APT Campaigns

The volt Typhoon group is seeking to pre-position itself in IT and OT networks for disruptive or destructive cyberattacks against critical infrastructure. With these courses and labs you'll first get hands-on with the tactics, techniques and procedures used by Volt Typhoon as they carried out reconnaissance of networks and devices, dumped credentials from domain controllers, and covered their tracks by removing indicators of compromise. Next you'll learn the practical skills needed to detect and block these activities, and apply tools to catch the attacks in progress. Finally, you'll gain knowledge to implement controls to reduce the risk of these attacks taking place in your own environment.

Sandworm is a highly sophisticated and persistent Advanced Persistent Threat (APT) group linked to Russian military intelligence (GRU). Active since at least 2009, it has been responsible for several major cyberattacks, particularly targeting Ukraine, NATO members, and other global entities. With these courses and labs you'll first get hands-on with the tactics, techniques and procedures used by Sandworm. Next, you'll learn the practical skills needed to detect and block these activities, and apply tools to catch the attacks in progress. Finally, you'll gain knowledge to implement controls to reduce the risk of these attacks taking place in your own environment.