concept of the Traffic Light Protocol but does not cover IoCs.

Hunting With Network Data

This module explores using Network Indicators of Compromise (IoCs) for proactive threat hunting. It highlights the role of Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS), like Suricata, in monitoring for suspicious activities. Practical methods to identify signs of compromise in networks are covered, followed by hands-on exercises to develop threat detection skills.

Hunting on Endpoints

This module provides an introduction to threat hunting utilizing Endpoint IoCs. It covers intelligence-based and hypothesis-based threat hunting as well as considerations that improve the effectiveness of a hunt.

View full syllabus

Threat Hunting Essentials overview

modules

40+

hours of content (approx.)

11+

skills

Earning an OffSec Learning Badge

Showcase your growing Threat Hunting expertise! Upon completing 80% of the Threat Hunting Essentials Learning Path, you'll receive an exclusive OffSec badge signifying:

Threat hunting proficiency: Demonstrate your fundamental knowledge and practical skills
Industry recognition: Add a powerful OffSec credential to your skillset
Real-world readiness: Prove your ability to defend against threats

Why train your team with OffSec?

Actionable skills

Practice in realistic lab environments

Comprehensive approach

Learn the full threat hunting spectrum

Attacker mindset

Anticipate adversary moves by understanding their TTPs

Start learning with OffSec

All
access

Learn
Unlimited

$5,799/year

Unlimited OffSec Learning Library access plus unlimited exam attempts for one year.

Large teams

Learn
Enterprise

Get a quote

Flexible terms and volume discounts available.

Learn Unlimited provides individuals and organizations with unlimited access to the OffSec Learning Library. This includes all courses, content and learning paths. Learners also receive unlimited exam attempts and time in any of our hands-on lab environments.

What’s included

1 year of access to unlimited courses & content

Unlimited exam attempts during your subscription

365 days of lab access

1 year of unlimited access to all fundamental content and OffSec curated Learning Paths

PEN-103 + unlimited KLCP exam attempts

PEN-210 + unlimited OSWP exam attempts

Proving Grounds Practice labs

3 downloads of course material

FAQ

Syllabus

Introduction to Threat Hunting
Understanding Threat Actors
Communication and Reporting for Threat Hunters
Hunting With Network Data
Hunting on Endpoints
Threat Hunting Without IoCs

What prerequisites are necessary for this Learning Path?

What skills will I develop?

Is this Learning Path suitable for beginners?

How is OffSec's Threat Hunter training different?

Start your journey today

Team

Ideal for

Fewer than 10 learners

Buy now

Have questions? Contact sales

Organization