Practical security training for people who need operational fundamentals that hold up in real work.

NOCT is an expert-led education brand focused on clear, practitioner-first security instruction. Hayden Covington leads the training, writing, and point of view behind the work.

Built to turn attention into qualified training demand, beginning with Foundations of Security Operations.

View Training Explore Content

Founder and instructor

Hayden Covington

SOC SecOps Lead · Instructor · Detection Engineer

Security Operations Lead at Black Hills Information Security and instructor for Antisyphon Training. Nearly a decade of hands-on experience in Security Operations, Detection Engineering, and Incident Response.

Hayden leads detection engineering efforts, operationalizes threat intelligence, and oversees day-to-day SOC operations at BHIS. He teaches Antisyphon's Foundations of Security Operations course and is a regular contributor to the BHIS blog and security webcasts.

Twitter

GitHub

Instructor profile

Featured training

Foundations of Security Operations

Take yourself from the ground floor of "What is a SOC" to "How to detect and investigate a multi-stage attack." Build a fully functioning SOC of your own, learn SIEM and ticketing fundamentals, and write custom detections.

SOC engineers, managers, analysts, and anyone wanting to work in or better understand a SOC

On-demand · Antisyphon Training

View Course

Why NOCT

Training-first positioning, with Hayden visible as the authority behind it

The homepage leads with NOCT as the brand, but never hides the operator and instructor people are evaluating.

NOCT is a focused education brand — not a personal links page, not a corporate brochure.

Training is the clearest path forward, with Foundations of Security Operations as the flagship course.

Content is curated to reinforce credibility and demonstrate practitioner judgment.

Selected work

Curated content and resources

Selected articles, webcasts, and appearances that demonstrate practitioner expertise.

Training

Training and workshops

Instructor-led courses and workshops on SOC operations, detection engineering, SOAR, and practical AI for security workflows.

Webcast

Webcasts and talks

BHIS webcasts and guest appearances covering SOC realities, detection engineering, and measuring success in security operations.

Blog

Blog posts and resources

Written work on SOC tickets, phishing investigation, and other practitioner-focused topics published on the BHIS blog.

Current availability

Latest update

Latest updates on training availability, releases, and appearances.

Foundations of Security Operations is now available On-Demand!

The flagship NOCT course is available as an on-demand course through Antisyphon Training. Learn at your own pace — from "What is a SOC" to detecting and investigating multi-stage attacks.

View course

Primary next step

Foundations of Security Operations

Take yourself from the ground floor of "What is a SOC" to "How to detect and investigate a multi-stage attack." A practical course with a good mixture of fundamental knowledge and freedom to apply it at a more advanced level.

View Course Explore Content