For Teams
Find and Close Skill Gaps on Your Team
Level up your team’s cybersecurity skills with threat-informed training to better defend your organization.
Trusted by leading organizations
.svg){kind=small}
Upskill at Scale
Learn
Support your security team with framework aligned training, live cert prep, and role-specific course series’ exclusive to Teams members.
Practice
Get your team up to speed on the latest threats and vulnerabilities with virtual labs based on timely, real-world scenarios.
Prove
Gauge your security team’s ability to mitigate risks and defend your organization against attacks with skill assessments.
Build Your Team's Skills
Cybrary’s accessible, affordable platform provides guided pathways, threat-informed training, and certification preparation.
Empower Your Team
Provide team members with clarity on how to learn, grow, and advance their careers within your organization.
Advanced Content on the Most Impactful Topics
Cybrary Select is a new collection of advanced content, exclusively accessible via Cybrary for Teams. Tailored for intermediate to advanced practitioners, Cybrary Select provides in-depth training on the entire spectrum of knowledge, skills, and tactics related to advanced topics. Courses within Cybrary Select make prominent use of hands-on labs to build practical skills that help your staff defend your organization against advanced threats.
Live Cert Prep Training for Teams
Designed to complement Cybrary’s on-demand certification prep content, Cybrary Live allows learners to interact directly with expert instructors in a boot camp-style virtual classroom environment. Schedule a demo to learn more about Cybrary Live.
Empower Your Team with Framework-Aligned Training Programs
MITRE ATT&CK Framework
Pursue strategic, threat-informed cybersecurity training with exclusive courses created by leading subject-matter experts. Adopt innovative strategies for conducting threat hunts, emulating adversaries, enhancing detections, and performing CTI analysis with our collection of MITRE ATT&CK Defender (MAD) courses, certification prep courses, and Threat Actor Campaigns.
NICE Cybersecurity Workforce Framework
Empower your team to strengthen organizational security by prioritizing cybersecurity training and professional development. All of Cybrary’s content is aligned to the NICE framework, allowing teams to customize NICE-aligned training paths covering the specific knowledge areas, skills, abilities, and tasks associated with relevant cybersecurity work roles.
Get Your Team Mission-Ready
Prepare your team to confidently defend your organization against threats with Cybrary’s CVE Series, Threat Actor Campaigns, and Cybrary Challenges. With real-word case studies and hands-on practice labs based on cyber attacks hitting the headlines, your team will learn to detect and mitigate threats and vulnerabilities in a timely manner, effectively protecting your organization against bad actors.
Hyper-V
Microsoft Hyper-V is a technology that allows you to create virtual environments like operating systems, virtual servers, and virtual components like hard drives and network switches. In this Hyper-V training, you’ll learn how to build, configure, and understand virtual machines in both the server and client environments.
Cybersecurity Kill Chain™
Learn a foundational concept within cybersecurity in this Cybersecurity Kill Chain™ course. This course simulates an example attack and exposes the 7 phases of the Lockheed Martin Cyber Kill Chain™. Then you’ll apply the knowledge gained to design a defense-in-depth model to defend against the attack.
How to Use binwalk (BSWJ)
In this “How to Use binwalk (BSWJ)” course, cybersecurity expert Joe Perry takes you on another “Breaking Stuff with Joe” (BSWJ) adventure by showing you how to use the analysis tool binwalk to find executable code and embedded files inside binary files. Such images can be used to crack IoT devices.
Penetration Testing Execution Standard (PTES)
This Penetration Testing Execution Standard (PTES) course provides a comprehensive set of standards for penetration testing. The PTES guides information security professionals while also helping inform organizations what can be expected from penetration tests. Business and security professionals will benefit from this course.
Assembly
Assembly is the lowest-level programming language and is useful in reverse engineering and malware analysis. It can also be used for direct hardware manipulation or to address critical performance issues. This course requires a background in basic programming concepts and access to a Linux system. Learn Assembly online today!
Cyber Network Security
If you want to become a network engineer, you’ll want to learn more about incident response and business continuity planning. In the Cyber Network Security course, cybersecurity analyst Pete Cipolone provides an overview of network terminology. Learn about different threats, regulations, and cybersecurity ethical considerations.
