Threat Hunting and Detection Engineering Certification

Issued by MAD20

This badge holder knows how to utilize knowledge of adversary TTPs as described in the MITRE ATT&CK framework to develop, test, tune, and employ robust analytics to detect and investigate malicious cyber activity. Learners who successfully took this course have learned how to leverage ATT&CK to develop hypotheses, determine data collection requirements, identify and mitigate collection gaps, test and tune analytics using purple-teaming, and conduct a threat-informed hunt.

Type Certification
Level Intermediate
Time Weeks
Cost Paid

Additional Details

Skills

Earning Criteria

This credential verifies an ability to demonstrate foundational knowledge that supports the execution of a six-step TTP-based hunting methodology. Badge holders can apply an understanding of the ATT&CK Framework and adversarial behaviors of interest, and possess the ability to articulate hunt-directing hypotheses that inform the development of written analytics that drive information needs and data collection requirements.