Filters
- Introductory courses
- Intelligence and attribution courses
- Incident response courses
- Malware analysis courses
- Advanced acquisition and testing techniques courses
- Workshops
- Training Packages
- Certifications
Introductory courses
- Introduction to Cyber Crime for ExecutivesIn-classroom (1 day) or virtual (1 day) instructor-led training.
- Building a Resilient Cyber Security ProgramIn-classroom (2 days) or virtual (3 days) instructor-led training.
- Fundamentals of Industrial Control Systems (ICS) SecurityIn-classroom (2 days) or virtual (3 days) instructor-led training.
- Fundamentals of Cyber SecurityIn-classroom (4 days) or virtual (5 days) instructor-led training.
Intelligence and attribution courses
- Introduction to Threat Intelligence and AttributionIn-classroom (1 day) or virtual (2 days) instructor-led training.
- Inside the Mind of an APTOn demand (14 hours).
- Cyber Intelligence FoundationsIn-classroom (3 days) or virtual (4 days) instructor-led training, or on demand.
- Intelligence Research I—ScopingOn demand (8 hours).
- Intelligence Research II—Open Source Intelligence (OSINT)On demand (16 hours).
- Cyber Intelligence ProductionOn demand (8 hours).
- Cyber Intelligence for Critical InfrastructureIn-classroom (2 days) or virtual (3 days) instructor-led training.
- Cyber Threat Intelligence Program Design PlaybookOn demand (6 hours).
- Protecting the Perimeter: Practical Network EnrichmentOn demand (8 hours).
- Artificial Intelligence (AI) Advantage: Elevating Cyber DefenseOn demand (8 hours).
Incident response courses
- Incident Response for ManagementIn-classroom (2 days) or virtual (3 days) instructor-led training.
- Windows Enterprise Incident ResponseIn-classroom (3 days) or virtual (4 days) instructor-led training.
- Linux Enterprise Incident ResponseIn-classroom (3 days) or virtual (4 days) instructor-led training.
- Combined Windows-Linux Enterprise Incident ResponseIn-classroom (5 days) instructor-led training.
- Advanced Enterprise Incident ResponseIn-classroom (5 days) instructor-led training.
- Network Traffic AnalysisIn-classroom (3 days), virtual (4 days) instructor-led training, and web-based training.
- Practical Threat HuntingIn-classroom (3 days) and virtual (4 days) instructor-led training.
- Incident Response in Google CloudIn-classroom (3 days) or virtual (4 days) instructor-led training.
- Threat Hunting with GoogleIn-classroom (2 days) or virtual (2 days) instructor-led training.
Malware analysis courses
Advanced acquisition and testing techniques courses
Workshops
Training Packages
Upcoming and on-demand courses
View our online, instructor-led courses that are coming soon and check out the on-demand courses available to you today. All courses can also be purchased using Expertise On Demand (EOD) units.
Learn more about Mandiant Expertise On Demand (EOD).