Enterprise Security Leadership: Negotiation Skills for Cyber Leaders
In this session of Enterprise Security Leadership in the Modern Era, Ed Amoroso reviews the 8 rules of good negotiations and how they align not only to professional and personal life, but how they are central to maintaining proper Cybersecurity.
Introduction to Splunk
Splunk is a software platform that indexes data and makes it searchable, allowing it to be turned into operational intelligence. This Splunk training course will quickly introduce you to Splunk and its many capabilities for organizing and managing data. Take this course if you’re on the path to becoming a SOC Analyst.
Kali Linux Fundamentals
If you’re interested in penetration testing and ethical hacking, then this Kali Linux course is a great place to start your training. Learn about the industry-standard tool for penetration and security testing. This is a foundational course that is designed to provide the basics of Kali distribution, installation, troubleshooting, and navigation.
Intro to Burp Suite Pro
Learn to identify potential attack routes and security-related weaknesses in your web applications using Burp Suite Pro, one of the web application scanning tools preferred by security engineers and ethical hackers. This Burp Suite training course will give you the basic knowledge you need to get up and running with this tool.
Incident Response and Advanced Forensics
Need some incident response training on your path to becoming a network engineer or cyber defense analyst? This course will introduce you to incident response and prepare you to conduct forensic collections. Learn how to develop protection plans, dive into insider and malware threats, and commence incident recovery.
NMAP
The network mapper (NMAP) is one of the highest quality and powerful free network utilities in the cybersecurity professional's arsenal. This NMAP course offers the NMAP skills and commands needed to become a better network administrator, incident responder, or penetration tester. Learn NMAP fundamentals and even create personal hands-on labs.
Social Engineering
Do you have what it takes to learn the art of social engineering, or master manipulation in cybersecurity? This social engineering course is essential for any aspiring penetration tester. Learn about different types of social engineering attacks and gain hands-on experience in two labs using the Social Engineering Toolkit (SET).
Enterprise Security Leadership: Team Dynamics for Cyber Leaders
Team dynamics, like many other areas of role and career development, is important in an industry plagued with misconceptions and global pressure. Taking on a leadership role in cybersecurity comes with a different set of responsibilities.
Advanced Cyber Threat Intelligence
Do you want to take your cyber threat intelligence skills to the next level so you can better protect your organization? Learn to leverage existing data sources, reduce false positives, and use models like the Cyber Kill Chain, and the MITRE ATT&CK framework to structure your analysis in this Advanced Cyber Threat Intelligence course.
Fundamentals of Vulnerability Management
Get an introduction to protecting your network with this Fundamentals of Vulnerability Management training. Ken Underhill explains how to use automation to manage vulnerabilities and goes over the vulnerability management lifecycle. You’ll walk away with a solid framework and understanding of different types of vulnerabilities and assessments.
Open Source Intelligence (OSINT) Fundamentals
Open source intelligence (OSINT) is the process of collecting and analyzing publicly available information that can be exploited by adversaries. Learn techniques for gathering intelligence from public data sources and how to leverage this knowledge to defend your organization from those who wish to do harm.
DFIR Investigations and Witness Testimony
Is it time for you to testify? This course is for digital forensics and incident response professionals who are preparing to testify. Learn more about what makes an expert witness, as well as what is involved in the process from collection and analysis to testimony. Gain confidence with defending your work before you take the witness stand!
MITRE ATT&CK Defender™ (MAD) ATT&CK® Fundamentals Badge Training
MITRE ATT&CK® Defender™ (MAD) is a cybersecurity training and certification program produced by MITRE's own subject matter experts. Explore how a threat-informed mindset can help you focus your efforts on improving and understanding how your defenses fare against real-world adversaries in this MAD ATT&CK® Fundamentals Badge Training course.
MITRE ATT&CK Defender™ (MAD) ATT&CK® Cyber Threat Intelligence Certification Training
Analysts and researchers gain hands-on instruction directly from MITRE’s experts in this MITRE ATT&CK Defender™ (MAD) ATT&CK® Cyber Threat Intelligence Certification course. Prepare for the certification and learn how to map raw data to ATT&CK, as well as how to operationalize the intelligence through recommendations to defenders.
