View our online, instructor-led courses that are coming soon and check out the on-demand courses available to you today. All courses can also be purchased using Expertise On Demand (EOD) units.
Learn more about Mandiant Expertise On Demand (EOD).
Windows Enterprise Incident Response
🗓 May 5–8, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 May 12–15, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
🗓 May 12–16, 2025 (5 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 May 13–16, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8 • 10:00 AM–4:30 PM Sydney UTC+10
Incident Response in Google Cloud
🗓 May 19–22, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 May 19–23, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 May 27–30, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8 • 10:00 AM–4:30 PM Sydney UTC+10
Incident Response for Management
🗓 June 2–4, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 2–5, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 9–12, 2025 (4 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening 🌣 • APAC evening ⏾ 🕒 8:00 AM–12:30 PM New York UTC-4 • 1:00 PM–5:30 PM London UTC+1 • 8:00 PM–12:30 AM Singapore UTC+8
Windows Enterprise Incident Response
🗓 June 9–12, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 June 16–19, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
🗓 June 23–26, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 23–27, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 June 30–July 1, 2025 (2 days) 💻 In-person (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Sydney, Australia 🌣 🕒 8:30 AM–4:30 PM Australia/Sydney
Windows Enterprise Incident Response
🗓 June 30–July 3, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
Linux Enterprise Incident Response
🗓 July 7–10, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 July 14–17, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Cyber Team Response Lead (CTRL) Course
🗓 July 14–18, 2025 (5 days) 💻 In-person (instructor-led) 📚 $5,750 USD or 5 EOD units
🌎 Sydney, Australia 🌣 🕒 8:30 AM–4:30 PM Australia/Sydney
🗓 July 21–24, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+1
🗓 July 21–24, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
Tabletop Exercise Train the Trainer (TTX T3)
🗓 July 22–24, 2025 (3 days) 💻 In-person (instructor-led) 📚 $4,250 USD or 4 EOD units
🌎 Sydney, Australia 🌣 🕒 8:30 AM–4:30 PM Australia/Sydney
Incident Response for Management
🗓 July 28–30, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 3:00 PM–9:30 PM London UTC+0
🗓 August 5–7, 2025 (3 days) 💻 In-person (instructor-led) 📚 $4,250 USD or 4 EOD units
🌎 Sydney, Australia 🌣 🕒 8:30 AM–4:30 PM Australia/Sydney
🗓 August 11–14, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 August 12–15, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8 • 10:00 AM–4:30 PM Sydney UTC+10
Incident Response in Google Cloud
🗓 August 18–21, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 August 18–22, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 August 25–28, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 September 8–11, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Fundamentals of Industrial Control Systems (ICS) Security
🗓 September 15–17, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–1:30 PM Los Angeles UTC-7 • 4:00 PM–9:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 September 16–19, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8 • 11:00 AM–5:30 PM Sydney UTC+11
🗓 September 22–25, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
🗓 September 22–26, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 September 22–25, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 4:00 PM–10:30 PM Singapore UTC+8
Building a Resilient Cyber Security Program
🗓 September 29–October 1, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–1:30 PM Los Angeles UTC-7 • 4:00 PM–9:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 September 29–October 2, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 October 6–9, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 October 7–10, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8 • 10:00 AM–4:30 PM Sydney UTC+10
Incident Response for Management
🗓 October 13–15, 2025 (3 days) 💻 Online (instructor-led) 📚 $3,000 USD or 3 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 October 13–16, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
🗓 October 20–23, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 October 27–30, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 October 27–30, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
ThreatSpace: Triage and Investigations Workshop
🗓 November 3–4, 2025 (2 days) 💻 In-person (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Sydney, Australia 🌣 🕒 8:30 AM–4:30 PM Australia/Sydney
Incident Response in Google Cloud
🗓 November 10–13, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 November 10–13, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 3:00 PM–9:30 PM Singapore UTC+8
🗓 November 17–21, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+1 • 3:00 PM–9:30 PM Singapore UTC+8
Windows Enterprise Incident Response
🗓 November 24–27, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 EMEA 🌣 • APAC evening ⏾ 🕒 8:00 AM–2:30 PM London UTC+0 • 4:00 PM–10:30 PM Singapore UTC+8
Cyber Team Response Lead (CTRL) Course
🗓 November 24–28, 2025 (5 days) 💻 In-person (instructor-led) 📚 $5,750 USD or 5 EOD units
🌎 Sydney, Australia 🌣 🕒 8:30 AM–4:30 PM Australia/Sydney
🗓 December 1–4, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Windows Enterprise Incident Response
🗓 December 1–4, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Linux Enterprise Incident Response
🗓 December 8–11, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
🗓 December 8–11, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-8 • 4:00 PM–10:30 PM London UTC+0
🗓 December 8–12, 2025 (5 days) 💻 Online (instructor-led) 📚 $5,000 USD or 5 EOD units
🌎 Americas 🌣 • EMEA evening ⏾ 🕒 8:00 AM–2:30 PM Los Angeles UTC-7 • 4:00 PM–10:30 PM London UTC+1
Tabletop Exercise Train the Trainer (TTX T3)
🗓 December 9–11, 2025 (3 days) 💻 In-person (instructor-led) 📚 $4,250 USD or 4 EOD units
🌎 Sydney, Australia 🌣 🕒 8:30 AM–4:30 PM Australia/Sydney
Windows Enterprise Incident Response
🗓 December 9–12, 2025 (4 days) 💻 Online (instructor-led) 📚 $4,000 USD or 4 EOD units
🌎 APAC 🌣 🕒 8:00 AM–2:30 PM Singapore UTC+8 • 11:00 AM–5:30 PM Sydney UTC+11
Essentials of Malware Analysis 16 hours $2,000 USD or 2 EOD units
Cyber Intelligence Foundations 24 hours $3,000 USD or 3 EOD units
Intelligence Research I—Scoping 8 hours $2,000 USD or 2 EOD units
Intelligence Research II—Open Source Intelligence (OSINT) 16 hours $2,000 USD or 2 EOD units
Cyber Intelligence Production 8 hours $2,000 USD or 2 EOD units
Inside the Mind of an APT 14 hours $2,000 USD or 2 EOD units
Introduction to Threat Intelligence and Attribution 8 hours $2,000 USD or 2 EOD units
Election Security 16 hours $2,000 USD or 2 EOD units
Cyber Threat Intelligence Program Design Playbook 6 hours $2,000 USD or 2 EOD units