Module 01
The APT lifecycle
Access, foothold, persistence, escalation, lateral movement and objective execution — and why each stage leaves traces.
Home / Training / Advanced Persistent Threat
APT certification
Advanced Persistent Threat
A certification covering how persistent adversaries operate, and how to detect and evict them.
Understanding the adversary that stays.
Who it is for
SOC analysts, incident responders, threat intelligence staff and infrastructure teams.
Modules
At a glance
| Code | APT |
| Format | Instructor-led, scenario-driven |
| Assessment | Practical exercise and written report |
| Delivery | Private cohort or scheduled open cohort |
| Prerequisite | None, though security experience helps |
Module 02
Living off the land
Adversaries abusing legitimate tools and credentials, and why signature-based detection misses it.
Module 03
Command and control
Common C2 patterns, beaconing behaviour and infrastructure reuse.
Module 04
Detection engineering
Turning adversary behaviour into detections, and testing whether they actually fire.
Module 05
Hunt and eviction
Hypothesis-driven hunting, scoping an intrusion, and confirming an adversary is gone rather than quiet.
Authorisation is part of the curriculum. These techniques are legal only when applied with written permission against systems and people you are authorised to test. Every module that covers technique also covers the boundary — scope, consent, data handling and the point at which the work would become unlawful. We do not teach techniques for use outside an authorised engagement.
Enquire about APT.
Tell us how many participants and whether you want an open or private cohort. We will send dates and the full syllabus.