Penetration Testing and Ethical Hacking
To assess the strength of your organization’s cybersecurity posture, you need to gather information, perform scanning and enumeration, and show how an adversary could hack into your systems. This ethical hacking course will give you those skills and prepare you for related certification exams so you can prove your capabilities.
Identifying Web Attacks Through Logs
Log analysis involves reviewing and evaluating system activities to help mitigate risks. If you’re training to be a SOC Analyst, then you’ll need log analysis training. This course will review web application infrastructure, web servers, and logs. You will explore attack scenarios and identify the attack through logs generated by the web server.
Introduction to IT & Cybersecurity
Are you new to IT & cybersecurity and wondering which role might suit you best? In this cybersecurity for beginners overview, we cover the roles of Network Administrator, Incident Responder, System Administrator, Penetration Tester, Cloud Engineer, Cybersecurity Manager, and Privacy Analyst. Find the role for you in this exciting field.
Password Cracking 101
You may wonder what a hash is and how adversaries exploit hashes to crack passwords. Learn how they do it and then practice doing it yourself in this Password Cracking 101 course, which is perfect for both Red Teamers who are learning privilege escalation and Blue Teamers who are learning how to audit password strength.
Offensive Penetration Testing
As a pentester, you need to understand the methods of real-life attackers and use the tools, techniques, and resources they exploit. Join ethical hacker Clint Kehr as he guides you from basic hacking concepts to advanced exploitation techniques in this Offensive Penetration Testing Course. Develop the hacker mindset or hone your existing skills.
Certified Cloud Security Professional (CCSP)
As you develop your skills for a cloud security engineer, architect, or manager role, you’ll want to take this Certified Cloud Security Professional (CCSP) certification course. Information Security Analyst Graham Wicas will give you the training to understand all six domains of the CCSP exam, including cloud data security and legal compliance.
Microsoft 365 Fundamentals (MS-900)
Microsoft 365 combines Microsoft Office with cloud-based software-as-a-service products and is one of the most widely used solutions today. Prove your foundational knowledge of how to deploy and manage cloud services in Microsoft 365 by getting the knowledge you need to pass the MS-900 certification in this Microsoft 365 Fundamentals course.
How to Use Unicornscan (BSWR)
As a defender, you can use Unicornscan to evaluate your network and identify vulnerabilities. In this Unicornscan tutorial, Robert Smith shows you how to use this popular port scanning tool to determine what ports are being used for network communications so you can protect them. It’s another great Breaking Stuff with Robert (BSWR) session.
Certified Information Systems Security Professional (CISSP)
CISSP certification is essential for cybersecurity professionals aiming to move up in their career. This course will cover all aspects of security, risk management, and architecture to help you prepare for the CISSP exam. Learn from experienced professionals and gain the knowledge needed to become a certified security expert.
Password Cracking Tool Fundamentals
In Password Cracking Tool Fundamentals, Dustin Parry takes you through different aspects of securing passwords and techniques deployed to crack passwords. These techniques can be deployed by IT technicians to check the password strengths, and it can be used by pentesters and attackers alike.
Online Reconnaissance
If you’re on the path to becoming an incident handler, you’ll need reconnaissance skills. In this Online Reconnaissance course, Ken Underhill covers the gathering of data through reconnaissance-related labs, with a primary focus on open-source intelligence (OSINT). Examine analysis labs to give you a hands-on overview of information gathering.
Scanning and Enumeration with NMAP
NMAP is a powerful tool used by both attackers and defenders to scan networks. In this Scanning and Enumeration with NMAP course, Ken Underhill uses an NMAP lab to demonstrate the process for collecting information on a network using technical tools. Become a more advanced incident handler with this course.
Evasion for Incident Handlers
As a defender, you need to understand your adversary. In this Evasion for Incident Handlers course, Ken Underhill gives a high-level overview of how bad actors circumvent antivirus and anti-malware software and use techniques like encryption, separation, and ghostwriting to evade detection. Catch them in the act by understanding how they operate.
Analyzing Attacks for Incident Handlers
An important but often overlooked process in incident handling is memory analysis. In this installment of David Biser’s series on incident response, he explains and demonstrates how to use memory analysis to investigate an attack and gain useful evidence from memory that may not otherwise be available.
