Login
13Cubed/Architecting the Hunt
Buy now

  • $295

Architecting the Hunt

  • Course
  • 32 Lessons
  • 365-day access

Great threat hunting starts with the right questions. This entry-level mini course teaches you a repeatable framework that turns guesswork into a disciplined cycle. You'll learn how to form a hypothesis, acquire the right data, apply core hunting techniques, counter the biases that derail investigations, and communicate your findings. Then practice what you learned in a hands-on lab. No prior experience needed!
Buy now

Course Contents

Welcome and Introduction

Welcome and Introduction
Foundations of Threat Hunting

What Questions Am I Trying to Answer?

Developing Context
Forming Your Questions
Forming Your Strategy
Important Concepts
Resources
Knowledge Check

What Data Do I Need?

Types of Data Available
Types of Data You Need
Knowledge Check

How Do I Acquire That Data?

Preparing Data
Data and Tool Biases
Knowledge Check

What Can I Learn From That Data?

Typical Hunt Flow
Keeping Track
Hunting Techniques
Combating Biases
Understanding Limitations
Using Tools Effectively
Knowledge Check

Closing the Loop

Have We Answered Our Questions?
The Languages of Threat Hunting
Communicating Your Findings
Cycle of Analytics and Detections
Generating Threat Intelligence
The Cycle Starts Again
Knowledge Check

Hands-On Lab

The Scenario
Getting Started
Incident Postmortem

Additional Content

🎓
Continue Your Learning

Frequently Asked Questions

Who is this course for?

Anyone new to threat hunting. It's an entry-level course, so no prior hunting experience is needed, and you'll practice everything you learn in a self-contained hands-on lab. If you're already an experienced hunter, this covers fundamentals you likely already know.

What are the hardware requirements for the hands-on lab?

The lab runs in VMware Workstation Pro (free) on a 64-bit Windows or Linux host with at least 16GB of RAM (8GB is allocated to the lab) and 20GB of free disk space. Please note that Apple Silicon-based Macs are not supported.

How long is this course?

Approximately 2 hours for the video and written content. The total time required to complete all modules/lessons and the lab is estimated at 5 to 10 hours.

How long will I have access once I purchase the course?

365-day access is included for all courses. Enjoy a 25% discount if you re-enroll after your initial access period.

🏅 Is there a certification associated with this course?

No. As this is a 13Cubed mini course, there is no associated certification.

Can I obtain a certificate of completion at the end of the course?

Yes! Upon completion of the course, you will automatically receive an email with a link to download your personalized certificate.

Will new content be added?

Yes! The content will be updated to reflect any significant changes to the topics covered in this course to ensure it remains relevant over time.

Can I suggest new topics for potential inclusion in future modules/lessons?

Yes! Contact us at info@13cubed.com.

🧑‍🤝‍🧑 Are discounts available for teams?

Yes! Volume discounts start at five (5) seats. Visit For Teams for details and flexible licensing options.