Microsoft
Sentinel
Connect sources, write KQL, normalize logs, engineer detections and automate with Logic Apps.
Your environment.
Ready to engineer.
A prepared live lab for the Advanced Security Engineering & AI Security programme. Work across five enterprise platforms with 24/7 access and guided practice from day one.
Inside the environment
Microsoft & CrowdStrike.
Side by side.
Microsoft
Defender for Endpoint
Investigate device timelines and process trees, use Live Response and contain devices.
Microsoft
Defender XDR
Investigate unified incidents and hunt across endpoint, identity, email and cloud apps.
CrowdStrike
Falcon EDR
Triage detections, contain hosts and remediate with Real Time Response.
CrowdStrike
Falcon Next-Gen SIEM
Onboard and parse data, query with CQL, correlate events and automate with Falcon Fusion.
Learn through practice
The same threat.
Different perspectives.
Realistic simulations
Investigate phishing, credential abuse, malicious PowerShell, ransomware behaviour and data exfiltration in controlled lab scenarios.
Guided and independent practice
Complete guided exercises after each session, then use challenge labs to extend your investigation and engineering skills.
AI security in context
Practise assessing a sample LLM application, detecting prompt injection and validating AI-assisted investigation results.
Confirm the cohort’s lab access period, technical requirements, usage terms and support before enrolment.
YOUR NEXT STEPBuild the skills.
Build the skills.
Show the work.
Tell us your background. Get the next cohort dates, fees and lab access terms from the Academy team.
Ask about the next cohort · WhatsApp
Prefer to call? 080 74426200
Practical learning in another domain?
For AI, DSA, IoT and other programmes, discuss the exercises, software, hardware and access included in your specific training plan.