Security Blue Team Level 2 (BTL2) Training
Master static and dynamic malware analysis, complex threat hunting, adversary emulation, and vulnerability management for mid-senior defenders and DFIR specialists.
Certified Blue Team Level 2 (BTL2)
Course Overview
This course provides Advanced Security Operations training, equipping experienced defenders with specialized skills across multiple disciplines. The certification focuses on techniques actively used by threat hunters and incident response teams, covering Malware Analysis, Threat Hunting, Vulnerability Management, and Advanced SIEM. Students will learn to conduct static and dynamic analysis, perform adversary emulation, and build proactive SIEM detections to reduce organizational risk effectively.
Course Outline
- Module 1: Malware Analysis
- Setting up a Malware Analysis Home Lab
- Static Malware Analysis (Header, Strings, Functions)
- Dynamic Malware Analysis (Sandboxing, Debugging)
- Assembly Language Fundamentals
- Reverse Engineering - C Code Constructs
- Advanced Analysis Techniques
- Different Malware Types (Ransomware, Loaders, Backdoors)
- Malware Analysis Practice Scenarios
- Module 2: Threat Hunting
- Setting up a Threat Hunting Home Lab
- Endpoint Threat Hunting (Processes, Registry, File System Artifacts)
- Network Threat Hunting (Traffic Analysis, Protocols, Anomalies)
- Hunting at Scale (Using centralized platforms)
- Hunt Reflection and Report Writing
- Module 3: Advanced SIEM
- SIEM Deployment (Architecture, Data Ingestion, Optimization)
- Proactive SIEM (Building advanced correlation and detection rules)
- Adversary Emulation (Simulating TTPs to validate SIEM coverage)
- Module 4: Vulnerability Management
- Host Discovery and Asset Inventory
- Vulnerability Discovery and Scanning
- Analysis, Prioritization, & Threat Intelligence Integration
- Reporting and Remediation Strategies
Intended Audience
- Mid-Senior Security Analysts
- Mid-Senior Incident Responders
- DFIR Specialists
- Threat Hunters, and Malware Analysts
Prerequisites
2+ years security experience
Follow-On Courses
Related training topics
Justify your training
Use this sample request letter — copy it into an email to your manager and personalize the bracketed details to make the case for the time and budget.
Sample training request letter
Subject: Request for Defensive Cyber & Blue Teaming training from Applied Technology Academy
[Decision Maker Name],
I'm writing to request time and budget approval to complete Applied Technology Academy's course, Security Blue Team Level 2 (BTL2) Training. The information below outlines how this training benefits our organization, the tasks I'll be able to perform after completing it, and relevant cost and funding details.
Course Description
Master static and dynamic malware analysis, complex threat hunting, adversary emulation, and vulnerability management for mid-senior defenders and DFIR specialists. Applied Technology Academy is an award-winning, SBA-certified woman-owned training provider (est. 2008) whose instructors are active practitioners; the course is hands-on with virtual labs and a learn-by-doing methodology.
Course Objectives
Once I've completed the course, I'll have hands-on, job-ready skills in defensive cyber & blue teaming that I can apply immediately to our work.
Expected Organizational Benefits
After completing this course, I will be better equipped to apply these skills directly to our projects, reduce our reliance on outside expertise, strengthen our team's capabilities, and share what I learn with colleagues.
Expected Cost & Funding
Course fee: [request an itemized quote at the link below]. Applied Technology Academy supports multiple funding paths that may reduce or cover this cost: GSA MAS purchasing and government purchase orders, military credentialing funding (Army CA, AF COOL, CG COOL), VA GI Bill and VR&E, ATA Flexible Spending, and student financing. Private team cohorts are available if colleagues should attend with me.
Conclusion
This training provides practical, hands-on experience I can apply immediately to strengthen our work in defensive cyber & blue teaming. Additional course information is available at https://appliedtechnologyacademy.com/centri-training/security-blue-team-level-2-btl2-training-2/.
Thank you for your consideration,
[Your Name]
Related Defensive Cyber & Blue Teaming courses
Design training around your team, not the other way around.
Talk to a training advisor about private cohorts, funding paths and program management.