View our online, instructor-led courses that are coming soon and check out the on-demand courses available to you today. All courses can also be purchased using Expertise On Demand (EOD) units.
Learn more about Mandiant Expertise On Demand (EOD).
Fundamentals of Industrial Control Systems (ICS) Security
🗓 September 15–17, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–1:30 PM Los Angeles UTC-7 • 4:00 PM–9:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 September 16–19, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8 • 11:00 AM–5:30 PM Sydney UTC+11
🗓 September 22–25, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
🗓 September 22–26, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Building a Resilient Cyber Security Program
🗓 September 29–October 1, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–1:30 PM Los Angeles UTC-7 • 4:00 PM–9:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 September 29–October 2, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 October 6–9, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 October 7–10, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8 • 10:00 AM–4:30 PM Sydney UTC+10
Incident Response for Management
🗓 October 13–15, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 October 13–16, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
🗓 October 20–23, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 October 22–23, 2025 (2 days) 💻 In-person in Reston, VA (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 🕒 9:00 AM–5:00 PM Eastern Standard Time
Windows Enterprise Incident Response
🗓 October 27–30, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 October 27–30, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
ThreatSpace: Triage and Investigations Workshop
🗓 November 3–4, 2025 (2 days) 💻 In-person (instructor-led) 📚 $4,000 USD or 4 units
🌎 Sydney, Australia 🌣 🕒 8:30 AM–4:30 PM Australia/Sydney
Incident Response in Google Cloud
🗓 November 10–13, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 November 10–13, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
🗓 November 17–21, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 November 24–27, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 4:00 PM–10:30 PM Singapore UTC+8
Cyber Team Response Lead (CTRL) Course
🗓 November 24–28, 2025 (5 days) 💻 In-person (instructor-led) 📚 $5,750 USD or 5 units
🌎 Sydney, Australia 🌣 🕒 8:30 AM–4:30 PM Australia/Sydney
🗓 December 1–4, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 December 1–4, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 December 8–11, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 December 8–11, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
🗓 December 8–12, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Tabletop Exercise Train the Trainer (TTX T3)
🗓 December 9–11, 2025 (3 days) 💻 In-person (instructor-led) 📚 $4,250 USD or 4 units
🌎 Sydney, Australia 🌣 🕒 8:30 AM–4:30 PM Australia/Sydney
Windows Enterprise Incident Response
🗓 December 9–12, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8 • 11:00 AM–5:30 PM Sydney UTC+11
Basic Static and Dynamic Analysis (16 hours) $2,000 USD or 2 units Register now
Cyber Intelligence Foundations (24 hours) $3,000 USD or 3 units or 2 Analyst Access Entitlements Register now
Cyber Intelligence Production (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Cyber Threat Intelligence Program Design Playbook (6 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Election Security (16 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Inside the Mind of an APT (14 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Intelligence Research I—Scoping (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Intelligence Research II—Open Source Intelligence (OSINT) (16 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Introduction to Threat Intelligence and Attribution (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now