Cybersecurity EngineerIntermediate6 modules~3.0 hours hands-on3 learning modes
Detection Engineering & Incident Response
Design privacy-aware security events, write behavior detections, triage evidence, contain incidents, recover safely, and learn from timelines.
// What you'll be able to do- Record decisions and context without collecting secrets
- Behavior hypotheses become testable rules
- Preserve evidence while reducing harm
- Restore safely and turn the incident into system improvement
6 modules, built to run
Every module ships runnable code. Expand any one to see what's inside.
00IntroductionResponse is a risk-management capability, not a panic checklist30 min
Objective — Response is a risk-management capability, not a panic checklist
Start moduleFree preview
01Security Events & TelemetryRecord decisions and context without collecting secrets30 min
Objective — Record decisions and context without collecting secrets
02Detection EngineeringBehavior hypotheses become testable rules30 min
Objective — Behavior hypotheses become testable rules
03Triage & ContainmentPreserve evidence while reducing harm30 min
Objective — Preserve evidence while reducing harm
04Recovery & LearningRestore safely and turn the incident into system improvement30 min
Objective — Restore safely and turn the incident into system improvement
05Pattern SynthesisBuild and verify a local detector and timeline30 min
Objective — Build and verify a local detector and timeline
Ready to start Detection Engineering & Incident Response?
Start with the free Module 0, then unlock the full course on a Pro plan.