Actionable Defense: Understanding Adversary Tactics

Date: June 13 - 16, 2022
Location: Arlington, Virginia


Most organizations struggle with understanding specific techniques and methodologies around attacks. This class is designed for both penetration testers and defenders in a unique blend of both offensive techniques and how to best defend against them. Each module is designed to demonstrate the latest attack vectors used to simulate attacks against organizations and most importantly how to write detections for them. This class focuses on the “purple team” approach which focuses on attacking and working on building detections based on the attacks applied. This is a completely immersive experience with a simulated corporate infrastructure that allows you to focus on identifying attack behavior within a corporate infrastructure. The students will be provided with everything they need to understand how to conduct attacks as well as how to best detect them in a large environment. This class will go through the tactics, techniques, and procedures (TTPs) of attacks while building knowledge around how to write rules that focus on the behavior exhibited from them in order to better refine detections within an organization.
Learn from both offensive and defensive (red and blue) practitioners in the industry on the latest techniques and ways to defend/detect against attacks.


  • Ability to understand advanced attacker techniques and directly write detections to identify them.
  • Understand unusual behavior in an organization and identify threats earlier on.
  • Structure your program to handle new threats that come at your organization.


This class is great for defenders and penetration testers looking to learn more about defense and offensive capabilities. Individuals that want to leave the course with direct actionable items they can directly apply in their day-to-day jobs.

  • Penetration Testers
  • Beginners to Offense or Defense
  • Wanting to learn coding
  • Hunt Teams
  • Anyone looking to strengthen their offensive and detection capabilities.



For more information and a full breakdown of each day of training, visit Black Hat Trainings.