This course teaches you the necessary skills to becoming a successful threat hunter. As you progress through the modules, you'll build core hunting skills such as intelligence gathering, investigation techniques and remediation methods. Upon completion, you'll have the knowledge and skills to carry out cyber threat hunting activities with an organization that will ultimately deliver proactive defenses against possible debilitating data compromise.

Enjoy unlimited growth with a year of Coursera Plus for $199 (regularly $399). Save now.

(136 reviews)
Recommended experience
Skills you'll gain
- Anomaly Detection
- Endpoint Security
- Network Analysis
- Generative AI
- MITRE ATT&CK Framework
- Threat Modeling
- Event Monitoring
- Endpoint Detection and Response
- Intrusion Detection and Prevention
- Linux
- Threat Management
- System Monitoring
- Threat Detection
- Cyber Threat Intelligence
- Cyber Threat Hunting
- Security Information and Event Management (SIEM)
Details to know

Add to your LinkedIn profile
1 assignment
See how employees at top companies are mastering in-demand skills

There are 9 modules in this course
In this introductory module with Keatron Evans, you'll explore cyber threat hunting: defining it, skills required, hunt modeling with hypotheses, implementation benefits and more.
What's included
5 videos
In this module, you'll explore what's needed for a really effective threat-hunting program. You'll also learn about artifacts, indicators of compromise, tactics, techniques and procedures, the Pyramid of Pain and many more insights from Keatron.
What's included
4 videos
Explore the concepts of anomalous activity and investigation. The purpose of this module is to help the threat hunter identify whether an anomalous activity is a threat. Explore how to investigate, walking through the information and identifying any issues right away. In this course, Keatron uses generative AI to quickly find malicious activity.
What's included
6 videos
In this module, you'll explore the differences between structured and unstructured hunts with Keatron. You will also get into entity-driven hunting.
What's included
4 videos
In this course, Keatron will take you through different data sources that you may hunt through. These include SIEMs, EDR and XDR logs, threat intelligence platforms and several other data sources.
What's included
6 videos
In this course, you will learn how to build a hunt. Keatron gets into the details of all the things the learner must consider when building out a hunt and scoping. We also discuss lessons learned and proper execution.
What's included
4 videos
In this course, you'll see how different threat hunting scenarios play out. We will use real-world examples to illustrate how we form a hypothesis all the way through lessons learned.
What's included
4 videos
In this course, we will go on a deep dive with Keatron concerning network-based threats, including DNS, DDoS and irregular traffic, plus more. This course will include some labs and demonstrations. Locate even the hardest-to-find malware with these techniques.
What's included
5 videos
In this course, Keatron will walk through various host-based threats and indicators. There will be labs and demonstrations that include memory forensics, PowerShell and Windows event log parsing.
What's included
9 videos1 assignment
Instructor

Offered by
Explore more from Security
Status: PreviewStarweaver
Status: Free Trial
Status: Preview
Status: Free TrialCisco Learning and Certifications
Why people choose Coursera for their career




Learner reviews
136 reviews
- 5 stars
70.58%
- 4 stars
21.32%
- 3 stars
2.94%
- 2 stars
0%
- 1 star
5.14%
Showing 3 of 136
Reviewed on Aug 28, 2025
ouj89-yuh98 97ty8686t 86ftrtt7f9tr567c v76r578e5rws 8ou
Reviewed on Feb 15, 2024
Principles were broken down well, easy to follow, good content.
Reviewed on Jan 31, 2025
The course outline is precisely concise, to-the-point and very effective. Instructor's content delivery method is very effective. I highly appreciate the entire course.
Frequently asked questions
To access the course materials, assignments and to earn a Certificate, you will need to purchase the Certificate experience when you enroll in a course. You can try a Free Trial instead, or apply for Financial Aid. The course may offer 'Full Course, No Certificate' instead. This option lets you see all course materials, submit required assessments, and get a final grade. This also means that you will not be able to purchase a Certificate experience.
When you enroll in the course, you get access to all of the courses in the Specialization, and you earn a certificate when you complete the work. Your electronic Certificate will be added to your Accomplishments page - from there, you can print your Certificate or add it to your LinkedIn profile.
Yes. In select learning programs, you can apply for financial aid or a scholarship if you can’t afford the enrollment fee. If fin aid or scholarship is available for your learning program selection, you’ll find a link to apply on the description page.
More questions
Financial aid available,




