Learning Paths are structured roadmaps designed to help you build the skills required for specific cybersecurity roles and topics. Each path includes carefully selected learning materials such as:
Courses
Labs
Alerts
Challenges
Quizzes
Simply follow the recommended order within the path to progressively develop your knowledge and practical skills.
Available Learning Paths
Current learning paths include:
Security Analyst
Incident Responder
Detection Engineer
Cloud Security Engineer
Information Security Specialist
DFIR (Digital Forensics & Incident Response)
SIEM Engineer
Malware Analyst
Threat Hunter
SOC Manager
You can also use the available filters in the Learning Paths section to discover the path that best matches your experience level and career goals.
Detection Engineering Learning Path
The Detection Engineering Learning Path is designed for learners who want to build the technical skills required for a Detection Engineering role.
Throughout this path, you will learn:
How to use threat detection tools such as SIEM, IDS/IPS, and endpoint detection solutions
How to understand and analyze modern cyber threats including ransomware, malware, and phishing attacks
Log analysis and interpretation techniques for identifying suspicious activity
How to create and implement custom detection signatures and rules
Incident response fundamentals including containment, eradication, and recovery
Network traffic analysis using packet capture and monitoring tools
Behavioral analytics and anomaly detection methods for identifying abnormal system activity
This path combines both theoretical knowledge and practical exercises to help learners develop real-world defensive security skills.
Path Link:
Detection Engineering Learning Path
Incident Responder Learning Path
The Incident Responder Learning Path focuses on the technical and investigative skills required for incident response and digital forensics roles.
Topics covered include:
Windows & Linux Incident Response
Hacked Web Server Analysis
Memory Analysis
Sysmon
Registry Forensics
Browser Forensics
Hunting Active Directory Attacks
Writing Security Incident Reports
Crisis Management
This path helps learners understand how to investigate, contain, and respond to security incidents effectively.
Path Link:
Incident Responder Learning Path
SOC Analyst Learning Path
The SOC Analyst Learning Path is designed to teach the core concepts and practical skills required for Security Operations Center (SOC) analysts.
Topics included in this path:
SOC Fundamentals
MITRE ATT&CK Framework
Cyber Kill Chain
Phishing Email Analysis
Detecting Web Attacks
Malware Analysis
Network Log Analysis
Security Products
Incident Management
Cyber Threat Intelligence
VirusTotal for SOC Analysts
Learners will gain experience with monitoring, detecting, analyzing, and responding to security threats in a SOC environment.
Path Link:
SOC Analyst Learning Path
Incident Responder Learning Path
The Incident Responder Learning Path focuses on the technical and investigative skills required for incident response and digital forensics roles.
Topics covered include:
Windows & Linux Incident Response
Hacked Web Server Analysis
Memory Analysis
Sysmon
Registry Forensics
Browser Forensics
Hunting Active Directory Attacks
Writing Security Incident Reports
Crisis Management
This path helps learners understand how to investigate, contain, and respond to security incidents effectively.
Detection Engineer Learning Path
The Detection Engineer Learning Path teaches learners how to create, optimize, and manage threat detections across security platforms and environments.
Topics include:
SIEM and detection technologies
Threat detection methodologies
Log analysis and correlation
Detection rule creation
Network traffic analysis
Behavioral analytics
Threat hunting concepts
Incident response workflows
This learning path is focused on developing practical detection engineering and defensive monitoring skills.
Cloud Security Engineer Learning Path
The Cloud Security Engineer Learning Path introduces cloud security concepts, configurations, monitoring, and protection strategies across cloud environments.
Learners will gain experience with:
Cloud infrastructure security
Identity and access management
Cloud monitoring and logging
Misconfiguration detection
Security best practices for cloud environments
Information Security Specialist Learning Path
This path focuses on broader cybersecurity concepts and defensive security practices used across enterprise environments.
Topics may include:
Security fundamentals
Risk management
Security operations
Vulnerability management
Security policies and procedures
Threat analysis and mitigation
DFIR Learning Path
The DFIR (Digital Forensics & Incident Response) Learning Path focuses on forensic investigations and incident handling procedures.
Learners will practice:
Evidence collection and analysis
Memory and disk forensics
Log investigation
Malware investigation
Incident containment and recovery
Reporting and documentation
SIEM Engineer Learning Path
The SIEM Engineer Learning Path focuses on managing and configuring SIEM platforms used for centralized monitoring and detection.
This includes:
SIEM architecture
Log ingestion and parsing
Alert tuning
Dashboard creation
Detection optimization
Malware Analyst Learning Path
The Malware Analyst Learning Path introduces learners to malware investigation and analysis techniques.
Topics include:
Static malware analysis
Dynamic malware analysis
Malware behavior analysis
Reverse engineering fundamentals
Indicators of compromise (IOCs)
Threat Hunter Learning Path
The Threat Hunter Learning Path teaches proactive threat hunting methodologies used to identify hidden threats within networks and systems.
Learners will work with:
Threat hunting workflows
Log and telemetry analysis
Behavioral analytics
IOC-based investigations
Advanced detection strategies
SOC Manager Learning Path
The SOC Manager Learning Path is designed for learners interested in leadership and operational management within Security Operations Centers.
Topics may include:
SOC operations management
Incident coordination
Team workflows
Reporting and metrics
Crisis handling and communication
Security process improvement