For more information on courses or to schedule a private course, contact Mandiant Academy.

Explore Mandiant Academy courses

Mandiant believes in intense, hands-on training with operational case scenarios to ensure greater effectiveness. Our classes and exercises are reality-based rather than classroom mock-ups.

Introductory courses

Introduction to Cyber Crime for Executives
In-classroom (1 day) or virtual (1 day) instructor-led training.
Building a Resilient Cyber Security Program
In-classroom (2 days) or virtual (3 days) instructor-led training.
Fundamentals of Industrial Control Systems (ICS) Security
In-classroom (2 days) or virtual (3 days) instructor-led training.
Fundamentals of Cyber Security
In-classroom (4 days) or virtual (5 days) instructor-led training.

Intelligence and attribution courses

Incident response courses

Malware analysis courses

Basic Static and Dynamic Analysis
On-demand training (16 hours).

Advanced acquisition and testing techniques courses

Workshops

Election Cybersecurity Seminar
In-classroom (1 day) or virtual (1 day) instructor-led training.

Training Packages

Certifications

Upcoming and on-demand courses

View our online, instructor-led courses that are coming soon and check out the on-demand courses available to you today. All courses can also be purchased using Expertise On Demand (EOD) units.

Learn more about Mandiant Expertise On Demand (EOD).

Upcoming public courses

Fundamentals of Industrial Control Systems (ICS) Security

🗓 September 28–30, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–1:30pm Los Angeles UTC-7 • 4:00pm–9:30pm London UTC+1

Linux Enterprise Incident Response

🗓 September 28–October 1, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+1 • 3:00pm–9:30pm Singapore UTC+8

Intelligence Research II—Open Source Intelligence (OSINT)

🗓 September 29–October 1, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 3:00 PM-8:30 PM Singapore UTC+8

Linux Enterprise Incident Response

🗓 October 12–15, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 4:00pm–10:30pm London UTC+1

Fundamentals of Industrial Control Systems (ICS) Security

🗓 October 12–14, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas evening ⏾ 🕒 5:00pm–10:30pm Los Angeles UTC-7

ThreatSpace: Defend the AI Pipeline

🗓 October 13–14, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas 🌣 🕒 9:00am–5:00pm Pacific Time (US & Canada)

Threat Hunting with Google

🗓 October 19–20, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 10:00am–6:00pm New York UTC-4 • 3:00pm–11:00pm London UTC+1

Building a Resilient Cyber Security Program

🗓 October 19–21, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–1:30pm London UTC+1 • 3:00pm–8:30pm Singapore UTC+8

Windows Enterprise Incident Response

🗓 October 19–22, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 4:00pm–10:30pm London UTC+1

Creative Red Teaming

🗓 October 19–23, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+1 • 3:00pm–9:30pm Singapore UTC+8

ThreatSpace: Defend the AI Pipeline

🗓 October 20-21, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA 🌣 🕒 9:00am–5:00pm London, Edinburgh (UTC+01:00)

Cyber Intelligence for Critical Infrastructure

🗓 October 26–28, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–1:30 PM London UTC+0 • 3:00 PM–8:30 PM Singapore UTC+8

Practical Threat Hunting

🗓 October 26–29, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 3:00pm–9:30pm London UTC+0

Windows Enterprise Incident Response

🗓 October 26–29, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Creative Red Teaming

🗓 November 2–6, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Threat Intelligence and Attribution

🗓 November 3–4, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–12:30 PM London UTC+0 • 3:00 PM-7:30 PM Singapore UTC+8

Fundamentals of Industrial Control Systems (ICS) Security

🗓 November 9–11, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–1:30pm London UTC+0 • 4:00pm–9:30pm Singapore UTC+8

Fundamentals of Cyber Security

🗓 November 9–13, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Building a Resilient Cyber Security Program

🗓 November 16–18, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–1:30pm Los Angeles UTC-8 • 4:00pm–9:30pm London UTC+0

Network Traffic Analysis

🗓 November 16–19, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Practical Mobile Application Security

🗓 November 16–20, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-7 • 4:00pm–10:30pm London UTC+1

Threat Hunting with Google

🗓 November 17–18, 2026 (2 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–4:00pm London UTC+0 • 4:00pm–12:00am Singapore UTC+8

Windows Enterprise Incident Response

🗓 November 22–25, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas evening ⏾ 🕒 4:00pm–10:30pm Los Angeles UTC-8

Practical Threat Hunting

🗓 November 23–26, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Windows Enterprise Incident Response

🗓 November 23–26, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8

Linux Enterprise Incident Response

🗓 November 30–December 3, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Network Traffic Analysis

🗓 November 30–December 3, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas evening ⏾ 🕒 4:00pm–10:30pm Los Angeles UTC-8

Fundamentals of Industrial Control Systems (ICS) Security

🗓 December 1–3, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–1:30pm Los Angeles UTC-8 • 4:00pm–9:30pm London UTC+0

Incident Response for Management

🗓 December 1–3, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Network Traffic Analysis

🗓 December 1–4, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8

Incident Response for Management

🗓 December 7–9, 2026 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Cyber Intelligence Foundations

🗓 December 7–10, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8

Windows Enterprise Incident Response

🗓 December 7–10, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Practical Threat Hunting

🗓 December 7–10, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Linux Enterprise Incident Response

🗓 December 7–10, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas evening ⏾ 🕒 4:00pm–10:30pm Los Angeles UTC-8

Creative Red Teaming

🗓 December 7–11, 2026 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Linux Enterprise Incident Response

