Public and On-Demand Training Course Registration
Train your security team to effectively protect and defend your enterprise against targeted cyber attacks from the comfort of their desks, wherever that may be.
On-Demand Courses
Take our web-based training courses anytime, anywhere. Register now to start learning immediately. Sign up for a free, sneak preview of three on-demand intelligence courses. For an overview of our On-Demand Cyber Threat Intelligence Training, click here.
| Course | Duration | Location | Time | Price per Seat | Register | 
|---|---|---|---|---|---|
| Basic Static and Dynamic Analysis | 16 hours | Online (On-Demand) |  3 months to complete from enrollment date  |  $2,000 USD or 2 units  | Register Now | 
| Cyber Intelligence Foundations | 24 hours | Online (On-Demand) |  3 months to complete from enrollment date  |  $3,000 USD or 3 units or 2 Analyst Access Entitlements  | Register Now | 
| Cyber Intelligence Production | 8 hours | Online (On-Demand) |  3 months to complete from enrollment date  |  $2,000 USD or 2 units or 1 Analyst Access Entitlement  | Register Now | 
| Cyber Threat Intelligence Program Design Playbook | 6 hours | Online (On-Demand) |  3 months to complete from enrollment date  |  $2,000 USD or 2 units or 1 Analyst Access Entitlement  | Register Now | 
| Election Security | 16 hours | Online (On-Demand) |  3 months to complete from enrollment date  |  $2,000 USD or 2 units or 1 Analyst Access Entitlement  | Register Now | 
| Inside the Mind of an APT | 14 hours | Online (On-Demand) |  3 months to complete from enrollment date  |  $2,000 USD or 2 units or 1 Analyst Access Entitlement  | Register Now | 
| Intelligence Research I—Scoping | 8 hours | Online (On-Demand) |  3 months to complete from enrollment date  |  $2,000 USD or 2 units or 1 Analyst Access Entitlement  | Register Now | 
| Intelligence Research II—Open Source Intelligence (OSINT) | 16 hours | Online (On-Demand) |  3 months to complete from enrollment date  |  $2,000 USD or 2 units or 1 Analyst Access Entitlement  | Register Now | 
| Introduction to Threat Intelligence and Attribution | 8 hours | Online (On-Demand) |  3 months to complete from enrollment date  |  $2,000 USD or 2 units or 1 Analyst Access Entitlement  | Register Now | 
| Protecting the Perimeter: Practical Network Enrichment | 8 hours | Online (On-Demand) |  3 months to complete from enrollment date  |  $2,000 USD or 2 units or 1 Analyst Access Entitlement  | Register Now | 
Access all Public Training for one low fee with the Mandiant Academy Learning Pass
Upcoming Public Courses
Mandiant believes in intense, hands-on training with operational case scenarios to ensure greater effectiveness. Our classes and exercises are reality-based rather than classroom mock-ups. Every class is led by some of the most experienced cyber security professionals in the business.
