This course is coming soon — content and pricing shown below may change before launch.
Coming SoonBeginnerNetwork Security10h of content · 1 guided lab500 XP

Network Security Beginner

Analyze real network traffic, detect intrusions, and learn practical hardening with Wireshark, Nmap, and Suricata.

Not on sale yet. Leave your email and we will tell you the day Network Security Beginner opens — nothing else.

One email, only when it launches. No newsletter.

14-day money-back guarantee · No subscription · Lifetime access

Preview the student experience

No login · Free interactive demo

Try demo →

1

Guided lab

Isolated VM environment

10h

Of content

Labs + practice + exams + simulations

4

Modules

Progressive difficulty

2–4h

Per lab session

Unlimited restarts

HTKWhat's included
  • Full Beginner course (video lessons + written content)
  • 1-2 guided hands-on labs in an isolated VM
  • Per-module exams
  • HTK Beginner certificate
  • Lifetime access, unlimited lab restarts
  • Expert instructor reviews your reports & assignments
119159

One-time payment, no subscription

Notify me

Lab tools you will use

WiresharkNetworkNmapScannerSuricataIDS/IPSZeekNetworktcpdumpCaptureSnortIDS/IPSOpenVASScannerMetasploitExploitationWiresharkNetworkNmapScannerSuricataIDS/IPSZeekNetworktcpdumpCaptureSnortIDS/IPSOpenVASScannerMetasploitExploitation
Burp SuiteProxyNessusScannerSecurity OnionMonitoringWazuhSIEMntopngMonitoringNetworkMinerForensicsOSSECHIDSArgusFlow analysisBurp SuiteProxyNessusScannerSecurity OnionMonitoringWazuhSIEMntopngMonitoringNetworkMinerForensicsOSSECHIDSArgusFlow analysis

Before you start — quick answers

Not for beginner courses. They start from scratch with guided, step-by-step instructions.

Each lab session opens a 2–4 hour maximum VM session window. You can restart it as many times as you need — unlimited restarts are included with your purchase.

Yes. Unlimited restarts are included with your purchase. Practice as much as you want.

Yes. Your HTK certificate is issued upon completing the final lesson of the last module. Course progress is sequential — each lesson unlocks the next.

Course Syllabus

4 modules · 10h of content

Each phase maps to a module in this course. Scroll to see how the curriculum builds, module by module.

1

Module 1

Beginner

Network Fundamentals & Network Threats

  • OSI/TCP-IP model: security-relevant protocols (TCP, UDP, DNS, HTTP, TLS)
  • Network threat landscape: reconnaissance, lateral movement, C2, exfiltration
  • Essential tools: Wireshark, tcpdump, Nmap
  • Module theory exam
2

Module 2

Beginner

Network Capture Analysis with Wireshark

  • Display and capture filters: BPF syntax and Wireshark filters
  • TCP/UDP stream following: conversation reconstruction
  • Identifying scans, fuzzing, and exploitation patterns in pcap
  • Module exam
3

Module 3

Beginner

Intrusion Detection with Suricata & Zeek

  • NIDS architecture: rules, alerts, logs
  • Writing basic Suricata rules to detect known IOCs
  • Analyzing Zeek logs: conn.log, dns.log, http.log, ssl.log
  • Module exam
4

Module 4

Beginner

Hardening & Response + Certification Exam

  • Basic network hardening: segmentation, ACLs, least privilege
  • Building a network incident report: timeline, IOCs, recommendations
  • HTK final certification exam

What you will learn

  • Analyze real network captures (pcap) and reconstruct the full attack chain
  • Identify reconnaissance, exploitation, lateral movement, and C2 in network traffic
  • Write basic Suricata rules and read Zeek logs (conn, dns, http, ssl) to detect known IOCs
  • Use professional tools: Wireshark, tcpdump, Nmap, Suricata, Zeek
  • Apply basic network hardening (segmentation, ACLs, least privilege) and write an incident report

Hands-on Lab

Receive a pcap capture from a real network incident (reconnaissance + exploitation) and identify the attacker, compromised systems, and attack chain using Wireshark, Zeek, and Suricata. Flags validate each finding automatically.

1⬡ 1 guided lab
2–4hSession window
UnlimitedRestarts
AutoFlag validation
Experience a lab preview →

Requirements

  • ·Modern web browser
  • ·Stable internet connection
  • ·No local installation required
  • ·Basic technical English recommended

Frequently Asked Questions

Complete answers about this course, labs, certificates, and refunds

Not for beginner courses. They start from scratch with guided, step-by-step instructions.

Each lab session opens a 2–4 hour maximum VM session window. You can restart it as many times as you need — unlimited restarts are included with your purchase.

Yes. Unlimited restarts are included with your purchase. Practice as much as you want.

Yes. Your HTK certificate is issued upon completing the final lesson of the last module. Course progress is sequential — each lesson unlocks the next.

Yes. 14-day money-back if lesson progress is below 20% and you have not completed the HTK certificate path (all lessons + labs) for that course. Details in our Refund Policy.

Yes. Once purchased, you have permanent access to all course materials and future updates.

Yes. All professional tools come pre-installed and configured in the VM, no local setup needed.

Most students complete the course in 2–4 weeks studying part-time. You set your own pace.

Ready for the next level?

Network Security Intermediate

You've covered the fundamentals. Network Security Intermediate builds on this course with more complex real-world scenarios, higher-difficulty labs, and advanced analysis workflow.

12h of content2 guided labs159
View Intermediate Course →
Ready to level up?

Build real Network Security skills

Get hands-on with real Network Security scenarios, professional-grade tools, and validated flag objectives. No prior experience needed.

From119or 199 € for the complete path

Not on sale yet. Leave your email and we will tell you the day Network Security Beginner opens — nothing else.

One email, only when it launches. No newsletter.

One-time payment, no recurring chargesLifetime access, course updates included14-day money-back guarantee