Masterclass: PowerShell for Digital Investigation & Threat Hunting
This advanced course equips cybersecurity professionals with the skills to detect, investigate, and respond to modern threats using native Windows tools and PowerShell. With a strong focus on real-world attacker behaviors, participants will learn to identify Advanced Persistent Threats (APTs), analyze attack timelines, and uncover hidden or deleted artifacts using forensic techniques.
PowerShell is used throughout the course as both a defensive and investigative tool, supporting artifact collection, process and network analysis, registry inspection, and script-based detection. Participants will explore common attacker techniques such as living-off-the-land binaries (LOLBins), scheduled tasks, and encoded payloads, and learn how to detect and counter them through logging, event analysis, and behavioral detection rules.
3 courses found
-
- Delivery Format: Virtual Learning
- Date 08-11 December, 2026 | 9:00 AM to 4:00 PM
- Location: Virtual (Arab Stand)
- Language: English
-
- Delivery Format: Virtual Learning
- Date 08-11 December, 2026 | 9:00 AM to 5:00 PM
- Location: Virtual (Arabian St)
- Language: English
-
- Delivery Format: Virtual Learning
- Date 08-11 December, 2026 | 9:00 AM to 4:00 PM
- Location: Virtual (Egypt Stan)
- Language: English
Request a date or location for this course