| Course | Date & Duration | Location | Time | Price per Seat | Register | 
|---|---|---|---|---|---|
| Practical Threat Hunting |  October 20–23, 2025 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Windows Enterprise Incident Response |  October 27–30, 2025 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (3:00pm–9:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Network Traffic Analysis |  October 27–30, 2025 (4 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (4:00pm–10:30pm Asia/Singapore)  |  $4,000 USD or 4 units  | Register Now | 
| ThreatSpace: Triage and Investigations Workshop |  November 3–4, 2025 (2 days)  |  In-person (instructor-led) ■ Sydney Australia ☼  |  8:30am–4:30pm Australia/Sydney  |  $4,000 USD or 4 units  | Register Now | 
| Incident Response in Google Cloud |  November 10–13, 2025 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Practical Threat Hunting |  November 10–13, 2025 (4 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (4:00pm–10:30pm Asia/Singapore)  |  $4,000 USD or 4 units  | Register Now | 
| Creative Red Teaming |  November 17–21, 2025 (5 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (4:00pm–10:30pm Asia/Singapore)  |  $5,000 USD or 5 units  | Register Now | 
| Windows Enterprise Incident Response |  November 24–27, 2025 (4 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (4:00pm–10:30pm Asia/Singapore)  |  $4,000 USD or 4 units  | Register Now | 
| Cyber Team Response Lead (CTRL) Course |  November 24–28, 2025 (5 days)  |  In-person (instructor-led) ■ Sydney Australia ☼  |  8:30am–4:30pm Australia/Sydney  |  $5,000 USD or 5 units  | Register Now | 
| Practical Threat Hunting |  December 1–4, 2025 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Windows Enterprise Incident Response |  December 1–4, 2025 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Linux Enterprise Incident Response |  December 8–11, 2025 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Network Traffic Analysis |  December 8–11, 2025 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Creative Red Teaming |  December 8–12, 2025 (5 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $5,000 USD or 5 units  | Register Now | 
| Tabletop Exercise Train the Trainer (TTX T3) |  December 9–11, 2025 (3 days)  |  In-person (instructor-led) ■ Sydney Australia ☼  |  8:30am–4:30pm Australia/Sydney  |  $4,000 USD or 4 units  | Register Now | 
| Windows Enterprise Incident Response |  December 9–12, 2025 (4 days)  |  Online (instructor-led) ■ APAC ☼  |  8:00am–2:30pm Asia/Singapore  |  $4,000 USD or 4 units  | Register Now | 
| Practical Threat Hunting |  January 12–15, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Creative Red Teaming |  January 19–23, 2026 (5 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (4:00pm–10:30pm Asia/Singapore)  |  $5,000 USD or 5 units  | Register Now | 
| Building a Resilient Cyber Security Program |  January 21–23, 2026 (3 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–1:30pm Americas/Los Angeles (4:00pm–9:30pm Europe/London)  |  $3,000 USD or 3 units  | Register Now | 
| Network Traffic Analysis |  January 20–23, 2026 (4 days)  |  Online (instructor-led) ■ APAC ☼  |  8:00am–2:30pm Asia/Singapore  |  $4,000 USD or 4 units  | Register Now | 
| Windows Enterprise Incident Response |  January 26–29, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Practical Threat Hunting |  January 26–29, 2026 (4 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (4:00pm–10:30pm Asia/Singapore)  |  $4,000 USD or 4 units  | Register Now | 
| Linux Enterprise Incident Response |  February 2–5, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Windows Enterprise Incident Response |  February 3–6, 2026 (4 days)  |  Online (instructor-led) ■ APAC ☼  |  8:00am–2:30pm Asia/Singapore  |  $4,000 USD or 4 units  | Register Now | 
| Incident Response in Google Cloud |  February 9–12, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Building a Resilient Cyber Security Program |  February 16–18, 2026 (3 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–1:30pm Europe/London (4:00pm–9:30pm Asia/Singapore)  |  $3,000 USD or 3 units  | Register Now | 
| Incident Response for Management |  February 18–20, 2026 (3 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $3,000 USD or 3 units  | Register Now | 
| Practical Threat Hunting |  February 23–26, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Windows Enterprise Incident Response |  February 23–26, 2026 (4 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (4:00pm–10:30pm Asia/Singapore)  |  $4,000 USD or 4 units  | Register Now | 
| Creative Red Teaming |  February 23–27, 2026 (5 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $5,000 USD or 5 units  | Register Now | 