Stealth Techniques for Incident Handlers
In Stealth Techniques for Incident Handlers, Cybrary Master Instructor Ken Underhill discusses the various techniques used around stealth like timestomping, steganography, logs, and covert channels, like Loki and 007Shell. Ken then dives into more detail with some walkthrough examples using the steganography tool, QuickCrypto.
Fundamental Windows Security Overview
If you are a systems administrator who wants to learn how to better protect your organization’s Windows environment, this course is for you. Take this Fundamental Windows Security Overview course, and you’ll learn how to use the right tools and configurations to stop intrusions and ensure secure network connections.
Incident Handling Fundamentals
In this course, we will cover the fundamentals of incident handling, specifically how to identify security incidents and the common standards and practices for handling said incidences. This includes discussing various forensic tools, SOAR, and analysis tools/resources.
Intro to PowerShell Scripting
PowerShell is a tool introduced by Microsoft to achieve tasks that were not possible using command prompt. Shells are used to automate tasks, such as creating logon scripts and client/server management tasks. In our PowerShell Scripting Course, you will learn all the basics, adding to your arsenal of configuration managment tools.
CompTIA CASP+ (CAS-004)
Established IT professionals can level up by obtaining their CompTIA Advanced Security Practitioner CAS-004 CASP+ certification. Stand out among your peers with this CASP training that covers enterprise security, risk management, applied cryptography, system and network security, identity management, incident response, and emerging technologies.
Incident Response by Sensato
This course will be an introduction to Security Operation Center case and incident management. This is an abbreviated course that we are providing to those who are looking to become a SOC analyst. You will be able to see how you should respond to incidents and manage cases within the Security Operation Centers or organizations.
Preventing Data Breaches with A1Logic
In this course, we will cover the basic concepts needed to prevent Data Breaches. More specifically, we will go through the fundamental concepts of information security, and covers what the industry is doing and not doing to protect sensitive information and data.
Systems Security Certified Practitioner (SSCP)
Obtaining your SSCP certification signifies that you possess the ability to tackle the operational demands and responsibilities of security practitioners, including authentication, security testing, intrusion detection/prevention, incident response and recovery, attacks and countermeasures, cryptography, malicious code countermeasures, and more.
MTA 98-366 Networking Fundamentals
This MTA Networking Fundamentals certification course provides an entry point to the Microsoft Technology Associate (MTA) exams that validate the fundamentals needed to begin building a career using Microsoft technologies. This course assumes some hands-on experience or training but not assumed on-the-job experience.
Zero Trust Networks
The Zero Trust model of network security is stronger than traditional approaches that focus only on perimeter security. If you have basic knowledge of network security architecture, take this Zero Trust certification course to learn how the Zero Trust model is applied to users, devices, applications, and network traffic.
Footprinting and Reconnaissance
If you are just starting to learn about ethical hacking, this footprinting and reconnaissance tutorial will give you foundational knowledge about this first step in the ethical hacking methodology. Ken Underhill walks you through how to use the tools for this information-gathering step and provides a hands-on opportunity to try it yourself.
Developing Ethical Hacking Tools with Python
As a cybersecurity analyst or penetration tester, you can develop tools in Python that will give you an edge. Learn to code and use Python for hacking so you can create your own tools to automate your security assessment processes. Python is easy to learn and can be very powerful when you master it.
Introduction to IT Security Policy
Every organization should have documented policies to help protect data and other valuable assets. From introducing general policy to diving into network, server, and application security, our IT Security Policy course will equip you with the knowledge and expertise you need to create and implement guiding documentation for your organization.
How to Use TOR (BSWJ)
Find your way around the dark web with this “How to Use Tor (BSWJ)” course. If you are interested in ethical hacking, learn about this tool that will allow you to surf the web anonymously and access sites outside the “clear net.” Joe Perry will show you how in this installment of “Breaking Stuff with Joe” (BSWJ).
Intermediate SQL
Ready to dive into SQL queries, aggregations, events, and database schemas? In our Intermediate SQL course, you’ll learn about these concepts; how they’re used to implement solutions and transactions that preserve data integrity; and how to utilize tools that speed up and protect development.
Check Point Jump Start
Have some networking experience, but want to become Check Point certified in Security Management architecture? This course will prepare you for their exam, #156-411. Jump start your cybersecurity career advancement today with interactive lessons and demos on deploying Check Point security management and creating security policies.
