Enroll in Cyber Security

The Cyber Security Landscape

Explore the major domains of cyber security, key industry roles, career paths, and why organizations invest heavily in protecting digital assets today.

The CIA Triad and Security Principles

Learn confidentiality, integrity, availability, least privilege, and defense in depth, and apply them to practical examples drawn from real organizations.

Threat Actors and Attack Types

Identify hackers, insiders, criminal groups, and nation states, and review common attacks such as phishing, malware, ransomware, and denial of service.

OSI and TCP/IP Models

Understand network layers, how data is encapsulated as it travels, and how each layer relates to protocols, devices, and security concerns.

IP Addressing and Subnetting

Work with IPv4 and IPv6 addresses, subnet masks, CIDR notation, and gateways, practicing subnet calculations through hands-on exercises during the live class.

Core Protocols: DNS, DHCP, HTTP and ARP

Examine how everyday protocols function, how their requests and responses look in traffic, and where weaknesses allow attackers to abuse them.

Linux Basics and the Command Line

Set up a Linux environment, navigate the file system, and use essential commands to manage files, directories, and running processes efficiently.

Users, Permissions and Ownership

Manage users and groups, read permission bits, use chmod and chown, and understand sudo, SUID, and how misconfigurations lead to privilege escalation.

Text Processing and Bash Scripting

Use grep, awk, sed, pipes, and shell scripts to filter logs, automate repetitive security tasks, and analyze large volumes of text data.

Packet Capture with Wireshark

Capture live traffic, apply display and capture filters, and follow streams to understand conversations between hosts and spot suspicious behavior.

Command Line Analysis with tcpdump

Use tcpdump to capture and filter packets from the terminal, save captures to files, and review them later for investigation purposes.

Host Discovery and Port Scanning with Nmap

Perform ping sweeps, TCP and UDP scans, service and version detection, and OS fingerprinting while following legal and ethical scanning practices.

Firewalls, IDS and IPS

Understand how firewalls and intrusion detection and prevention systems filter and monitor traffic, and write basic rules using iptables and Snort.

Cryptography Fundamentals

Cover symmetric and asymmetric encryption, hashing, digital signatures, and certificates, and see how TLS protects data moving across networks.

Authentication and Access Control

Compare passwords, multi-factor authentication, single sign-on, and role-based access control, and learn how attackers bypass weak identity protections.

Ethical Hacking Principles and Laws

Explore hacker types, ethics, and key cyber laws, and learn why written authorization and scope define every legitimate security assessment engagement.

Penetration Testing Phases and Standards

Walk through PTES, OWASP and NIST testing frameworks, covering planning, discovery, exploitation, post-exploitation, and reporting as a repeatable professional workflow.

Scoping, Rules of Engagement and Contracts

Practice defining scope, targets, timelines, and rules of engagement, and draft the documents that protect both testers and clients.

Passive Reconnaissance and OSINT

Collect public information about organizations using search engines, WHOIS, DNS records, and OSINT tools without ever touching the target systems directly.

Active Scanning with Nmap

Use Nmap to discover hosts, open ports, services, and operating systems, and interpret scan results to map the attack surface.

Service Enumeration and Banner Analysis

Dig into SMB, FTP, SSH, SNMP and web services to extract usernames, shares, versions, and misconfigurations useful for later exploitation.

Exploitation with Metasploit Framework

Select, configure, and launch exploits and payloads in Metasploit against lab targets, understanding how each module works rather than just running it.

Password Attacks and Credential Cracking

Apply brute force, dictionary, and hash cracking with Hydra, John, and Hashcat, and learn defenses such as strong policies and MFA.

Buffer Overflows and Memory Corruption Basics

Understand stack memory, overflow conditions, and simple exploit development in a controlled lab, building foundations for deeper binary exploitation study.

OWASP Top 10 and Web Testing with Burp Suite

Use Burp Suite to intercept and modify requests while mapping the OWASP Top 10 risks in modern web applications.

