September 2024 Content & Platform Update

September has been a busy month for OffSec! We have so many exciting updates and a new course. Let’s explore!

At the beginning of the month, we released a new course and certification in cybersecurity defense: TH-200: Foundational Threat Hunting and the OffSec Certified Threat Hunter (OSTH). 

 
Learners spend 40 hours learning the art of threat hunting, gaining the skills to understand and outmaneuver adversaries. The focus is on practical skills, to quickly identify hidden threats and protect your organization’s assets.

Key highlights of TH-200: Foundational Threat Hunting include:

• Hands-on training: Engage with practical exercises that cover network and endpoint data analysis, threat detection techniques, and more.
• Diverse threat actor tactics: Develop an understanding of how different threat actors operate and learn to uncover their hidden activities.
• Proactive hunting techniques: Learn how to detect threats without relying on IoCs (Indicators of Compromise), using custom techniques to identify emerging risks.
• Certification: Earn the OffSec Certified Threat Hunter (OSTH) certification after passing the proctored exam, demonstrating your ability to perform foundational threat hunting work.

We are also excited to bring a feature to our platform — Bookmarks. This feature enables learners to mark specific content (learning paths, modules, or labs) to return to it later for continued learning or easy review. You can use bookmarks to tag particular points of interest within a course, specific modules, sections, videos within a course, or a Learning Path or module page. Bookmarked content will appear under My Learning -> Saved so you can easily navigate to it.

Our new lab exploration feature enhances your learning experience by allowing you to navigate and discover available labs easily. When browsing the OffSec Learning Library and when you come across a lab, clicking on the Lab tile will lead you to a dedicated page that provides comprehensive details about that specific lab. You will be able to see the description of the lab, level, community rating, and number of flags. 

You are now also able to search and filter by Labs in the Library so if you want to practice, you can search for a lab and get started!

Until now learners could choose to access the lab machines via VPN and Kali in Browser for certain content.

To support our blue team learners, we’re excited to bring the Windows in Browser experience, which is very similar to the Kali in Browser experience, to more learners.

Windows in Browser (WiB) is available for the following content:

• Defensive Cyber Range (DCR)
• Offensive Cyber Range (OCR)
• SOC-200 course
• TH-200 course
• Defend Library, which includes:
  • Incident Response Learning Path
  • Vulnerability Management Learning Path
  • Digital Forensics modules

We added a new PEN-200 AWS lab focused on how to discover and enumerate AWS resources and IAM entities. It covers internet and API-based reconnaissance, including configuring AWS CLI, examining compromised credentials, and obtaining account IDs.

That’s not all! We also added 5 new AWS labs to our Offensive Cyber Range, comprising of cloud enumeration, CI/CD attack scenarios, and a container escape.

Tailor your learners’ training by adding labs to your custom learning paths and create a personalized training journey that aligns with their unique goals and requirements. 

By incorporating targeted labs, organizations can ensure that learners gain practical experience in specific areas, reinforcing theoretical knowledge with hands-on practice. This approach fosters deeper understanding and competence in critical skills.

As our learner base expands, offering personalized guidance and support for our learners becomes increasingly valuable. Implementing Knowledge AI  – KAI and offering on-demand assistance on all content can help learners stay engaged, reduce frustration, and encourage continuous learning. This scalability is particularly beneficial for large organizations that need to train large numbers of employees efficiently.

This is why we’re excited to share that OffSec KAI will now be available for all Learn Enterprise learners and it will cover all content, ensuring that they can receive the support they need and learn without interruptions and delays.