Session Hijacking
Are you preparing for an ethical hacking course or certification? Take professional cybersecurity instructor Ken Underhill’s Session Hijacking course. Learn about how an attacker takes over a session between a user and host. Explore hands-on virtual lab activities to strengthen your session hijacking skills.
Vault Fundamentals
HashiCorp Vault is a powerful secrets manager used to securely store sensitive passwords and other credentials. Jump into this Vault fundamentals course to learn how to use Vault for secure storage, robust encryption, and access management to protect your organization. Then apply what you’ve learned in our secure virtual labs.
Agile Project Management
If you’re a project manager or team leader looking to scale your IT organization, this Agile Project Management course will help your teams to succeed at a high velocity. Kane Tomlin, executive consultant at FDOT, offers you the best practices and hands-on techniques for executing Scrum methodologies.
Sumo Logic Cloud-Native Machine Data Analytics Service Fundamentals
Sumo Logic is a cloud-native machine data analytics service that allows you to quickly identify and remediate security threats and compliance issues in the cloud and hybrid environments. Learn how to leverage Sumo Logic to protect your organization by taking this Sumo Logic Cloud-Native Machine Data Analytics Service Fundamentals course.
DevSecOps Fundamentals
Do you have basic knowledge of security controls, but want to learn more about threat modeling and integrating security into DevSecOps? Our DevSecOps course will help you to incorporate security features in all parts of the development process, as well as navigate security challenges in custom software and web applications.
Check Point Jump Start: Maestro Hyperscale Network Security
Cybersecurity solution provider Check Pointt® walks you through how out to use their Maestro Hyperscale network security tool and prepares you for their exam, #156-412 at Person VUE. This Check Point Jump Start: Maestro Hyperscale Network Security course covers installing the tool and creating and configuring security groups using the interface.
Infrastructure Security
From a threat landscape overview to applying defense-in-depth at the perimeter, network, endpoint, application, and data layers, this Infrastructure Security course covers it all. Network engineers, systems engineers, and security managers will walk away with a thorough understanding of how to apply these concepts to lock down their infrastructure.
Intermediate Data Security
People care how you secure their information. Implementing data security helps avoid costly breaches and protects your organization against a loss of public trust. In our Intermediate Data Security course, you will learn the standards around PCI, PHI, and PII, including a detailed case study on the Equifax Breach.
PCI DSS: Payment Card Industry Data Security Standard
This online PCI DSS training course covers the basic aspects of the PCI Data Security Standard for handling credit card data. It’s designed for professionals working for companies that must comply with the PCI DSS and its impact on company operations.
Privileged Access Management Fundamentals
Privileged Access Management (PAM) is a mechanism that protects and monitors a company’s privileged access accounts, the ones most often targeted in criminal attacks. Master the knowledge and skills you need to protect your organization in this hands-on Privileged Access Management fundamentals course.
Business Continuity & Disaster Recovery Planning
Learn how to help your organization prepare for a crisis! Our Business Continuity and Disaster Recovery training explains the different purposes and scopes of business continuity and disaster recovery plans, the thought process needed to perform a business impact analysis, and the five layers of risk to consider when performing a risk assessment.
Intro to Cyber Threat Intelligence
As attackers and defenders continually try to outsmart one another in this evolving cybersecurity landscape, organizations need to be smart about gathering and analyzing cyber threat intelligence (CTI).This cyber threat intelligence training introduction series will cover the main definitions and concepts related to the CTI world.
Insider Threats
Interested in becoming a cyber defense analyst? You’ll need the insider threat training offered in this course. Learn how to better protect data, information, and networks from malicious insiders within an organization. This beginner course will set you on the path for a cybersecurity analyst or management role.
Windows Forensics and Tools
Do you have a basic understanding of the Windows operating system, but want to learn more about digital forensics? This Windows Forensics and Tools course focuses on building digital forensics knowledge of Microsoft Windows operating systems, as well as compatible software or tools that can be used to obtain or process information in such systems.
