Advanced Cyber Security Course

Lesson 1 • Core Security Concepts and Principles

Covers CIA triad, authentication models, and trust boundaries. Anchors all subsequent technical content in a unified security framework.

Lesson 2 • Threat Landscape and Actor Taxonomy

Maps threat actors, motivations, and attack categories to real-world incidents. Enables accurate threat modelling from the outset.

Lesson 3 • Cryptography Essentials

Covers symmetric, asymmetric, and hashing algorithms with practical use cases. Underpins encryption topics in every subsequent chapter.

Lesson 4 • Risk Management Fundamentals

Introduces qualitative and quantitative risk assessment methods. Connects risk scoring to prioritised security investment decisions.

Lesson 1 • Network Hardening and Segmentation

Applies VLAN design, ACLs, and routing security to reduce attack surface. Reinforces architecture principles with hands-on configuration logic.

Lesson 2 • Intrusion Detection and Prevention Systems

Covers signature-based and behavioural IDS/IPS deployment and tuning. Connects detection logic to threat actor TTPs from Chapter 1.

Lesson 3 • Wireless Network Security

Examines Wi-Fi attack vectors and enterprise wireless hardening. Extends perimeter security concepts to radio-frequency attack surfaces.

Lesson 4 • TCP/IP Protocol Security Implications

Analyses vulnerabilities inherent in core protocols. Establishes protocol-level thinking required for all network attack and defence topics.

Lesson 1 • Post-Exploitation and Lateral Movement

Examines privilege escalation, credential harvesting, and pivoting techniques. Simulates advanced attacker behaviour to inform defensive countermeasures.

Lesson 2 • Exploitation Fundamentals

Covers exploit selection, payload staging, and controlled execution against vulnerable targets. Applies vulnerability knowledge to hands-on compromise scenarios.

Lesson 3 • Reconnaissance and OSINT Techniques

Covers passive and active information gathering against target organisations. Feeds target intelligence into later exploitation phases.

Lesson 4 • Vulnerability Scanning and Analysis

Teaches authenticated and unauthenticated scanning, CVE analysis, and false-positive reduction. Bridges discovery to prioritised exploitation planning.

Lesson 1 • Injection Attacks and Prevention

Covers SQL, command, LDAP, and template injection with exploitation and mitigation. Demonstrates how input validation failures cascade into full compromise.

Lesson 2 • Authentication and Authorisation Flaws

Analyses broken authentication, IDOR, and privilege escalation in web contexts. Reinforces zero-trust principles from Chapter 1 in application logic.

Lesson 3 • Cross-Site Scripting and CSRF

Examines reflected, stored, and DOM-based XSS alongside CSRF attack chains. Connects client-side exploitation to session hijacking and account takeover.

Lesson 4 • API Security Testing and Hardening

Covers API enumeration, mass assignment, and rate-limiting bypass techniques. Extends web security skills to modern microservice architectures.

Lesson 1 • Malware Analysis Fundamentals

Introduces static and dynamic malware analysis in isolated environments. Provides reverse-engineering vocabulary for threat intelligence and incident response.

Lesson 2 • Multi-Factor Authentication and SSO

Analyzes MFA implementations, bypass techniques, and SSO federation security. Strengthens authentication defenses against phishing and credential theft.

Lesson 3 • Endpoint Detection and Response

Covers EDR telemetry, behavioral detection rules, and threat hunting on endpoints. Connects post-exploitation TTPs to detection engineering workflows.

Lesson 4 • Privileged Access Management

Covers PAM architecture, just-in-time access, and privileged session monitoring. Reduces lateral movement risk identified in offensive chapters.

Lesson 1 • SIEM Architecture and Log Management

Covers log source onboarding, normalization, and SIEM query languages. Establishes the data foundation for all detection and hunting activities.

Lesson 2 • Alert Triage and Investigation Workflow

Establishes structured triage processes, enrichment steps, and escalation criteria. Reduces analyst fatigue and improves investigation consistency.

Lesson 3 • Threat Hunting Methodology

Covers hypothesis-driven hunting using behavioral analytics and threat intelligence. Extends detection beyond automated alerts to proactive adversary discovery.

Lesson 4 • Security Orchestration and Automation

Introduces SOAR playbook design for automated enrichment and response actions. Scales SOC capacity without proportional headcount increases.

Lesson 1 • Digital Evidence Acquisition

Covers forensically sound imaging, chain of custody, and volatile data capture. Ensures evidence admissibility and integrity throughout investigations.

Lesson 2 • Host-Based Forensic Analysis

Examines file system artifacts, registry analysis, and timeline reconstruction. Connects malware and EDR knowledge to structured forensic investigation.

Lesson 3 • Ransomware and Breach Response

Covers ransomware-specific containment, decryption options, and recovery sequencing. Applies full IR lifecycle to the most operationally disruptive attack scenario.

Lesson 4 • Incident Response Lifecycle

Maps preparation, detection, containment, eradication, and recovery phases. Provides the operational framework for all subsequent forensic and response activities.

Lesson 1 • Cloud Security Architecture Fundamentals

Covers shared responsibility models, IAM design, and cloud-native security services. Extends on-premises security architecture to multi-cloud environments.

Lesson 2 • Container and Kubernetes Security

Covers container image hardening, Kubernetes RBAC, and runtime threat detection. Addresses the dominant modern application deployment attack surface.

Lesson 3 • Advanced Persistent Threat Simulation

Simulates multi-stage APT campaigns using red team frameworks and C2 infrastructure. Validates detection and response capabilities built in Chapters 6 and 7.

Lesson 4 • Security Posture Management and Metrics

Introduces CSPM, continuous compliance monitoring, and security KPI frameworks. Translates technical controls into measurable organizational security outcomes.