Upcoming public courses
Incident Response in Google Cloud
🗓 February 9–12, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Building a Resilient Cyber Security Program
🗓 February 16–18, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 4:00 PM–9:30 PM Singapore UTC+8
🗓 February 18–19, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 🕒 10:00 AM–6:00 PM (UTC-05:00) Eastern Time (US & Canada)
Incident Response for Management
🗓 February 18–20, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 February 23–26, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 February 23–26, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 4:00 PM–10:30 PM Singapore UTC+8
🗓 February 23–27, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 March 2–5, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Fundamentals of Industrial Control Systems (ICS) Security
🗓 March 9–11, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–1:30 PM Los Angeles UTC-7 • 3:00 PM–8:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 March 9–12, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 4:00 PM–10:30 PM Singapore UTC+8
🗓 March 16–19, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 3:00 PM–9:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 March 17–20, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8
🗓 April 13–16, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 April 13–16, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 April 13–17, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 April 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 April 20–23, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 April 20–23, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
Fundamentals of Industrial Control Systems (ICS) Security
🗓 April 27–29, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 3:00 PM–8:30 PM Singapore UTC+8
Building a Resilient Cyber Security Program
🗓 April 27–29, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–1:30 PM Los Angeles UTC-7 • 4:00 PM–9:30 PM London UTC+1
🗓 May 4–8, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Building a Resilient Cyber Security Program
🗓 May 5–7, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 APAC 🌣 🕒 8:00 AM–1:30 PM Singapore UTC+8
Cyber Intelligence for Critical Infrastructure
🗓 May 11–13, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 3:00 PM–8:30 PM Singapore UTC+8
Incident Response in Google Cloud
🗓 May 11–14, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 May 12–15, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8
Incident Response for Management
🗓 May 18–20, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 May 18–21, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
🗓 May 19–21, 2026 (3 days) 💻 In-person in Reston, VA (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 9:00am–6:00pm America/New York
Windows Enterprise Incident Response
🗓 May 26–29, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 June 1–4, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 1–4, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
Fundamentals of Cyber Security
🗓 June 1–5, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 3–4, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 🕒 10:00 AM–6:00 PM (UTC-05:00) Eastern Time (US & Canada)
Building a Resilient Cyber Security Program
🗓 June 8–10, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 3:00 PM–8:30 PM Singapore UTC+8
🗓 June 8–11, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 9–10, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Sydney, Australia 🌣 🕒 9:00 AM–5:00 PM Australia/Sydney
Incident Response in Google Cloud
🗓 June 15–17, 2026 (3 days) 💻 In-person in Reston, VA (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 9:00am–6:00pm America/New York
🗓 June 22–25, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 23–25, 2026 (3 days) 💻 In-person in Sunnyvale, CA (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 9:00am–6:00pm America/New York
Fundamentals of Industrial Control Systems (ICS) Security
🗓 June 29–July 1, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–1:30 PM Los Angeles UTC-7 • 4:00 PM–9:30 PM London UTC+1
Cyber Intelligence Foundations
🗓 July 6–9, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
Linux Enterprise Incident Response
🗓 July 6–9, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 July 13–16, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Incident Response for Management
🗓 July 14–16, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8
🗓 July 20–24, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 July 28–30, 2026 (3 days) 💻 In-person in Dublin (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 🕒 9:00am–6:00pmEurope/Dublin
Windows Enterprise Incident Response
🗓 August 18–20, 2026 (3 days) 💻 In-person in Reston, VA (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 9:00am–6:00pm America/New York
Incident Response for Management
🗓 September 14–16, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 3:00 PM–8:30 PM Singapore UTC+8
Intelligence Research II—Open Source Intelligence (OSINT)
🗓 September 22–24, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 3:00 PM-8:30 PM Singapore UTC+8
Introduction to Threat Intelligence and Attribution
🗓 November 3–4, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–12:30 PM London UTC+0 • 3:00 PM-7:30 PM Singapore UTC+8
On-demand courses
Artificial Intelligence (AI) Advantage: Elevating Cyber Defense (8 hours) $2,000 USD or 2 units Register now
Basic Static and Dynamic Analysis (16 hours) $2,000 USD or 2 units Register now
Cyber Intelligence Foundations (24 hours) $3,000 USD or 3 units or 2 Analyst Access Entitlements Register now
Cyber Intelligence Production (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Cyber Threat Intelligence Program Design Playbook (6 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Election Security (16 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Inside the Mind of an APT (14 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Intelligence Research I—Scoping (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Intelligence Research II—Open Source Intelligence (OSINT) (16 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Introduction to Threat Intelligence and Attribution (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Protecting the Perimeter: Practical Network Enrichment (8 hours) $2,000 USD or 2 units Register now
Work with a trusted partner
Find a partnerStart using Google Cloud
Go to consoleDeploy ready-to-go solutions
Explore marketplace