SQL Injection and Cross-Site Scripting

Discover and exploit injection and XSS flaws in vulnerable apps, then apply parameterized queries and output encoding as effective remediation.

Authentication, Session and Access Control Flaws

Test login mechanisms, session tokens, and authorization logic for weaknesses like IDOR, session fixation, and privilege escalation across user roles.

Privilege Escalation on Linux and Windows

Identify misconfigurations, weak permissions, and vulnerable services that allow attackers to escalate from low-level users to administrator or root access.

Lateral Movement, Pivoting and Persistence

Learn how attackers move between systems, tunnel through compromised hosts, and maintain access, along with detection ideas for defenders.

Writing Professional Penetration Test Reports

Create clear reports with executive summaries, technical evidence, risk ratings, and actionable remediation guidance that clients can understand and implement.

Web Architecture and the OWASP Top 10

Explore how browsers, servers and databases interact, then survey the OWASP Top 10 risks that shape modern web application security testing.

SQL Injection Attacks and Defenses

Practice detecting and exploiting SQL injection in a safe lab, then apply parameterized queries and input validation to prevent it.

Cross-Site Scripting and CSRF

Examine reflected, stored and DOM-based XSS along with CSRF attacks, and implement output encoding, tokens and content security policies.

Authentication and Session Management

Analyze password storage, multi-factor authentication and session handling flaws, and learn to build login systems that resist common attacks.

OAuth, JWT and Single Sign-On

Understand token-based identity flows, spot misconfigurations in OAuth and JWT implementations, and apply secure patterns for federated login.

REST and GraphQL API Security Testing

Test APIs for broken authorization, excessive data exposure and injection using Postman and Burp Suite against the OWASP API Top 10.

Secure SDLC and Threat Modeling

Integrate security into each development phase and practice STRIDE threat modeling to find design weaknesses before code is written.

Secure Coding Practices and Code Review

Apply secure coding standards, perform manual code reviews and recognize risky patterns in languages such as Python, JavaScript and Java.

SAST, DAST and Dependency Scanning

Use static and dynamic analysis tools plus software composition analysis to uncover vulnerable code and third-party libraries automatically.

Cloud Models and Shared Responsibility

Compare IaaS, PaaS and SaaS, understand provider versus customer duties, and map common cloud threats to practical security controls.

Identity and Access Management in the Cloud

Design least-privilege policies, roles and federation, and avoid the misconfigured permissions behind many real-world cloud breaches.

Securing Cloud Storage and Networks

Protect storage buckets, virtual networks and encryption keys using security groups, private endpoints and managed key services.

Docker and Container Security

Harden container images and runtimes, scan for vulnerabilities and apply isolation techniques that limit the impact of a compromised container.

Kubernetes and Serverless Security

Secure clusters with RBAC, network policies and pod security settings, and address the unique risks of serverless functions.

Mobile Application Security Testing

Analyze Android and iOS apps for insecure storage, weak communication and reverse engineering risks using the OWASP Mobile standards.

SOC Roles, Tiers and Workflows

Explore analyst tiers, shift handovers, escalation paths and how people, process and technology combine to deliver continuous security monitoring.

Security Monitoring and Log Sources

Identify critical log sources such as firewalls, endpoints, DNS and authentication systems, and learn what each reveals about attacker behavior.

Alert Triage and Prioritization

Practice sorting alerts by severity and context, separating false positives from real threats, and documenting decisions clearly for handoff.

SIEM Architecture and Data Ingestion

Learn how SIEM collectors, parsers and indexes work, and configure log forwarding from Windows and Linux hosts into a lab environment.

Search Queries and Dashboards

Write search queries to filter, aggregate and visualize events, then build dashboards that give analysts fast situational awareness.

Writing Detection Rules and Use Cases

Design correlation rules for brute force, lateral movement and privilege escalation, and tune thresholds to reduce alert fatigue.

