Threat Detection
Network Telemetry Storytelling
Translate PCAP highlights and flow summaries into plain-language incident narratives.
- Duration
- 3 weeks
- Format
- Hybrid studio weeks
- Tuition reference
- ₩610,000
Tuition is informational only on this marketing site. For enrollment steps, use the contact form.
Schedule informationProgram narrative
Analysts who can narrate what changed on the wire earn trust faster. This course sequences small captures into storyline arcs, pairing them with ticket writing practice. You will avoid sensational language while still conveying urgency appropriate to stakeholders.
What you practice
- Five guided capture walkthroughs
- Narrative templates for bridge calls
- Peer review circles with rotating moderators
- Correlation ideas without brittle signature dependence
- Optional IPv6 extension pack
- Office-hour recordings for async learners
Artifacts you can show
- Author two incident-ready summaries from the same capture
- Compare benign versus suspicious variance in plain language
- Deliver a five-minute verbal briefing from notes only
Lead mentor
Daniel Rhee
Detection engineering mentor focused on sustainable detections rather than one-off spikes.
FAQ
We provide curated sample files compatible with common viewers. You may optionally mirror steps in your preferred desktop viewer.
Recent learner notes
My bridge call notes shrank by half and managers actually read them now.