Mandiant believes in intense, hands-on training with operational case scenarios to ensure greater effectiveness. Our classes and exercises are reality-based rather than classroom mock-ups.
View our online, instructor-led courses that are coming soon and check out the on-demand courses available to you today. All courses can also be purchased using Expertise On Demand (EOD) units.
Learn more about Mandiant Expertise on Demand (EOD).
Linux Enterprise Incident Response
🗓 December 9–12, 2024 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
🗓 December 9–12, 2024 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
Windows Enterprise Incident Response
🗓 December 9–12, 2024 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas evening ⏾ 🕒 4:00 PM–10:30 PM Los Angeles UTC-7 • 7:00 PM–1:30 AM New York UTC-4
🗓 December 9–13, 2024 (4 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
Windows Enterprise Incident Response
🗓 December 10–12, 2024 (3 days) 💻 In-Person (instructor-led) 📚 $5,200 USD or 4 EOD units
🌎 Dubai, United Arab Emirates 🌣 🕒 9:00 AM–5:30 PM Dubai/UTC+4
Windows Enterprise Incident Response
🗓 December 10–13, 2024 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8 • 11:00 AM–5:30 PM Sydney UTC+11
Windows Enterprise Incident Response
🗓 January 27–30, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
🗓 February 10–13, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
Windows Enterprise Incident Response
🗓 February 11–14, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00am–2:30pm Singapore UTC+8 • 11:00am–5:30pm Sydney UTC+11
🗓 February 17–21, 2025 (4 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 4:00 PM–10:30 PM Singapore UTC+8
Linux Enterprise Incident Response
🗓 February 24–27, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
Windows Enterprise Incident Response
🗓 March 3–7, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
Incident Response in Google Cloud
🗓 March 10–13, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 3:00 PM–9:30 PM London UTC+0
Linux Enterprise Incident Response
🗓 March 10–13, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 4:00 PM–10:30 PM Singapore UTC+8
🗓 March 10–14, 2025 (5 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–1:30 PM Los Angeles UTC-8 • 3:00 PM–9:30 PM London UTC+0
🗓 March 17–20, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
🗓 March 17–21, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 3:00 PM–9:30 PM London UTC+0
Incident Response for Everyone
🗓 March 24–26, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 3:00 PM–9:30 PM London UTC+0
Windows Enterprise Incident Response
🗓 March 24–27, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 4:00 PM–10:30 PM Singapore UTC+8
Fundamentals of Industrial Control Systems (ICS) Security
🗓 March 25–26, 2024 (2 days) 💻 In-Person (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Black Hat Spring Training Washington D.C., United States 🌣 🕒 9:00am–6:00pm Washington D.C. UTC-4
Sold by Black Hat Visit Black Hat site for prices
🗓 March 31–April 3, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening 🌣 • APAC evening ⏾ 🕒 8:00 AM–12:30 PM New York UTC-4 • 1:00 PM–5:30 PM London UTC+1 • 8:00pm–12:30am Singapore UTC+8
🗓 March 31–April 3, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 April 1–4, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00am–2:30pm Singapore UTC+8 • 11:00am–5:30pm Sydney UTC+11
🗓 April 7–10, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 April 7–10, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 April 21–24, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Fundamentals of Industrial Control Systems (ICS) Security
🗓 April 28–30, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–1:30 PM Los Angeles UTC-7 • 4:00 PM–9:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 May 5–8, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 May 12–16, 2025 (5 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 May 13–16, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00am–2:30pm Singapore UTC+8 • 10:00am–4:30pm Sydney UTC+10
Incident Response in Google Cloud
🗓 May 19–22, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 May 19–23, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 May 27–30, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00am–2:30pm Singapore UTC+8 • 10:00am–4:30pm Sydney UTC+10
Incident Response for Everyone
🗓 June 2–4, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 2–5, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 9–12, 2025 (4 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening 🌣 • APAC evening ⏾ 🕒 8:00 AM–12:30 PM New York UTC-4 • 1:00 PM–5:30 PM London UTC+1 • 8:00pm–12:30am Singapore UTC+8
Windows Enterprise Incident Response
🗓 June 9–12, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 June 16–19, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
🗓 June 23–26, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 23–27, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 June 30–July 3, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
Linux Enterprise Incident Response
🗓 July 7–10, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 July 14–17, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Essentials of Malware Analysis 16 hours $2,000 USD or 2 EOD units Register now
Cyber Intelligence Foundations 24 hours $3,000 USD or 3 EOD units Register now
Intelligence Research I—Scoping 8 hours $2,000 USD or 2 EOD units Register now
Intelligence Research II—Open Source Intelligence (OSINT) 16 hours $2,000 USD or 2 EOD units Register now
Cyber Intelligence Production 8 hours $2,000 USD or 2 EOD units Register now
Inside the Mind of an APT 14 hours $2,000 USD or 2 EOD units Register now
Introduction to Threat Intelligence and Attribution 8 hours $2,000 USD or 2 EOD units Register now
Election Security 16 hours $2,000 USD or 2 EOD units Register now