Threat Intelligence Lifecycle and Sources

Understand strategic, operational and tactical intelligence, evaluate open source feeds, and learn how intelligence is collected and shared.

Indicators of Compromise and Enrichment

Enrich IPs, domains and file hashes using tools like VirusTotal and MISP, and decide which indicators deserve blocking or tracking.

Hypothesis-Driven Threat Hunting

Build hunt hypotheses from ATT&CK techniques, query endpoint and network data, and record findings that improve future detections.

Incident Response Lifecycle and Playbooks

Walk through preparation, detection, containment, eradication and recovery using NIST guidance, and build playbooks for common incident types.

Disk and Memory Forensics

Acquire disk images and memory captures, then analyze artifacts with Autopsy and Volatility to uncover persistence and running malware.

Network Forensics and Packet Analysis

Analyze packet captures with Wireshark and Zeek to trace command and control traffic, data exfiltration and lateral movement.

SOAR and Security Automation

Build automated playbooks that enrich alerts, open tickets and trigger containment actions using SOAR concepts and Python scripting.

Incident Reporting and Stakeholder Communication

Write clear incident reports and executive briefings that explain impact, root cause and remediation to technical and non-technical audiences.

Business Continuity and Disaster Recovery

Plan backups, recovery objectives and failover strategies, and respond to ransomware scenarios while keeping critical services available.

Security Governance Frameworks and Policies

Explore governance structures, roles, and policy hierarchies, and learn how to draft clear security policies, standards, and procedures for organizations.

Risk Assessment and Risk Treatment

Practice identifying assets, threats, and vulnerabilities, scoring risk qualitatively and quantitatively, and choosing to mitigate, transfer, accept, or avoid each risk.

Threat Modeling and Security Architecture Review

Apply STRIDE and attack trees to model threats, then review system architectures for weaknesses and recommend layered, defense-in-depth security improvements.

ISO 27001 and NIST Cybersecurity Framework

Study the structure of ISO 27001 and the NIST CSF, mapping their controls to real organizational needs and building a practical implementation roadmap.

Privacy Laws and Data Protection

Understand GDPR, India's DPDP Act, and related privacy obligations, including consent, data subject rights, breach notification, and data protection impact assessments.

Industry Standards: PCI DSS, SOC 2 and HIPAA

Compare sector-specific compliance standards, learn their key requirements, and see how organizations scope, implement, and demonstrate compliance in practice.

Forensic Process and Chain of Custody

Learn the forensic investigation lifecycle, evidence handling rules, documentation practices, and chain of custody procedures that keep findings admissible and defensible.

Disk Imaging and File System Analysis

Create forensic disk images with write blockers, then analyze NTFS and ext4 file systems to recover deleted files and reconstruct user activity.

Memory Forensics and Volatile Data

Capture and analyze memory dumps with Volatility to uncover running processes, injected code, network connections, and credentials left behind by attackers.

Static Malware Analysis

Examine suspicious files without executing them, using hashes, strings, PE headers, and disassemblers to identify capabilities and extract indicators of compromise.

Dynamic Malware Analysis and Sandboxing

Run malware in isolated lab environments to observe behavior, monitor system and network changes, and document findings with sandbox tools and detections.

Ransomware and Advanced Persistent Threats

Study ransomware operations and APT campaigns using MITRE ATT&CK, then design prevention, detection, and recovery strategies against sophisticated adversaries.

Capstone Planning and Scoping

Define the capstone scenario, scope, rules of engagement, and success criteria, then plan an end-to-end assessment covering risk, testing, and defense.

Capstone Execution: Assess, Detect and Respond

Carry out the capstone by testing a target environment, detecting attacks in a SIEM, responding to an incident, and collecting forensic evidence.

Professional Reporting and Executive Presentation

Write a clear technical report with prioritized findings and remediation, then present results confidently to both technical teams and executive stakeholders.