| Windows Enterprise Incident Response |  March 2–5, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Fundamentals of Industrial Control Systems (ICS) Security |  March 9–11, 2026 (3 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–1:30pm Americas/Los Angeles (3:00pm–8:30pm Europe/London)  |  $3,000 USD or 3 units  | Register Now | 
| Linux Enterprise Incident Response |  March 9–12, 2026 (4 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (4:00pm–10:30pm Asia/Singapore)  |  $4,000 USD or 4 units  | Register Now | 
| Network Traffic Analysis |  March 16–19, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (3:00pm–9:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Linux Enterprise Incident Response |  March 17–20, 2026 (4 days)  |  Online (instructor-led) ■ APAC ☼  |  8:00am–2:30pm Asia/Singapore  |  $4,000 USD or 4 units  | Register Now | 
| Building a Resilient Cyber Security Program |  April 8–10, 2026 (3 days)  |  Online (instructor-led) ■ APAC ☼  |  8:00am–1:30pm Asia/Singapore  |  $3,000 USD or 3 units  | Register Now | 
| Practical Threat Hunting |  April 13–16, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Linux Enterprise Incident Response |  April 13–16, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Creative Red Teaming |  April 13–17, 2026 (5 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (3:00pm–9:30pm Asia/Singapore)  |  $5,000 USD or 5 units  | Register Now | 
| Windows Enterprise Incident Response |  April 14–17, 2026 (4 days)  |  Online (instructor-led) ■ APAC ☼  |  8:00am–2:30pm Asia/Singapore  |  $4,000 USD or 4 units  | Register Now | 
| Windows Enterprise Incident Response |  April 20–23, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Network Traffic Analysis |  April 20–23, 2026 (4 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (3:00pm–9:30pm Asia/Singapore)  |  $4,000 USD or 4 units  | Register Now | 
| Fundamentals of Industrial Control Systems (ICS) Security |  April 27–29, 2026 (3 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–1:30pm Europe/London (3:00pm–8:30pm Asia/Singapore)  |  $3,000 USD or 3 units  | Register Now | 
| Building a Resilient Cyber Security Program |  April 27–29, 2026 (3 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–1:30pm Americas/Los Angeles (4:00pm–9:30pm Europe/London)  |  $3,000 USD or 3 units  | Register Now | 
| Creative Red Teaming |  May 4–8, 2026 (5 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $5,000 USD or 5 units  | Register Now | 
| Incident Response in Google Cloud |  May 11–14, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Network Traffic Analysis |  May 12–15, 2026 (4 days)  |  Online (instructor-led) ■ APAC ☼  |  8:00am–2:30pm Asia/Singapore  |  $4,000 USD or 4 units  | Register Now | 
| Incident Response for Management |  May 18–20, 2026 (3 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $3,000 USD or 3 units  | Register Now | 
| Windows Enterprise Incident Response |  May 18–21, 2026 (4 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (3:00pm–9:30pm Asia/Singapore)  |  $4,000 USD or 4 units  | Register Now | 
| Windows Enterprise Incident Response |  May 26–29, 2026 (4 days)  |  Online (instructor-led) ■ APAC ☼  |  8:00am–2:30pm Asia/Singapore  |  $4,000 USD or 4 units  | Register Now | 
| Windows Enterprise Incident Response |  June 1–4, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Practical Threat Hunting |  June 1–4, 2026 (4 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–2:30pm Europe/London (3:00pm–9:30pm Asia/Singapore)  |  $4,000 USD or 4 units  | Register Now | 
| Building a Resilient Cyber Security Program |  June 8–10, 2026 (3 days)  |  Online (instructor-led) ■ EMEA ☼ ■ APAC evening ⏾  |  8:00am–1:30pm Europe/London (3:00pm–8:30pm Asia/Singapore)  |  $3,000 USD or 3 units  | Register Now | 
| Practical Threat Hunting |  June 8–11, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Network Traffic Analysis |  June 22–25, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Fundamentals of Industrial Control Systems (ICS) Security |  June 29–July 1, 2026 (3 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–1:30pm Americas/Los Angeles (4:00pm–9:30pm Europe/London)  |  $3,000 USD or 3 units  | Register Now | 
| Linux Enterprise Incident Response |  July 6–9, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Windows Enterprise Incident Response |  July 13–16, 2026 (4 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $4,000 USD or 4 units  | Register Now | 
| Creative Red Teaming |  July 20–24, 2026 (5 days)  |  Online (instructor-led) ■ Americas ☼ ■ EMEA evening ⏾  |  8:00am–2:30pm Americas/Los Angeles (4:00pm–10:30pm Europe/London)  |  $5,000 USD or 5 units  | Register Now | 
Have any questions on getting started?
Reach out for questions, private/custom/experiential course bookings, and any
other answers we can help you with.