Skip to content
AfriScienceGroup home
Cybersecurity and IT

Security Operations and Threat Detection

A security operations capability is judged on how quickly it notices something and how reliably it decides whether that something matters, and most drown in alerts long before either question is answered well. This course covers building one that functions. Delegates work through log sources and what each is actually useful for, the detection engineering that turns a threat behaviour into a rule, and the triage process that separates a real event from noise. Alert tuning is treated as ongoing work rather than setup. Threat intelligence and its practical use are covered. Escalation, handover and case documentation follow. The course closes on measuring detection coverage honestly and on the metrics that mislead.

5 day courseRegister NowRequest Proposal

Course objectives

  • Select log sources and know what each is useful for
  • Write detection rules from observed threat behaviour
  • Triage alerts and separate real events from noise
  • Tune alerts continuously rather than only at deployment
  • Use threat intelligence practically rather than decoratively
  • Escalate, hand over and document a case properly
  • Measure detection coverage honestly and avoid misleading metrics

Who should attend

  • Security analysts and operations centre staff
  • IT administrators taking on security monitoring
  • Incident responders
  • Security engineers building detection capability
  • Managers overseeing a security operations function

Course outline

  1. 01Drowning in alerts
  2. 02Log sources and their value
  3. 03Detection engineering from threat behaviour
  4. 04Triage and case creation
  5. 05Alert tuning as continuous work
  6. 06Threat intelligence in practice
  7. 07Escalation, handover and documentation
  8. 08Coverage measurement and misleading metrics

Scheduled sessions

Scheduled sessions for Security Operations and Threat Detection
DatesVenueFormatPriceRegister
30 November to 4 December 2026Cape Town, South AfricaClassroomR19,950 per delegateRegister Now
11 to 15 January 2027OnlineOnlineR8,500 per delegateRegister Now
22 to 26 March 2027Durban, South AfricaClassroomR19,950 per delegateRegister Now

Security Operations and Threat Detection

From R8,500

AskRegister