Filters
- Introductory courses
- Intelligence and attribution courses
- Incident response courses
- Malware analysis courses
- Advanced acquisition and testing techniques courses
- Workshops
- Training Packages
- Certifications
Introductory courses
- Introduction to Cyber Crime for ExecutivesIn-classroom (1 day) or virtual (1 day) instructor-led training.
- Building a Resilient Cyber Security ProgramIn-classroom (2 days) or virtual (3 days) instructor-led training.
- Fundamentals of Industrial Control Systems (ICS) SecurityIn-classroom (2 days) or virtual (3 days) instructor-led training.
- Fundamentals of Cyber SecurityIn-classroom (4 days) or virtual (5 days) instructor-led training.
Intelligence and attribution courses
- Threat Intelligence and AttributionIn-classroom (1 day) or virtual (2 days) instructor-led training.
- Inside the Mind of an APTOn demand (14 hours).
- Cyber Intelligence FoundationsIn-classroom (3 days) or virtual (4 days) instructor-led training, or on demand.
- Intelligence Research I—ScopingOn demand (8 hours).
- Intelligence Research II—Open Source Intelligence (OSINT)On demand (16 hours).
- Cyber Intelligence ProductionOn demand (8 hours).
- Cyber Intelligence for Critical InfrastructureIn-classroom (2 days) or virtual (3 days) instructor-led training.
- Cyber Threat Intelligence Program Design PlaybookOn demand (6 hours).
- Protecting the Perimeter: Practical Network EnrichmentOn demand (8 hours).
- Artificial Intelligence (AI) Advantage: Elevating Cyber DefenseOn demand (8 hours).
- Cyber Intelligence for National SecurityIn-classroom (3 days) or virtual (4 days) instructor-led training.
Incident response courses
- Incident Response for ManagementIn-classroom (2 days) or virtual (3 days) instructor-led training.
- Windows Enterprise Incident ResponseIn-classroom (3 days) or virtual (4 days) instructor-led training.
- Linux Enterprise Incident ResponseIn-classroom (3 days) or virtual (4 days) instructor-led training.
- Combined Windows-Linux Enterprise Incident ResponseIn-classroom (5 days) instructor-led training.
- Advanced Enterprise Incident ResponseIn-classroom (5 days) instructor-led training.
- Network Traffic AnalysisIn-classroom (3 days), virtual (4 days) instructor-led training, and web-based training.
- Practical Threat HuntingIn-classroom (3 days) and virtual (4 days) instructor-led training.
- Incident Response in Google CloudIn-classroom (3 days) or virtual (4 days) instructor-led training.
- ThreatSpace: Threat Hunting with GoogleIn-classroom (2 days) or virtual (2 days) instructor-led training.
- ThreatSpace: Defend the AI PipelineIn-classroom (2 days) or virtual (2 days) instructor-led training.
Malware analysis courses
Advanced acquisition and testing techniques courses
Workshops
Training Packages
Upcoming and on-demand courses
View our online, instructor-led courses that are coming soon and check out the on-demand courses available to you today. All courses can also be purchased using Expertise On Demand (EOD) units.
Learn more about Mandiant Expertise On Demand (EOD).
Upcoming public courses
Incident Response in Google Cloud
🗓 August 24–27, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 4:00pm–10:30pm London UTC+1
Windows Enterprise Incident Response
🗓 August 24–27, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+1 • 3:00pm–9:30pm Singapore UTC+8
ThreatSpace: Defend the AI Pipeline
🗓 August 31–September 1, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas evening ⏾ 🕒 4:00pm–12:00am America/Los Angeles
🗓 August 31–September 3, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+1 • 3:00pm–9:30pm Singapore UTC+8
ThreatSpace: Defend the AI Pipeline
🗓 September 1–2, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 APAC 🕒 9:00am–5:00pm Australia/Sydney
Incident Response for Management
🗓 September 14–16, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 3:00 PM–8:30 PM Singapore UTC+8
🗓 September 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening 🕒 8:00am–2:30pm London UTC+1 • 3:00pm–9:30pm Singapore UTC+8
Windows Enterprise Incident Response
🗓 September 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 4:00pm–10:30pm London UTC+1
🗓 September 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas evening ⏾ 🕒 5:00pm–11:30pm Los Angeles UTC-7
🗓 September 15–18, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8
Building a Resilient Cyber Security Program
🗓 September 21–23, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas evening ⏾ 🕒 5:00pm–10:30pm Los Angeles UTC-7
ThreatSpace: Triage and Investigations Workshop
🗓 September 22–23, 2026 (2 days) 💻 In-person in Sydney, NSW (instructor-led) 📚 $4,250 USD or 4 units
🌎 APAC 🕒 8:30am–4:30pm Sydney UTC+10
Building a Resilient Cyber Security Program
🗓 September 22–24, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 APAC 🕒 8:00am–1:30pm Singapore UTC+8
Fundamentals of Industrial Control Systems (ICS) Security
🗓 September 28–30, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–1:30pm Los Angeles UTC-7 • 4:00pm–9:30pm London UTC+1
Linux Enterprise Incident Response
🗓 September 28–October 1, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+1 • 3:00pm–9:30pm Singapore UTC+8
Intelligence Research II—Open Source Intelligence (OSINT)
🗓 September 29–October 1, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 3:00 PM-8:30 PM Singapore UTC+8
Linux Enterprise Incident Response
🗓 October 12–15, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 4:00pm–10:30pm London UTC+1
Fundamentals of Industrial Control Systems (ICS) Security
🗓 October 12–14, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas evening ⏾ 🕒 5:00pm–10:30pm Los Angeles UTC-7
🗓 October 12–15, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 4:00pm–10:30pm London UTC+1
ThreatSpace: Defend the AI Pipeline
