Learn how defensive frameworks, such as Pyramid of Pain, Cyber Kill Chain, and MITRE, help you understand adversarial behaviour and harden detection, triage, and response.

This module examines attack stages and adversary techniques through widely used frameworks. You will follow real-world incident steps and analyse investigative methods that fit organisational policies. By the end, you will be able to map telemetry to frameworks, create framework-driven triage notes, and apply these models to improve your team's detection and containment workflows.

Pyramid Of Pain

Learn what the Pyramid of Pain is and how it ranks indicators by how painful they are for an adversary to change.

Cyber Kill Chain

The Cyber Kill Chain framework is designed for identification and prevention of the network intrusions. You will learn what the adversaries need to do in order to achieve their goals.

Unified Kill Chain

The Unified Kill Chain is a framework which establishes the phases of an attack, and a means of identifying and mitigating risk to IT assets.

MITRE

Explore the various resources that MITRE has made available to the cyber security community.

Summit

Can you chase a simulated adversary up the Pyramid of Pain until they finally back down?

Eviction

Unearth the monster from under your bed.

Lock in what you learned with a recap. Earn points and keep your streak.

Learn how defensive frameworks, such as Pyramid of Pain, Cyber Kill Chain, and MITRE, help you understand adversarial behaviour and harden detection, triage, and response.

Next steps

Phishing Analysis

Learn how to analyse and defend against phishing emails. Investigate real-world phishing attempts using a variety of techniques.

What are modules?

A learning pathway is made up of modules, and a module is made of bite-sized rooms (think of a room like a mini security lab).

Hierarchical diagram showing how learning pathways contain modules, which contain individual rooms.

Cyber Defence Frameworks