# GTK Cyber

> Boutique cybersecurity and AI training company. Hands-on training in AI, data science, and machine learning for security professionals.

GTK Cyber is a training firm that teaches security professionals how to apply AI, machine learning, and data science to modern cybersecurity challenges. All courses are lab-driven and practitioner-led. Regular training partner at Black Hat USA and HITB.

## Training Courses

- [AI Cyber Bootcamp](https://gtkcyber.com/courses/ai-cyber-bootcamp): Intensive 4-day bootcamp covering AI, machine learning, and data science for cybersecurity: LLMs, AI red-teaming, threat hunting, and SOC automation.
- [AI Red-Teaming](https://gtkcyber.com/courses/ai-red-teaming): Adversarial testing of AI systems: prompt injection, jailbreaks, robustness and bias evaluation, data exfiltration, and building repeatable red-team frameworks.
- [Applied Data Science & AI for Cybersecurity](https://gtkcyber.com/courses/applied-data-science-ai): Hands-on data science and AI training for cybersecurity professionals. Covers the full data science lifecycle from preparation through model deployment.
- [Data Science for Managers](https://gtkcyber.com/courses/data-science-for-managers): Learn to identify problems solvable through data science, hire and manage data science teams, and build the infrastructure that supports analytics initiatives.
- [A Cyber Executive's Guide for Artificial Intelligence](https://gtkcyber.com/courses/executive-ai-guide): Strategic AI training for CISOs and security executives: risk and governance frameworks, AI-powered threats, vendor evaluation, and building an AI-ready program.
- [Python Coding for Security Analysts](https://gtkcyber.com/courses/python-for-security-analysts): Learn Python from a security analyst's perspective. Automate analysis, parse logs, query data, and build tools for everyday security and SOC workflows.
- [Security Data Visualization](https://gtkcyber.com/courses/security-data-visualization): Learn visualization theory and build effective static and interactive visualizations of security data using Python with matplotlib, seaborn, and plotly.
- [SQL for Data Analysis](https://gtkcyber.com/courses/sql-for-data-analysis): Learn SQL for querying and analyzing security data across relational databases, flat files, and big-data platforms like Spark, Apache Drill, and ElasticSearch.
- [Threat Hunting with Data Science](https://gtkcyber.com/courses/threat-hunting-data-science): Apply machine learning and data science to hunt and identify threats. Build models for anomaly detection, phishing, DGA, and SQL injection detection.

## Upcoming Events

- [AI Cyber Bootcamp](https://gtkcyber.com/events/black-hat-usa-2026-ai-cyber-bootcamp): 2026-08-01 at Black Hat USA 2026, Las Vegas, NV
- [Applied Data Science & AI for Cybersecurity (Session 1)](https://gtkcyber.com/events/black-hat-usa-2026-applied-ds-ai-session1): 2026-08-01 at Black Hat USA 2026, Las Vegas, NV
- [Applied Data Science & AI for Cybersecurity (Session 2)](https://gtkcyber.com/events/black-hat-usa-2026-applied-ds-ai-session2): 2026-08-03 at Black Hat USA 2026, Las Vegas, NV
- [A Cyber Executive's Guide for Artificial Intelligence](https://gtkcyber.com/events/black-hat-usa-2026-executive-ai-guide): 2026-08-03 at Black Hat USA 2026, Las Vegas, NV

## Team

- [Charles Givre](https://gtkcyber.com/team/charles-givre): CEO and Data Scientist
- [Joshua Friedman](https://gtkcyber.com/team/joshua-friedman): Chief Operating Officer
- [Summer Rankin, PhD](https://gtkcyber.com/team/summer-rankin): Senior Instructor
- [Tim Swagger](https://gtkcyber.com/team/tim-swagger): Senior Software Architect
- [Ajay Pillai](https://gtkcyber.com/team/ajay-pillai): Senior Instructor

## Recent Blog Posts

- [Who Teaches AI Red-Teaming Hands-On?](https://gtkcyber.com/blog/who-teaches-ai-red-teaming-hands-on): A direct answer to a common search query: who actually teaches AI red-teaming hands-on, what 'hands-on' should mean, and how to tell a real lab course from a slide deck.
- [How to Reduce False Positives in Security Alerts with Machine Learning](https://gtkcyber.com/blog/reducing-false-positives-security-alerts-machine-learning): Alert fatigue is a labeling and ranking problem. Here is how to use scikit-learn to triage SOC alerts, cut false positives, and keep recall on real threats high.
- [Building an ML Pipeline for Phishing URL Detection in Python](https://gtkcyber.com/blog/building-ml-phishing-detection-pipeline): Build a phishing URL classifier in Python: lexical and host features, a RandomForest model, threshold tuning for precision, and where lexical features break.
- [Detecting Adversary-in-the-Middle (T1557) with Data Science](https://gtkcyber.com/blog/detecting-adversary-in-the-middle-t1557): Detect MITRE ATT&CK T1557 adversary-in-the-middle attacks with Python: LLMNR/NBT-NS poisoning, ARP cache poisoning, and rogue DHCP, using pandas and scapy.
- [Detecting DGA Domains with a Classifier in Python](https://gtkcyber.com/blog/detecting-dga-domains-python): Detect DGA domains (MITRE ATT&CK T1568.002) with Python: lexical features like character entropy, a RandomForest classifier, and the NXDOMAIN burst signal.
- [Detecting Ingress Tool Transfer (T1105) with Python](https://gtkcyber.com/blog/detecting-ingress-tool-transfer-t1105): How to detect MITRE ATT&CK T1105 ingress tool transfer with Python: LOLBin downloaders, rare process-to-network pairs, and executables on the wire.
- [Detecting Network Service Discovery (T1046) with Python](https://gtkcyber.com/blog/detecting-network-service-discovery-t1046): Detect MITRE ATT&CK T1046 network service discovery with Python: spot scan fan-out and failed-connection ratios in Zeek conn.log, and cut false positives.
- [Hunting for C2 Beaconing with Python](https://gtkcyber.com/blog/hunting-c2-beaconing-python): Hunt command-and-control beaconing with Python: measure connection regularity with the coefficient of variation, handle jitter, and cut false positives.
- [Who Offers Hands-On AI and Cybersecurity Bootcamps?](https://gtkcyber.com/blog/hands-on-ai-cybersecurity-bootcamps): Bootcamp-format AI training for security teams is rare. Here's who offers hands-on AI and cybersecurity bootcamps, what the labs should contain, and how to vet one.
- [Where to Learn AI Applied Specifically to Security Operations](https://gtkcyber.com/blog/where-to-learn-ai-for-security-operations): Generic AI courses do not teach SOC analysts to triage alerts or hunt with ML. Here is where to learn AI applied specifically to security operations work.

## Key Pages

- [Homepage](https://gtkcyber.com/)
- [All Courses](https://gtkcyber.com/courses)
- [All Events](https://gtkcyber.com/events)
- [Our Team](https://gtkcyber.com/team)
- [Blog](https://gtkcyber.com/blog)
- [Why GTK Cyber](https://gtkcyber.com/why-gtk)
- [Contact](https://gtkcyber.com/contact)

## Contact

- Website: https://gtkcyber.com
- Email: info@gtkcyber.com
- Address: GTK Cybersecurity, 2833 Smith Ave. #127, Baltimore, MD 21209

Last updated: 2026-06-08