🗓 December 8–11, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8

Incident Response in Google Cloud

🗓 December 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Network Traffic Analysis

🗓 December 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Windows Enterprise Incident Response

🗓 December 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Practical Threat Hunting

🗓 December 14–17, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas evening ⏾ 🕒 4:00pm–10:30pm Los Angeles UTC-8

Practical Threat Hunting

🗓 December 15–18, 2026 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 APAC 🌣 🕒 8:00am–2:30pm Singapore UTC+8

Building a Resilient Cyber Security Program

🗓 January 25–27, 2027 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas • EMEA evening 🕒 8:00am–1:30pm Los Angeles UTC-8 • 4:00pm–9:30pm London UTC+0

Linux Enterprise Incident Response

🗓 February 1–4, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas • EMEA evening 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Building a Resilient Cyber Security Program

🗓 February 8–10, 2027 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA • APAC evening 🕒 8:00am–1:30pm London UTC+0 • 4:00pm–9:30pm Singapore UTC+8

Incident Response for Management

🗓 February 8–10, 2027 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas evening 🕒 4:00pm–10:30pm Los Angeles UTC-8

Windows Enterprise Incident Response

🗓 February 8–11, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas • EMEA evening 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Incident Response for Management

🗓 February 9–11, 2027 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8

Practical Threat Hunting

🗓 February 15–18, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA • APAC evening 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Incident Response for Management

🗓 February 16–18, 2027 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas • EMEA evening 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Linux Enterprise Incident Response

🗓 February 22–25, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA • APAC evening 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Windows Enterprise Incident Response

🗓 February 22–25, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas evening 🕒 4:00pm–10:30pm Los Angeles UTC-8

Windows Enterprise Incident Response

🗓 February 23–26, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8

Incident Response for Management

🗓 March 1–3, 2027 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA • APAC evening 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Practical Threat Hunting

🗓 March 1–4, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas • EMEA evening 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Incident Response in Google Cloud

🗓 March 8–11, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas • EMEA evening 🕒 8:00am–2:30pm Los Angeles UTC-8 • 4:00pm–10:30pm London UTC+0

Linux Enterprise Incident Response

🗓 March 15–18, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas evening 🕒 5:00pm–11:30pm Los Angeles UTC-7

Network Traffic Analysis

🗓 March 15–18, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas • EMEA evening 🕒 8:00am–2:30pm Los Angeles UTC-7 • 3:00pm–9:30pm London UTC+0

Creative Red Teaming

🗓 March 15–19, 2027 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 units

🌎 EMEA • APAC evening 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Linux Enterprise Incident Response

🗓 March 16–19, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8

Fundamentals of Industrial Control Systems (ICS) Security

🗓 March 22–24, 2027 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 Americas • EMEA evening 🕒 8:00am–2:30pm Los Angeles UTC-7 • 3:00pm–9:30pm London UTC+0

Windows Enterprise Incident Response

🗓 March 22–25, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA • APAC evening 🕒 8:00am–2:30pm London UTC+0 • 4:00pm–10:30pm Singapore UTC+8

Linux Enterprise Incident Response

🗓 April 5–8, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas • EMEA evening 🕒 8:00am–2:30pm Los Angeles UTC-7 • 4:00pm–10:30pm London UTC+1

Fundamentals of Industrial Control Systems (ICS) Security

🗓 April 12–14, 2027 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 units

🌎 EMEA • APAC evening 🕒 8:00am–2:30pm London UTC+1 • 3:00pm–9:30pm Singapore UTC+8

Network Traffic Analysis

🗓 April 12–15, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 Americas evening 🕒 5:00pm–11:30pm Los Angeles UTC-7

Network Traffic Analysis

🗓 April 13–16, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 APAC 🕒 8:00am–2:30pm Singapore UTC+8

Network Traffic Analysis

🗓 April 26–29, 2027 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 units

🌎 EMEA • APAC evening 🕒 8:00am–2:30pm London UTC+1 • 3:00pm–9:30pm Singapore UTC+8

On-demand courses

Artificial Intelligence (AI) Advantage: Elevating Cyber Defense (8 hours) $2,000 USD or 2 units Register now

Basic Static and Dynamic Analysis (16 hours) $2,000 USD or 2 units Register now

Cyber Intelligence Foundations (24 hours) $3,000 USD or 3 units or 2 Analyst Access Entitlements Register now

Cyber Intelligence Production (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now

Cyber Threat Intelligence Program Design Playbook (6 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now

Election Security (16 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now

Inside the Mind of an APT (14 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now

Intelligence Research I—Scoping (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now

Intelligence Research II—Open Source Intelligence (OSINT) (16 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now

Protecting the Perimeter: Practical Network Enrichment (8 hours) $2,000 USD or 2 units Register now

Threat Intelligence and Attribution (8 hours) $2,000 USD or 2 units or 1 Analyst Access Entitlement Register now

Take the next step

Contact Mandiant Academy to schedule a course today.

Work with a trusted partner
Find a partner
Start using Google Cloud
Go to console
Deploy ready-to-go solutions
Explore marketplace

Explore Mandiant Academy courses

Filters

Introductory courses

Intelligence and attribution courses

Incident response courses

Malware analysis courses

Advanced acquisition and testing techniques courses

Workshops

Training Packages

Certifications

Upcoming and on-demand courses

Upcoming public courses

On-demand courses

Take the next step

Work with a trusted partner

Start using Google Cloud

Deploy ready-to-go solutions