Module 1: Security Terminologies, OS Basics, and Network Fundamentals (Theory)

• Why do we need Security?
• Information Security vs. Cybersecurity
• CIA Triad
• Authentication, Authorization, and Accounting (AAA)
• Hacking Concepts
• Types of Hackers
  • Black Hat
  • White Hat
  • Gray Hat
  • Suicide Hacker
  • Script Kiddies
  • Hacktivist
• Domains of Cybersecurity
  • Offensive Security
  • Defensive Security
• Ethical Hacking Phases
• Types of Attacks
  • Phishing
  • Vishing
  • Smishing
  • DoS
  • Malware
  • Man in the Middle Attack
  • Insider Threat
• Network Fundamentals
  • OSI Model
  • TCP/IP
  • Network Protocols
  • IP Addressing

Module 2: Introduction to Pen-Testing (Theory)

• What is Penetration Testing?
• Difference between Ethical Hacking and Unethical Hacking
  • White-Hat Hacker vs. Black-Hat Hacker
• Need for Penetration Testing
• Vulnerability Assessment vs. Penetration Testing
• Overview of Penetration Testing Process
• Types of Penetration Testing
  • Web Application Penetration Testing
  • Mobile Application Penetration Testing
  • Cloud Penetration Testing
• Various Methodologies of Penetration Testing
  • Black box testing
  • Gray box testing
  • White box testing
• Importance of Reporting in Penetration Testing Process

Module 3: Linux Operating System Fundamentals [Practical]

• Linux Directory Services
• The most useful Linux Commands in SOC
• Events Logs in Linux
• Linux System Services

Module 4: Information Gathering/Footprinting

• Footprinting Concepts
• Footprinting through a Search Engine [Practical]
  • Using Google Dorks
  • Understanding Title, Text, and URL in Dorks
  • Shodan
  • Censys
• Footprinting Through Tools [Practical]
  • Spiderfoot
  • Netcraft
  • Harvester
  • MxToolbox
  • Eagle OSINT
• Different Techniques for Website Footprinting
  • Wappliyzer
  • Whois
  • Netcraft
  • crt.sh
  • DNS Dumpster

Module 5: Scanning

• Scanning Concepts
  • Steps of Scanning
  • Installation of Nessus
  • Working with Nessus
  • Working of Nmap
• Scanning Technique for Port and Service Discovery
  • Various Switches of Nmap

Module 6: Enumeration

• Enumeration Concepts
• Different Techniques for Enumeration [Practical]

Module 7: Vulnerability Analysis

• Vulnerability Assessment Concepts
• Vulnerability Classification and Assessment Types

Module 8: System Hacking

• Password Cracking and Gaining Access Techniques [Practical]
• Privilege Escalation Technique [Practical]

Module 9: Windows Operating System Fundamentals [Practical]

• Investigating Windows Operating System
  • Reliability Monitor
  • Task manager cli view
  • Temp and prefetch
• Understanding Windows Event Logs
  • Event viewer
• Understanding Windows Registry
• Scheduled Tasks
• File Analysis
• SysInternals Suite
• Command Prompt

Module 10: Blue Team Operations Architecture

• What is SOC?
• Why do we need SOC?
• Functions of SOC
• Security Operation Center Models & Types
• Security Operation Center SOC Teams & Roles
• Incidents vs Events
• True vs False Incident Categories
• Concept of Logging
• Log Management & Log Analysis

Module 11: SIEM – Nervous System of SOC

• Why do we need SIEM?
• What is SIEM?
• SIEM guidelines and architecture
• SIEM Capabilities: Aggregation, Correlation, Reporting, Storage, Alerts, etc
• Using Splunk [Practical]
  • Splunk setup
  • Working of Splunk
  • UI Navigation
  • Search Queries using SPL
  • Creating Alerts & Dashboard
  • Adding logs
  • Analyzing logs

Module 12: Importance of Threat Intelligence

• What is a Threat?
• Why do we need Intelligence?
• Introduction to Threat Intelligence
• Threats, Threat Actors, APTs & Global Campaigns
• Indicator of Compromise vs. Indicator of Attack Precursors
• Collecting Threat Intelligence [Practical]
• Types of Threat Intelligence
• Enhanced Detection with Threat Intelligence

Module 13: Social Engineering

• Social Engineering Concepts and Phases
• Social Engineering Techniques
• Phishing Email Attack [Practical]

Module 14: Basics of Incident Response & Forensics

• Forensics Fundamentals
• Email Forensics
• Analyzing Phishing Emails [Practical]
• Incident Response
• Lockheed Martin Cyber Kill Chain
• MITRE ATT&CK Framework [Practical]

Module 15: Web Application Threats and Concepts

• What is a Web Application?
• How Web Application Works
• Understanding HTTP Headers and Status Codes
• OWASP Top 10
  • Broken Access Control [Practical]
  • Cryptographic Failure
  • Injection [Practical]
  • Insecure Design
  • Security Misconfiguration [Practical]
  • Vulnerable and Outdated Components
  • Identification and Authentication Failures
  • Software and Data Integrity Failures
  • Security Logging and Monitoring Failures
  • Server-Side Request Forgery [Practical]

Module 16: Cryptography

• Introduction and History of Cryptography
• Different Encryption Algorithms
  • Symmetric Encryption
  • Asymmetric Encryption
• Application of cryptography
  • PKI (Public Key Infrastructure)
  • Digital Certificate
  • Digital Signature
  • Steganography [Practical]
• Cryptanalysis [Practical]