Module 1 : Cyber Security Fundamentals

• Introduction to Cyber Security
• Introduction to Cyber Security Roles and Responsibilities.
• Careers in Cyber Security Basic
• terminologies Elements of Information Security(CIA-Triad), Non-repudiation, Authenticity
• Motives, Goals, and objectives of Information
• Security Attacks Types of Hackers
• Information Security Threat Categories.
• Cyber Kill Chain Penetration Testing and Methodologies (PTES standard, Red teaming,
• Blue teaming)
• Cyber Security Standards(ISO 27000 family, PCI DSS, Card holder data)
• Labs: Social Engineering Phishing Phisher

Module 2 Infrastructure & Networking

• Fundamentals of Networking
• Network devices
• Internet Protocol NAT and PAT
• Understanding the OSI layer
• Overview of TCP/IP Model
• TCP and UDP
• Protocols and Ports
• Packet Tracer
• Wireshark
• Virtualization and cloud-computing
• CIS Benchmarking
• Microsoft Server
• Introduction to Server
• Types of Physical Server
• Installation of Client and Server and Best practices
• Common Server Roles and Configuration
• RAID levels
• Labs :
• OSPF Routing EIGRP Routing ACL configuration Switch configuration VLAN configuration
• VLAN Trunking Protoco

Module 3 Linux Essentials

• Kali-Installation-Configuration (Manual Partition )
• Introduction to Linux
• Linux vs Windows
• Linux fundamentals
• Basic Commands
• User Management -Permission-Process
• File System-Boot Process
• Linux booting process
• Kernel

Module 4 Offensive Security

• Scanning
• Attacks on Cyber Security
• Hacking Phases
• OSINT tools
• VPN & TOR
• Cryptography Information
• Gathering Techniques
• Scanning -Tools -Nmap
• Metasploit Framework
• Brute Force Attacks
• Enumeration
• Exploitation Vulnerable machines from Pentest Garage
• Privilege Escalation-Boot to Root

Module 5 Web Application Security

• Web Application Security
• HTTP Request and Response
• BurpSuite 101
• Owasp Top 10 Vulnerabilities

Module 6 Network Security

• Introduction to Network Security
• The Confidentiality, Integrity and Availability (CIA)
• IDS and IPS
• Firewall and Types
• AAA Security Honeypot
• Identity and Privilege Access Management
• Principles of Least privilege
• Vulnerability Management
• Data Leak Prevention
• Malware

Module 7: Introduction to Security Operations

• Understanding the Role of Security Operations
• Security Operations Center (SOC) Overview
• Security Incident Management Basics
• Incident Categorization and Severity
• Incident Reporting and Escalation Procedures
• Introduction to Security Monitoring and Logging

Lab 1: Cybersecurity Basics Hands-On

• Identifying common security threats and vulnerabilities.
• Configuring basic security controls on a virtual environment.
• Analyzing security logs and event data.

Module 8: Cyber Threats and Attack Techniques

• Common Cyber Threats and Attack Vectors
• Phishing and Social Engineering Attacks
• Malware and Ransomware Overview
• Web Application Vulnerabilities and Attacks
• Network-Based Attacks (e.g., DoS, DDoS)
• Insider Threats and Mitigation Strategies

Module 9: Incident Detection and SIEM

• Security Information and Event Management (SIEM) Fundamentals
• SIEM Configuration and Log Collection
• SIEM Rule Creation and Use Cases
• Real-Time Monitoring and Alerting
• Analyzing SIEM Reports and Dashboards
• Integrating Threat Intelligence with SIEM

Lab 2: SIEM Configuration and Alerting

• Setting up a virtual SIEM environment.
• Configuring log sources and collecting logs.
• Creating custom SIEM rules and alerts for specific scenarios.

Module 10: Incident Response and Handling

• Incident Response Lifecycle and Phases
• Incident Triage and Analysis Techniques
• Incident Containment and Eradication
• Incident Response Tools and Technologies
• Post-Incident Activities and Reporting
• Legal and Ethical Considerations in Incident Response

Lab 3: Incident Response Simulation

• Simulating a real-world incident response scenario.
• Conducting incident triage and analysis.
• Implementing containment and eradication strategies

Module 11: Threat Intelligence and Cyber Threat Hunting

• Introduction to Threat Intelligence
• Types of Threat Intelligence (Strategic, Tactical, Technical)
• Leveraging Threat Intelligence for Incident Response
• Proactive Threat Hunting Strategies
• Threat Hunting Tools and Techniques
• Collaborative Threat Intelligence Sharing

Lab 4: Threat Hunting and Intelligence Analysis

• Using threat intelligence feeds to identify potential threats.
• Performing threat hunting exercises on network data.
• Collaborating with other analysts to share threat intelligence.

Module 12: Advanced Cyber Attack Methodologies

• Advanced Persistent Threats (APTs) and Nation-State Actors
• Insider Threats and Advanced Social Engineering Techniques
• Fileless and Memory-Based Attacks
• Advanced Malware Analysis and Reverse Engineering
• Exploit Development and Vulnerability Research

Lab 5: Malware Analysis and Exploit Development

• Analyzing advanced malware samples in a controlled environment.
• Reverse engineering malicious code and understanding its behavior.
• Developing and testing exploits for known vulnerabilities

Module 13 SOC Management and Operations

• Designing and Implementing a Security Operations Center
• SOC Operational Models and Maturity Levels
• Incident Response Team Development and Management
• Security Governance, Risk, and Compliance (GRC)
• SOC Metrics, Reporting, and Performance Measurement

Lab 6: SOC Management Simulation

• Building and managing a simulated SOC environment.
• Developing incident response playbooks and procedures.
• Reporting on SOC performance metrics and KPIs

Module 14 Security Automation and Orchestration

• The Role of Automation and Orchestration in SOC
• Implementing Playbooks and Automated Response
• Integrating Security Tools and Orchestration Platforms
• Workflow Optimization and Efficiency in Incident Response
• Challenges and Considerations for SOC Automation

Lab 7: Security Automation and Orchestration

• Creating and executing automated incident response playbooks.
• Integrating security tools with an orchestration platform.
• Optimizing incident response workflows through automation.

Module 15 SPLUNK

• Introduction to splunk
• Working and Architecture of Splunk
• Splunk Enterprise Installation
• Indexing Data into Splunk
• Splunk Forwarder Installation
• How splunk indexes data
• Searching with Splunk
• Visualizing Data
• Creating Alert
• Splunk Report
• Log Creating using USE CASE
• Labs : Splunk Enterprise, Splunk Universal Forwarder, Searching with Splunk, Integration
• Alerting and Reporting, Regular Expression, Use Case Creation