Skip to main content
17d 14:18:33Fal.Con 2026 — our biggest reveals of the year.See the announcements
Academy

Device & Endpoint Security
coming soon.

We're building the Device & Endpoint Security curriculum now. Four full tracks are already live and free to start.

Start with Foundations All tracks
In short

The Device & Endpoint Security track of the Vijilan Cybersecurity Academy is in active development. Laptops, servers and mobile endpoints are where most intrusions gain their first foothold. This track will follow the endpoint from hardening to compromise to containment — how EDR telemetry is collected, what attacker behavior actually looks like on a host, and how a SOC isolates a machine without derailing the business that depends on it. Every academy track is free, and each finishes with a domain badge that counts toward the Vijilan Certified Defender capstone.

What this track will cover

  • Endpoint hardening & patch discipline
    Secure baselines, configuration drift, and why unpatched hosts remain a favorite way in.
  • How EDR works
    Process trees, telemetry sensors and behavioral detections that go beyond signatures.
  • Malware & ransomware behavior
    Persistence, privilege escalation and lateral movement — the on-host kill chain.
  • Containment & response
    Host isolation, forensic triage and recovering safely after compromise.

The full lesson list and knowledge checks land when the curriculum ships — the outline above is the shape of the course.

Live now: four free tracks

Foundations

Build the mental model every security professional needs: how attackers think, how defenders respond, and the vocabulary that connects the two. No prior experience required.

Start free
Network Security

Master the protocols, tools, and attacker techniques that define network defense. From packet analysis to firewall policy, you'll think like a SOC analyst watching every hop.

Start free
AI Detection and Response

The fastest-moving domain in security. How AI transformed detection and response, how attackers weaponize the same models, and how to defend AI systems themselves — from EDR lineage to agentic SOC operations, adversarial AI, and prompt injection.

Start free
SIEM & SOAR Engineering

The masterclass in building and operating a modern SOC stack: collecting the right telemetry, parsing and normalizing it into a common schema, engineering behavioral detections mapped to MITRE ATT&CK, and automating response with SOAR playbooks that keep a human in the loop. Written for security engineers, SOC analysts, detection engineers, and architects.

Start free