
Censys Adversary Investigation Workshop
Course Description
This hands-on technical workshop immerses participants in the core principles and practical workflows of internet-wide threat hunting using the Censys platform. Designed for security analysts, threat hunters, and SOC practitioners, the session provides a guided deep-dive into the Censys Adversary Investigation module and CensEye to help teams accelerate investigations and identify hidden or related infrastructure at scale.
This two-hour interactive workshop blends real-world threat scenarios with live platform exercises, enabling participants to transition from theoretical understanding to operational proficiency. Attendees will work directly within a live Censys environment to practice fast pivots, analyse shared attributes across assets, and develop repeatable, high‑confidence hunting patterns.
Throughout the session, participants will learn how to convert vast internet‑scale data sets into actionable intelligence, enabling SOC teams to move beyond alert fatigue and make informed, high‑impact security decisions.
By the end of the workshop, you will have created complex queries, uncovered related adversary infrastructure, and built workflows that can be immediately adapted to your organisation’s threat detection and incident response processes.
Course Handout
DownloadWho Should Attend
The Adversary Investigation workshop is designed for the following audiences:
- Systems engineers, solution architects, and pre-sales professionals supporting edge or SOC environments.
- Technical staff responsible for assisting end customers in maintaining high availability infrastructure or critical operational systems.
Agenda
- Platform & Module Overview - A guided introduction to the Censys environment, onboarding steps, and Adversary Investigation module fundamentals.
- Live Threat Hunting Exercises - Build queries analyse real-world scenarios, and develop reusable techniques you can bring back to your SOC.
- Hands-On Labs
- Building and refining queries
- Analysing real-world threat scenarios.
- Creating reusable hunting techniques.
- Applying CensEye for rapid pivoting and infrastructure correlation.
Prerequisites
Participants must have access to:
- A laptop to use for the entire session with an up-to-date HTML 5 compatible browser.
- Internet with access to censys.io and censysctf.com domains.
- Microsoft Teams.
