Interactive Range

Blue Team

400 000 ₸

Allocated 30 Quotas

About course

The “Blue Team” course is designed to develop practical skills in protecting IT infrastructure and effectively countering cyber threats. Participants learn how to detect and respond to attacks using modern tools such as SIEM, IDS/IPS, and honeypots, working in a realistic lab environment. The course covers attack stages through the MITRE ATT&CK framework, including malware delivery and execution, as well as prevention techniques using YARA rules and whitelisting policies. Special focus is placed on threat modeling, vulnerability management (Patch Management), identification of command-and-control (C2) channels, and preventing lateral movement within networks, including Kerberos-based attacks. Participants also gain skills in using Threat Intelligence to detect and prevent attacks, as well as deception techniques against adversaries. The course concludes with Threat Hunting and building an effective incident response process. It is highly practice-oriented and develops a defender’s systematic mindset.

Special condition

Applicants for the Blue Team course undergo a preliminary selection process aimed at assessing their basic technical knowledge, analytical thinking, and strong motivation to develop in the field of cybersecurity. The selection process is based on the review of candidates’ resumes, taking into account their level of preparation, previous experience, participation in relevant projects and competitions, as well as technical skills. In addition, candidates are evaluated through CTF (Capture The Flag) challenges — practical tasks designed to assess proficiency in cybersecurity tools, system analysis, threat detection, and problem-solving abilities in non-standard technical scenarios. This approach makes it possible to form groups of highly motivated and promising participants who are prepared for intensive practical training in infrastructure protection, security monitoring, and cyber incident response.

Course details

level

For advanced

Study format

Online

Entrance exams

Duration, in weeks

Education language

Russian

Qualifications

middle

Skills

After completing the online Blue Team training program, the student will gain practical skills in detecting and responding to cyberattacks. They will learn how to analyze network traffic, identify threats, and use security monitoring tools. The student will also master incident investigation methods.

FAQ

What is the Tech Orda program?
- Tech Orda is a human capital development program in the field of IT. The program provides subsidized tunding for the training of IT specialists in private schools of the Republic of Kazakhstan.
Where will the selection of candidates for training take place?
- Acceptance and processing of applications will take place at the showcase of IT schools at astanahub.com portal.
What are the requirements for candidates?
- The basic requirements for candidates include citizenship of the Republic of Kazakhstan and the age limit from 18 to 45 years. Additional requirements depend on the IT-school / IT-company and the course you choose. It is mandatory to read all the conditions before applying for training.
How much does the training cost?
- The amount of funding per person is up to 500,000 KZT. If the training is conducted in an offline format, the program covers up to 500,000 KZT, and if the cost exceeds this amount, the student pays the difference. For online or hybrid training, the program covers up to 400,000 KZT, and if the cost is higher, the remaining amount is paid by the student. If the tuition fee is below the established limits (500,000 KZT for offline or 400,000 KZT for online/hybrid), the program covers it in full.
How long does the quota training under the Tech Orda program last?
- The training will take place from 6 months or more, depending on the Course and the IT-school you plan to enroll in.
How many IT schools participate in the program?
- The list of all IT schools is available on the showcase of IT schools at astanahub.com portal.
How many applications can I submit?
- Candidates can only apply for 5 (five) Participants of the Program.
How many scholarships/quotas can a candidate receive under the Program?
- The candidate can only study 1 (one) once within the framework of the Program. There is one exception: A student can get training in 2 (two) Courses during the duration of the Program, only provided that one takes Courses that are pre- and post-prerequisites to each other from the same Participant of the Program (IT school/IT company). For example, if you first study for a Junior Web Developer at School X in 2023 and then apply for a Middle Web Developer at the same school X in 2024.
Can a student who has completed a quota training under the Program in 2023-2024 apply again?
- A student can get training in 2 (two) Courses during the duration of the Program, only provided that one takes Courses that are pre- and post-prerequisites to each other from the same Participant of the Program (IT school/IT company).
If I studied with a Program Participant in 2023 (IT schools/IT companies), but was on the waiting list, can I apply now?
- Yes, you can. However, we recommend that you contact the Program Participant (where you have completed education) to confirm your status on the waiting list within the Program.
Is there an opportunity for a student to transfer from one IT school to another, which is also a Participant of the Tech Orda program?
- As soon as the candidate confirms his choice to apply for a grant at a certain IT-school, there is no possibility to transfer to another school. Therefore, we strongly recommend that you consider all available options before making a decision on accepting/rejecting a grant within the framework of the Program.
Should Candidates who have received a quota work out after training?
- No, such counter obligations are not provided for by Astana Hub. Other conditions may be regulated in the contract between the IT-school and the student.
Can I opt out of studying during the learning process? Is there a penalty if I don't complete the training?
- The conditions depend on the specific IT school/IT company you choose. In the school card on the showcaseof IT-schools at astanahub.com portal, there is a special 'Special conditions' section where this information can be indicated. Also, we recommend that you contact the IT school directly and find out about all the terms of the contract.
Can I study at the same time in an IT-company (EPAM) and an IT-school as part of the Program?
- No, within the framework of the Program, you can study at only one IT-school or IT-company.