Course Description

Cyberattacks have become increasingly sophisticated, leaving behind complex traces across endpoints, networks, logs, and compromised systems. In this intensive 3-day course, we will explore how cyber attacks unfold, how adversaries establish and maintain access, and how security professionals can investigate incidents to determine what happened, how it happened, and what systems were affected.

Through hands-on investigations and realistic attack scenarios, you'll develop the skills needed to analyze digital evidence, identify indicators of compromise, reconstruct attacker activity, and trace an intrusion from initial access to persistence and lateral movement. You'll learn how to approach an investigation methodically, correlate evidence from multiple sources, and uncover the techniques adversaries use to operate inside compromised environments.

Course curriculum

    1. Introduction to Investigating a Cyber Attack

    2. Types of Cyber Attacks

    3. Cyber Kill Chain

    4. The Digital Forensic Process

    5. Evidence Integrity

    6. PICERL

    7. MetroNews Lab Part I

    8. MetroNews Lab Part II

    9. MetroNews Lab Part III

    10. MetroNews Lab Part IV

    1. Using MITRE in an Investigation

    2. Log Sources and more

    3. Aegis Dominion Lab Part I

    4. Aegis Dominion Lab Part II

    5. Aegis Dominion Lab Part III

    6. Aegis Dominion Lab Part IV

    7. Aegis Dominion Lab Part V

    8. NOVA7 Lab Part I

    9. NOVA7 Lab Part II

    1. Memory Forensics and more

    2. Disk Forensics and more

    3. HeliosGrid Lab Part I

    4. HeliosGrid Lab Part II

    5. HeliosGrid Lab Part III

    6. HeliosGrid Lab Part IV

    7. Writing the incident Report

    1. MetroNews Lab: Web compromise and defacement

    2. Aegis Dominion Lab: Data exfiltration and attribution

    3. NOVA7 Lab: Intrusion, lateral movement, and C2 (SOC investigation)

    4. HeliosGrid Lab: Ransomware simulation and recovery

    1. Slides

    2. Investigating a Cyber Attack: Student Lab Guide

About this course

  • 32 lessons
  • 7.5 hours of video content

Reviews

5 star rating

Simply Awesome

Swaroop Landge

Well, I cannot express in words as to how OTW makes it simple to understand complex Cyber-security concepts to newbies in the field.

Well, I cannot express in words as to how OTW makes it simple to understand complex Cyber-security concepts to newbies in the field.

Read Less
5 star rating

Just wow!

Gonzalo Flain

As I said in the welcome, I come from a course that was intended to be just another line on the participants' CV, so I am amazed by the amount of technical and detailed information provided in these courses, from the beginning we start in a practi...

Read More

As I said in the welcome, I come from a course that was intended to be just another line on the participants' CV, so I am amazed by the amount of technical and detailed information provided in these courses, from the beginning we start in a practical way and leaves no doubt in the students. I recommend 100%

Read Less
5 star rating

Good course about an important topic.

th1s m4dn3ss

I enjoyed this course a lot as it was very practical and well-explained. I think it should be extended to a 3-day class, though, due to its importance.

I enjoyed this course a lot as it was very practical and well-explained. I think it should be extended to a 3-day class, though, due to its importance.

Read Less
5 star rating

Great Course

William Hoff

I would recommend this course for anyone who wants to think twice about what information is known about you on the internet ,and how to be as discreet as possible.

I would recommend this course for anyone who wants to think twice about what information is known about you on the internet ,and how to be as discreet as possible.

Read Less
5 star rating

10/10

eran ali

4 star rating

Eye Opening Content

Mark Andrews

The Pros - Quality of the content - Presented with a real world manner - Sometimes applications do not run to plan but you get to learn on the fly workarounds and fixes (partially due to bandwidth)

The Pros - Quality of the content - Presented with a real world manner - Sometimes applications do not run to plan but you get to learn on the fly workarounds and fixes (partially due to bandwidth)

Read Less
5 star rating

Remaining Anonymous

Louise Desrosiers

Master OTW never disappoints!! Version 2 is incredible. For the Future, it would be amazing to have a class that goes even deeper into Creating a New Persona.

Master OTW never disappoints!! Version 2 is incredible. For the Future, it would be amazing to have a class that goes even deeper into Creating a New Persona.

Read Less
4 star rating

Good Tutorial

Desmond N Drummond

I appreciate the practicality and real-world demonstration of the techniques.

I appreciate the practicality and real-world demonstration of the techniques.

Read Less
5 star rating

good

joris n

very informative

very informative

Read Less
5 star rating

Remaining Anonymous V2

Jules Winnfield

Really enjoyed the content of this course, OTW is such a relatable guy.

Really enjoyed the content of this course, OTW is such a relatable guy.

Read Less
5 star rating

Remaining Anonymous 2

Peter Melendez

Very well put together, Master OTW covers several techniques that will improve your Opsec.

Very well put together, Master OTW covers several techniques that will improve your Opsec.

Read Less
5 star rating

Remaining Anonmous

02.kit.surname 02.kit.surname

Excellent course! As always love the fact that you are delivering the content personally and not subbing to an alternate presenter. Mastery courses should be taught by the Master, even for the basics, thank you for the time you (and your team) tak...

Read More

Excellent course! As always love the fact that you are delivering the content personally and not subbing to an alternate presenter. Mastery courses should be taught by the Master, even for the basics, thank you for the time you (and your team) take to make it great, even when you have the option to hand it off. We all appreciate it, thank you! I also appreciate the bundle offerings, they got me back into what I love and you all have a great product at a great price, keep it coming. P.S. If you ever decide to offer a course setting up a Pine, Librem5 or even loading Ubuntu touch on a compatible device as a "burner" I'll be sure to attend. I have a Librem5 (USA) and while quirky it does have a lot of potential and cannot wait to explore some OTW best practices. Maybe that's in the next module(s) but if not I hope you consider it. Happy Holidays!!

Read Less