OffSec Foundational Threat Hunting Training (TH-200)
TH-200 is a foundational threat hunting course designed to equip individuals with essential skills for proactively detecting and investigating cyber threats. This course focuses on behavioral analysis, threat actor profiling, and the use of network and endpoint indicators. Learners will gain proficiency in using common tools like CrowdStrike Falcon and Splunk to identify Indicators of Compromise (IoCs) and respond to threats. Upon passing the exam, learners can earn the OffSec Threat Hunter (OSTH) certification.
Foundational Threat Hunting (OSTH)
Course Overview
OffSec’s Foundational Threat Hunting (TH-200) equips cybersecurity professionals with the practical skills and knowledge needed to effectively detect and respond to threats. This course covers core threat hunting concepts, exploring the methodologies used by enterprises to track and mitigate adversaries. Key areas include understanding the threat actor landscape, with a focus on ransomware and Advanced Persistent Threats (APTs) and utilizing both network and endpoint Indicators of Compromise (IoCs) for proactive threat detection.
Upon successfully completing the rigorous hands-on exam, participants earn the OSTH – OffSec’s threat hunting certification. This credential demonstrates proficiency in foundational threat hunting practices, positioning certified professionals as valuable assets for roles in threat hunting, SOC analysis, and incident response teams.
Intended Audience
The TH-200 course is designed for individuals looking to build a strong foundation in threat hunting.
It’s ideal for:
- Security Operations Center (SOC) analysts
- IT security specialists
- Professionals aiming to transition into specialized cybersecurity roles
Course Outline
- Module 1: Threat Hunting Concepts and Practices
- Module 2: Threat Actor Landscape Overview
- Module 3: Communication and Reporting for Threat Hunters
- Module 4: Hunting with Network Data
- Module 5: Hunting on Endpoints
- Module 6: Threat Hunting without IoCs
Prerequisites
While there are no formal prerequisites, it’s strongly recommended that you have:
- A solid foundation in TCP/IP networking
- Familiarity with Linux and Windows operating systems
- Basic understanding of cybersecurity concepts
All of the above can be found in the OffSec Security Operations Essentials Learning Path, available in Learn Enterprise, Learn Unlimited, Learn One, Learn Fundamentals or a Course & Certification Bundle.
Features
- Instructor Led Training Immersive – 5 Day Immersive – $6,495
- Instructor Led Training with Expert OffSec Certified Instructors
- 5 Weeks of Guided Self Study Pre-Work
- 5 Day Immersive Live Training
- Six (6) follow on Online Live Mentoring sessions
- OffSec Learn One PEN-200 Course License
- 365 Days of Lab Access
- Two (2) exam attempts
- 1 Year of unlimited access to all OffSec Fundamental and Curated course content
- PEN-103 + 1 KLCP exam attempt
- PEN-210 + OSWP exam attempt
- Proving Grounds Practice Labs
- Downloadable Course material
- OR
- Instructor Led Training Immersive – 10 Day Immersive – $7,995
- Instructor Led Training with Expert OffSec Certified Instructors
- 5 Weeks of Guided Self Study Pre-Work
- 10 Day Immersive Live Training
- Six (6) follow on Online Live Mentoring sessions
- OffSec Learn One PEN-200 Course License
- 365 Days of Lab Access
- Two (2) exam attempts
- 1 Year of unlimited access to all OffSec Fundamental and Curated course content
- PEN-103 + 1 KLCP exam attempt
- PEN-210 + OSWP exam attempt
- Proving Grounds Practice Labs
- Downloadable Course material
- OR
- Course & Cert Exam Bundle – $1,649
- One course
- 90 days of lab access
- One exam attempt
Follow-On Courses
PROUD OFFSEC PARTNERSHIP
We are proud to be an OffSec Learning, Government, and Channel Partner. We pride
ourselves on providing award winning boot camps and direct mentoring in our classrooms,
Online Live or at your location. The only immersive Authorized Instructor-Led OffSec
training available - join us today!
Related training topics
Justify your training
Use this sample request letter — copy it into an email to your manager and personalize the bracketed details to make the case for the time and budget.
Sample training request letter
Subject: Request for Penetration Testing & Red Teaming training from Applied Technology Academy
[Decision Maker Name],
I'm writing to request time and budget approval to complete Applied Technology Academy's course, OffSec Foundational Threat Hunting Training (TH-200). The information below outlines how this training benefits our organization, the tasks I'll be able to perform after completing it, and relevant cost and funding details.
Course Description
TH-200 is a foundational threat hunting course designed to equip individuals with essential skills for proactively detecting and investigating cyber threats. This course focuses on behavioral analysis, threat actor profiling, and the use of network and endpoint indicators. Learners will gain proficiency in using common tools like CrowdStrike Falcon and Splunk to identify Indicators of Compromise (IoCs) and respond to threats. Upon passing the exam, learners can earn the OffSec Threat Hunter (OSTH) certification. Applied Technology Academy is an award-winning, SBA-certified woman-owned training provider (est. 2008) whose instructors are active practitioners; the course is hands-on with virtual labs and a learn-by-doing methodology.
Course Objectives
Once I've completed the course, I'll have hands-on, job-ready skills in penetration testing & red teaming that I can apply immediately to our work.
Expected Organizational Benefits
After completing this course, I will be better equipped to apply these skills directly to our projects, reduce our reliance on outside expertise, strengthen our team's capabilities, and share what I learn with colleagues.
Expected Cost & Funding
Course fee: [request an itemized quote at the link below]. Applied Technology Academy supports multiple funding paths that may reduce or cover this cost: GSA MAS purchasing and government purchase orders, military credentialing funding (Army CA, AF COOL, CG COOL), VA GI Bill and VR&E, ATA Flexible Spending, and student financing. Private team cohorts are available if colleagues should attend with me.
Conclusion
This training provides practical, hands-on experience I can apply immediately to strengthen our work in penetration testing & red teaming. Additional course information is available at https://appliedtechnologyacademy.com/offsec-training/offsec-foundational-threat-hunting-training-th-200/.
Thank you for your consideration,
[Your Name]
Related Penetration Testing & Red Teaming courses
Design training around your team, not the other way around.
Talk to a training advisor about private cohorts, funding paths and program management.