Badge holders are proficient in detecting T1134.001: Token Impersonation and Theft. They understand the steps of the TTP Threat Hunting Methodology and can apply it for specific technique detection engineering. They also understand what access tokens are, how they can be manipulated through token impersonation and theft and implement research to emulate behaviors. By emulating and testing procedures identified through research, holders can analyze and identify low variance behaviors.

• Type Certification
• Level Advanced
• Time Months
• Cost Paid