Raspberry Robin
Raspberry Robin is a malware family that continues to be manipulated by several different threat groups for their purposes. These threat actors (Clop, LockBit, and Evil Corp) specialize in establishing persistence on a compromised host and creating remote connections to use later. Once established, these C2 connections can be used for multiple purposes, including data exfiltration, espionage, and even further exploitation.
Double Trouble with Double Dragon
Advanced Persistent Threats (APTs) conduct state-sponsored cyberattacks that can radically disrupt global business operations. Launch this campaign to start detecting sophisticated techniques leveraged by APT41, known as "Double Dragon" because they cause double trouble with both espionage and financially-motivated attacks!
Weak Link in the Supply Chain
Threat actors known as Advanced Persistent Threats (APTs) conduct highly sophisticated attacks sponsored by nation-states. They maintain a committment to stealth and often use custom malware. This campaign emulates a supply chain attack by APT29 that is similar to the SolarWinds compromise and it has the end goal of stealing sensitive information.
Spinning a Web Shell for Initial Access
Certain threat actors specialize in targeting vulnerable web servers and gain initial access by exploiting public-facing applications. Then they act as access brokers for ransomware gangs. Such campaigns highlight the need to protect against known vulnerabilities. Understanding these techniques is key to protecting your organization.
Exfiltration and Extortion
Threat actors will use stolen data exfiltrated from victim systems to extort organizations. Once they gain a foothold, they delete critical system files and threaten to release the data or disrupt operations if the victims do not pay up. Understanding these techniques is vital to defending your organization from such attacks.
Ransomware for Financial Gain
Threat actors continue to leverage ransomware to extort victim organizations. What was once a simple scheme to encrypt target data has expanded to include data disclosure and targeting a victim’s clients or suppliers. Understanding the techniques threat actors use in these attacks is vital to having an effective detection and mitigation strategy.
Cybersecurity's Most In-Demand Training
80%
of security professionals feel inadequately prepared to defend their organization
68%
of security professionals don't believe their organization provides the right training
70%
of professionals claim their organization is impacted by the security skills shortage
See How Cybrary Has Impacted Teams Around the World
Learn how other organizations are using Cybrary to drive meaningful results.
How Cybrary Equips Cybersecurity Analysts to Defend Military Networks Against Modern Threats
Military Cyber Defense
The Cyber Defense Team (CDT) is a global task force of cybersecurity professionals who protect, detect, and respond to attacks on US military networks around the world. Their team of analysts collect and analyze data from various information systems and receive millions of alerts every day. The CDT deploys tools like forensics, malware analysis, incident response, and countermeasure development, and relies on a diverse skill set to adapt to the changing tactics of adversaries.
How PLEXSYS Increased Market Share through Employee Skill Development Case Study
Simulation Software
Continuous skill development is a vital part of training and cybersecurity today. With increased pressure on organizations to meet new guidelines and regulations on security, privacy, and personnel, finding a solution to facilitate growth, development, and retention can be just as difficult. PLEXSYS, a U.S. Federal Government contracted company, wanted a way to train their people with the best options available and provide opportunities for employees to achieve more and feel fulfilled. This case study dives into PLEXSYS’ search for the right training partner and why they ultimately chose Cybrary’s workforce development platform to meet their business needs.
How Cybrary Empowers High Touch Providers with Scalable Rapid Development
Managed Detection and Response
Managed Detection and Response (MDR) providers like this company have felt first hand the talent shortage that is plaguing the cybersecurity industry. Aiming to improve how they detect threats and respond to incidents, they looked to Cybrary as an attainable and scalable way to prepare employees for work in a Security Operations Center (SOC). With clients that depend on this company’s detection and response services, every SOC member must be able to exceed client expectations and perform at the highest level. Learn how this MDRP implemented Cybrary for their teams to be customer-ready in less time.
How Webhelp Streamlined Skill Development To Take Their Team To The Next Level
Technology Services
In order to address their clients’ unique security challenges, Webhelp must move quickly to adapt to emerging trends, threats, and technologies. But with employees on one large account dispersed across 12 countries, they struggled to find a consistent training solution to help their team stay up-to-date.Webhelp partners with Cybrary to make learning more accessible and to create tailored development plans that align to their client’s objectives. As a result, Webhelp has been able to meet their client’s evolving security training requirements, expand their team’s skill sets, and deliver best-in-class service.
