Professional skills

Elastic Security Analyst Workshop

Name: Elastic Security Analyst Workshop
Price: 2800.00 USD
Availability: InStock

Guided study of Elastic Security detection engine, alert triage, Timeline investigation, Attack Discovery, and AI Assistant modules.

16 hours (2 days) Intermediate Elastic Stack Training

View training options Download curriculum ↓

THE BIG PICTURE

About this course

Elastic publishes a broad set of free, self-paced Elastic Security modules covering the detection engine, alerts and cases, Timeline investigation, Attack Discovery, AI Assistant, and ES|QL for security analysts. This guided session works through those modules with discussion time and practical triage exercises. Contact MindClick for the delivery format, teaching language, instructor profile, duration, dates, and a written fee proposal. Elastic, Elasticsearch, and Kibana are trademarks of Elasticsearch B.V. This listing describes training and study support on those products. It is not an official Elastic course, an Elastic certification, or a claim of authorized Elastic training-partner status. Certification exams are purchased and administered by Elastic.

What you’ll learn

Apply the "Getting started: What is Elastic?" module to a task in your own environment.
Apply the "Advanced ES|QL operations for security analysts" module to a task in your own environment.
Apply the "Getting Started: Elastic Security" module to a task in your own environment.
Apply the "Automating security operations with Elastic Workflows" module to a task in your own environment.
Apply the "Intro to Elastic Security" module to a task in your own environment.
Apply the "Elastic AI SOC Engine: EASE into Elastic Security" module to a task in your own environment.

A CLEAR PATH FORWARD

Recommended learning plan

5-day learning plan

Work through the free Elastic modules with a trainer, then apply each one to a task in your own environment.

Learning route: 5 recommended days
Practical work: 5 guided activities
Finish with: A practical review

Take a look at each day. Open a section to see the topics and practical work.

Day 1Getting started: What is Elastic? and Elastic AI SOC Engine: EASE into Elastic SecurityExplore the essentials and put them to work.

What we’ll cover

Getting started: What is Elastic?
Elastic AI SOC Engine: EASE into Elastic Security
Focus and investigate
Advanced investigations with Timelines

Put it into practice

Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.

You’ll take away
A worked example with notes you can reuse at work.

Day 2Advanced ES|QL operations for security analysts and Explore: Hosts, Network, and Users in Elastic SecurityConsolidate the material and connect it to your own context.

What we’ll cover

Advanced ES|QL operations for security analysts
Explore: Hosts, Network, and Users in Elastic Security
Attack Discovery
Machine learning for anomaly detection

Put it into practice

Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.

You’ll take away
A worked example with notes you can reuse at work.

Day 3Getting Started: Elastic Security and Detection engine basicsConsolidate the material and connect it to your own context.

What we’ll cover

Getting Started: Elastic Security
Detection engine basics
AI Assistant for Security
Actions and escalate

Put it into practice

Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.

You’ll take away
A worked example with notes you can reuse at work.

Day 4Automating security operations with Elastic Workflows and Detection engine advancedConsolidate the material and connect it to your own context.

What we’ll cover

Automating security operations with Elastic Workflows
Detection engine advanced
Visualizing data with Elastic for security analysts
Security alert triage

Put it into practice

Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.

You’ll take away
A worked example with notes you can reuse at work.

Day 5Intro to Elastic Security and Alerts and casesBring the pieces together and plan your next steps.

What we’ll cover

Intro to Elastic Security
Alerts and cases
ES|QL for security analysts

Put it into practice

Work through a guided exercise on this topic, explain your reasoning, and compare your approach with the group.

You’ll take away
A worked example with notes you can reuse at work.

Bring it all together

Review your worked examples with the trainer and agree the next steps for your own role.

Before you choose your learning route

Elastic, Elasticsearch, and Kibana are trademarks of Elasticsearch B.V. This listing describes training and study support on those products. It is not an official Elastic course, an Elastic certification, or a claim of authorized Elastic training-partner status. Certification exams are purchased and administered by Elastic.

Fees

Fee per learner outside India. Exam fees are not included.
Delivery format	Fee per learner	Exam fee
Live online	$2,800 USD	Not included
Classroom	$4,500 USD	Not included

Awarding-body exam and certification fees are not included in the training fee. Confirm the current fee, any applicable tax and what the fee covers in writing before you pay.

Prerequisites

No prior Elastic experience is required. Bring a laptop and an Elastic Cloud trial or test cluster.

Who is this course for?

SOC analysts triaging and escalating Elastic Security alerts.
Detection engineers tuning the detection engine and rules.
Threat hunters using Timeline, Attack Discovery, and ES|QL.

FIND YOUR START

Confirmed batch starts

Choose a published start, then review your offer in the same enrollment flow. A start date is not the full timetable or a seat reservation.

Choose your country & month

Oct242026

Confirmed by MindClickClassroomWeekend start