Trainings

Artificial intelligence is rapidly changing how defenders build, test, and improve detection logic, but many organisations still struggle to move from hype to practical implementation. This hands-on training shows how security teams can use large language models and structured threat data to accelerate detection engineering without losing human oversight. Participants will work through realistic blue team workflows: translating threat intelligence into detection ideas, mapping activity to MITRE ATT&CK, drafting and refining Sigma rules, validating detection logic against example attack scenarios, and identifying where AI support is useful and where it becomes risky. The course emphasises human-in-the-loop decision-making, verification, and operational realism rather than blind trust in automated outputs. By the end of the training, participants will understand how to integrate AI into detection development in a controlled and defensible way, helping SOCs and incident response teams improve speed, consistency, and coverage.