Module 5: Scanning

• Scanning Concepts
  • Steps of Scanning
  • Installation of Nessus
  • Working with Nessus
  • Working of Nmap
• Scanning Technique for Port and Service Discovery
  • Various Switches of Nmap

Module 6: Enumeration

• Enumeration Concepts
• Different Techniques for Enumeration [Practical]

Module 7: Vulnerability Analysis

• Vulnerability Assessment Concepts
• Vulnerability Classification and Assessment Types

Module 8: System Hacking

• Password Cracking and Gaining Access Techniques [Practical]
• Privilege Escalation Technique [Practical]

Module 9: Windows Operating System Fundamentals [Practical]

• Investigating Windows Operating System
  • Reliability Monitor
  • Task manager cli view
  • Temp and prefetch
• Understanding Windows Event Logs
  • Event viewer
• Understanding Windows Registry
• Scheduled Tasks
• File Analysis
• SysInternals Suite
• Command Prompt

Module 10: Blue Team Operations Architecture

• What is SOC?
• Why do we need SOC?
• Functions of SOC
• Security Operation Center Models & Types
• Security Operation Center SOC Teams & Roles
• Incidents vs Events
• True vs False Incident Categories
• Concept of Logging
• Log Management & Log Analysis

Module 11: SIEM – Nervous System of SOC

• Why do we need SIEM?
• What is SIEM?
• SIEM guidelines and architecture
• SIEM Capabilities: Aggregation, Correlation, Reporting, Storage, Alerts, etc
• Using Splunk [Practical]
  • Splunk setup
  • Working of Splunk
  • UI Navigation
  • Search Queries using SPL
  • Creating Alerts & Dashboard
  • Adding logs
  • Analyzing logs

Module 12: Importance of Threat Intelligence

• What is a Threat?
• Why do we need Intelligence?
• Introduction to Threat Intelligence
• Threats, Threat Actors, APTs & Global Campaigns
• Indicator of Compromise vs. Indicator of Attack Precursors
• Collecting Threat Intelligence [Practical]
• Types of Threat Intelligence
• Enhanced Detection with Threat Intelligence

Module 13: Social Engineering

• Social Engineering Concepts and Phases
• Social Engineering Techniques
• Phishing Email Attack [Practical]

Module 14: Basics of Incident Response & Forensics

• Forensics Fundamentals
• Email Forensics
• Analyzing Phishing Emails [Practical]
• Incident Response
• Lockheed Martin Cyber Kill Chain
• MITRE ATT&CK Framework [Practical]

Module 15: Web Application Threats and Concepts

• What is a Web Application?
• How Web Application Works
• Understanding HTTP Headers and Status Codes
• OWASP Top 10
  • Broken Access Control [Practical]
  • Cryptographic Failure
  • Injection [Practical]
  • Insecure Design
  • Security Misconfiguration [Practical]
  • Vulnerable and Outdated Components
  • Identification and Authentication Failures
  • Software and Data Integrity Failures
  • Security Logging and Monitoring Failures
  • Server-Side Request Forgery [Practical]

Module 16: Cryptography

• Introduction and History of Cryptography
• Different Encryption Algorithms
  • Symmetric Encryption
  • Asymmetric Encryption
• Application of cryptography
  • PKI (Public Key Infrastructure)
  • Digital Certificate
  • Digital Signature
  • Steganography [Practical]
• Cryptanalysis [Practical]