A four-day hands-on cybersecurity course covers detection engineering, threat hunting, forensics, and incident response using tools like LimaCharlie, OpenSearch, Arkime, and Velociraptor against simulated enterprise attacks. Students investigate multiple attack chains, write detections in Sigma and YARA, hunt adversaries across endpoints and networks, and conduct a live incident response capstone in a range environment.