Learn proactive threat hunting fundamentals: hypothesis-driven detection, log analysis, and adversary behavior mapping with MITRE ATT&CK.
14-day money-back guarantee · No subscription · Lifetime access
Preview the student experience
No login · Free interactive demo
1
Guided lab
Isolated VM environment
10h
Of content
Labs + practice + exams + simulations
4
Modules
Progressive difficulty
2–4h
Per lab session
Unlimited restarts
What's includedLab tools you will use
Beginner courses assume no security background: every step is guided. You do need basic computer literacy, listed under Requirements. Intermediate courses assume the matching Beginner course or equivalent experience.
Each lab session opens a 2–4 hour maximum VM session window. You can restart it as many times as you need — unlimited restarts are included with your purchase.
Yes. Unlimited restarts are included with your purchase. Practice as much as you want.
Yes, once you meet three conditions: every lesson completed, every lab completed, and your final report graded 75/100 or higher by an instructor. Resubmissions are unlimited. Each certificate has a public ID anyone can verify.
4 modules · 10h of content
Each phase maps to a module in this course. Scroll to see how the curriculum builds, module by module.
Module 1
BeginnerModule 2
BeginnerModule 3
BeginnerModule 4
BeginnerReceive real endpoint and network telemetry from a compromised environment and identify adversary activity using Splunk, Sigma rules, and MITRE ATT&CK mapping. The lab automatically validates each finding.
Complete answers about this course, labs, certificates, and refunds
Beginner courses assume no security background: every step is guided. You do need basic computer literacy, listed under Requirements. Intermediate courses assume the matching Beginner course or equivalent experience.
Each lab session opens a 2–4 hour maximum VM session window. You can restart it as many times as you need — unlimited restarts are included with your purchase.
Yes. Unlimited restarts are included with your purchase. Practice as much as you want.
Yes, once you meet three conditions: every lesson completed, every lab completed, and your final report graded 75/100 or higher by an instructor. Resubmissions are unlimited. Each certificate has a public ID anyone can verify.
Yes. 14-day money-back if lesson progress is below 20% and you have not completed the HTK certificate path (all lessons + labs) for that course. Details in our Refund Policy.
Yes. Once purchased, you have permanent access to all course materials and future updates.
Yes. All professional tools come pre-installed and configured in the VM, no local setup needed.
Most students complete the course in 2–4 weeks studying part-time. You set your own pace.
You've covered the fundamentals. Threat Hunting Intermediate builds on this course with more complex real-world scenarios, higher-difficulty labs, and advanced analysis workflow.
Get hands-on with real Threat Hunting scenarios, professional-grade tools, and validated flag objectives.