🗓 October 13–14, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 🕒 9:00am–5:00pm Pacific Time (US & Canada)
Fundamentals of Industrial Control Systems (ICS) Security
🗓 October 13–15, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 APAC 🕒 8:00am–1:30pm Singapore UTC+8
🗓 October 19–20, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 10:00am–6:00pm New York UTC-4 • 3:00pm–11:00pm London UTC+1
Building a Resilient Cyber Security Program
🗓 October 19–21, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–1:30pm London UTC+1 • 3:00pm–8:30pm Singapore UTC+8
Windows Enterprise Incident Response
🗓 October 19–22, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 4:00pm–10:30pm London UTC+1
🗓 October 19–23, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+1 • 3:00pm–9:30pm Singapore UTC+8
ThreatSpace: Defend the AI Pipeline
🗓 October 20-21, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 🕒 9:00am–5:00pm London, Edinburgh (UTC+01:00)
Cyber Intelligence for Critical Infrastructure
🗓 October 26–28, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 3:00 PM–8:30 PM Singapore UTC+8
🗓 October 26–29, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 3:00pm–9:30pm London UTC+0
Windows Enterprise Incident Response
🗓 October 26–29, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8
🗓 November 2–6, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0
Threat Intelligence and Attribution
🗓 November 3–4, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–12:30 PM London UTC+0 • 3:00 PM-7:30 PM Singapore UTC+8
Fundamentals of Industrial Control Systems (ICS) Security
🗓 November 9–11, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–1:30pm London UTC+0 • 4:00pm–9:30pm Singapore UTC+8
Incident Response for Management
🗓 November 9–11, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas evening ⏾ 🕒 4:00pm–10:30pm Los Angeles UTC-8
Fundamentals of Cyber Security
🗓 November 9–13, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0
Incident Response for Management
🗓 November 10–12, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8
Building a Resilient Cyber Security Program
🗓 November 16–18, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–1:30pm Los Angeles UTC-8 • 4:00pm–9:30pm London UTC+0
🗓 November 16–19, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8
Practical Mobile Application Security
🗓 November 16–20, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 4:00pm–10:30pm London UTC+1
🗓 November 17–18, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–4:00pm London UTC+0 • 4:00pm–12:00am Singapore UTC+8
Windows Enterprise Incident Response
🗓 November 22–25, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas evening ⏾ 🕒 4:00pm–10:30pm Los Angeles UTC-8
🗓 November 23–26, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8
Windows Enterprise Incident Response
🗓 November 23–26, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8
Linux Enterprise Incident Response
🗓 November 30–December 3, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8
🗓 November 30–December 3, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas evening ⏾ 🕒 4:00pm–10:30pm Los Angeles UTC-8
Fundamentals of Industrial Control Systems (ICS) Security
🗓 December 1–3, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–1:30pm Los Angeles UTC-8 • 4:00pm–9:30pm London UTC+0
Incident Response for Management
🗓 December 1–3, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0
🗓 December 1–4, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8
Incident Response for Management
🗓 December 7–9, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8
Cyber Intelligence Foundations
🗓 December 7–10, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 December 7–10, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0
🗓 December 7–10, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0
Linux Enterprise Incident Response
🗓 December 7–10, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas evening ⏾ 🕒 4:00pm–10:30pm Los Angeles UTC-8
🗓 December 7–11, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8
Linux Enterprise Incident Response
🗓 December 8–11, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8
Incident Response in Google Cloud
🗓 December 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0
🗓 December 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0
Windows Enterprise Incident Response
🗓 December 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8
🗓 December 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 Americas evening ⏾ 🕒 4:00pm–10:30pm Los Angeles UTC-8
🗓 December 15–18, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units
🌎 APAC 🌣 🕒 8:00am–2:30pm Singapore UTC+8
On-demand courses
Artificial Intelligence (AI) Advantage: Elevating Cyber Defense (8 hours) $2,000 USD or 2 units Register now
Basic Static and Dynamic Analysis (16 hours) $2,000 USD or 2 units Register now
Cyber Intelligence Foundations (24 hours) $3,000 USD or 3 units or 2 Analyst Access Entitlements Register now
Cyber Intelligence Production (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Cyber Threat Intelligence Program Design Playbook (6 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Election Security (16 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Inside the Mind of an APT (14 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Intelligence Research I—Scoping (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Intelligence Research II—Open Source Intelligence (OSINT) (16 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Protecting the Perimeter: Practical Network Enrichment (8 hours) $2,000 USD or 2 units Register now
Threat Intelligence and Attribution (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now
Work with a trusted partner
Find a partnerStart using Google Cloud
Go to consoleDeploy ready-to-go solutions
Explore marketplace
