We’re an information security practitioner-focused company dedicated to providing impactful, high quality training and education. Founded by @chrissanders88.
- Tweets 662
- Following 7
- Followers 3,513
- Likes 164
ALT Adam wrote, "Investigation Theory is very valuable for analysts of all levels. Some of the best training I've had. It was refreshing to see the dedication put into this training. It has solidified some concepts and introduced new ones."
ALT Reviewing disk artifacts representing timestomped files modified by an adversary.
ALT Evelyne Diaz Araque wrote, "I loved this course. I had a very decent familiarity with YARA already, but this course offered such a rigorous, robust, and comprehensive dive into what YARA is and how it can be leveraged. I will totally recommend it to my colleagues. "
ALT Jacob Small wrote, "I always recommend AND because the goal is to teach you 'how to think' rather than be a brain dump of information. This course is no exception and will be a great platform to build off of for the aspiring threat hunter."
ALT An analyst wrote, "Because of Investigation Theory, I feel I am able to approach new investigation opportunities with an open mind, and I am able to break down my thought processes and get my head clearly around issues that I would have otherwise been overwhelmed by with a lack of structure."
ALT Examining audit logs from a shell configuration hijacking attempt.
ALT Nikhil Sanjay Patil wrote, "I had no clue how to go and hunt for anomalies in the network, so I wanted a starting point to start threat hunting and not blindly dig into logs, getting overwhelmed. If you want to begin with threat hunting, this course provides a structured way to do that."
ALT Matthew wrote, "I learned most about the habit of asking good and specific questions, which helped me to narrow down my options and be more methodical in my investigative process. I formerly and still will check everything, which can be inefficient. I also loved the fact that different evidence sources were introduced and I was given multiple ways to practice those skills!”
ALT Leo wrote, "What surprised me was how easy this course was to understand and follow. Im a career changer, so the fact that I understood most of the content is a great sign."
ALT Reviewing mailbox logs in Kusto Explorer to find malicious forwarding rules.
ALT Leonardo Armesto wrote, “Detection Engineering with Sigma is like learning a 'universal translator' for security alerts. The course shows you how to write a detection rule once and apply it to almost any security system.”
ALT A student wrote, "I thought this course was excellently taught in a digestible and straightforward way as someone who has no experience as an analyst."
ALT A student wrote, "I bought this course for the focus on how to organize hunting and describing hunting on a conceptual level, in contrast with a lot of other courses that cover the forensic analysis in depth but do not give context and motivation. It is an excellent introduction to the fundamental concepts of threat hunting.”
ALT Reviewing Windows logs showing evidence of WMI-based persistence (focus on the highlighted part of the image).
ALT "I not only wanted to learn about YARA (e.g., learning a language and syntax), but I wanted to learn more about malware and adversary tradecraft. I think this course did a wonderful job of covering that material."
ALT Jens wrote, "Investigation Theory provides new perspectives and give you a toolbox to improve your current investigation process."