Cyber Kill Chain Workshop

01 — Overview

Course Overview

Deep dive into how attackers operate from initial reconnaissance through data exfiltration. Students learn to identify and disrupt each phase of the attack chain using real-world scenarios based on actual operations.

This workshop includes hands-on labs where students defend against simulated advanced persistent threats, learning to recognize attacker behavior patterns and implement effective countermeasures.

Course Details

• Duration: 3-5 days
• Format: Hybrid classroom & hands-on labs
• Audience: Security teams, SOCSecurity Operations Center analysts, incident responders
• Prerequisites: Basic understanding of network security and incident response

02 — Curriculum

What You'll Learn

• Reconnaissance — How attackers gather information about your organization
• Weaponization — Understanding attack payloads and delivery mechanisms
• Delivery — Identifying attack vectors and entry points
• Exploitation — Recognizing and preventing system compromises
• Installation — Detecting persistent access mechanisms
• Command & Control — Identifying and disrupting C2Command and Control communications
• Actions on Objectives — Preventing data exfiltration and damage