Cyber Security Training in Anna Nagar

• Introduction to cyber security and the security landscape
• Confidentiality, Integrity, and Availability (CIA triad)
• Common cyberattacks, malware, phishing, and social engineering
• Security threats, vulnerabilities, and risk concepts
• Cybersecurity careers and ethical responsibilities

Beginner Build: Identify common security threats using sample scenarios in a hands-on lab.

• TCP/IP, OSI model, IP addressing, and subnetting
• DNS, DHCP, HTTP/HTTPS, ports, and protocols
• Routers, switches, proxies, and firewalls
• Network traffic analysis and packet inspection
• Introduction to VPNs and secure communications

Intermediate Build: Analyze sample network traffic using Wireshark in a hands-on lab.

• Linux commands, files, permissions, and processes
• Windows users, groups, services, and event logs
• User privileges and access management
• System hardening and security configurations
• Basic scripting with Python or Bash for security tasks

Intermediate Build: Review system logs and harden a test machine’s security settings in a hands-on lab.

• Encryption, hashing, and digital signatures
• Symmetric and asymmetric cryptography
• Public Key Infrastructure (PKI) and TLS certificates
• Authentication, authorization, and Multi-Factor Authentication
• Identity and Access Management (IAM)

Advanced Build: Verify file hashes and configure secure access permissions in a controlled lab environment.

• Ethical hacking methodology and rules of engagement
• Information gathering and reconnaissance
• Network discovery and service enumeration
• Nmap scanning and service identification
• Security testing within authorized lab environments

Expert Build: Conduct authorized network scanning and service identification using Nmap in an isolated lab.

• HTTP requests, responses, cookies, and sessions
• OWASP Top 10 web application security risks
• SQL injection, cross-site scripting, and access-control weaknesses
• Secure authentication and session management
• Introduction to Burp Suite and OWASP ZAP
• Vulnerability validation and remediation

Advanced Build: Identify and remediate vulnerabilities in a deliberately vulnerable web application using Burp Suite or ZAP.

• Vulnerability scanning and asset discovery
• CVEs, CVSS scores, and risk prioritization
• Penetration testing phases and scope definition
• Evidence collection and safe validation
• Remediation recommendations and retesting
• Professional security assessment reports

Expert Build: Perform vulnerability assessment on a sandboxed target and produce a structured findings report.

• Security Operations Center (SOC) fundamentals
• Log collection, correlation, and analysis
• SIEM concepts, alert triage, and detection rules
• Indicators of Compromise (IoCs) and threat intelligence
• Endpoint monitoring and suspicious activity detection
• Introduction to Wazuh or another suitable SIEM platform

Capstone Build: Investigate sample alerts in a SIEM platform and document findings as part of SOC workflows.

• Incident identification, triage, and escalation
• Containment, eradication, and recovery
• Digital evidence handling and chain of custody
• Windows event analysis and forensic fundamentals
• File-system and memory-forensics concepts
• Post-incident analysis and lessons learned

Advanced Build: Investigate a simulated incident, preserve evidence, and prepare a forensic timeline.

• Cloud security principles and shared responsibility
• Cloud IAM, roles, permissions, and least privilege
• Secure storage, network configuration, and encryption
• Cloud audit logs and security monitoring
• Misconfiguration detection and remediation
• Container and infrastructure security fundamentals

Expert Build: Audit a test cloud environment and remediate misconfigurations with IAM and encryption controls.

• Security policies, risk assessment, and risk treatment
• Security audits and compliance fundamentals
• ISO 27001 and NIST Cybersecurity Framework concepts
• Data privacy, business continuity, and disaster recovery
• Supply-chain security and third-party risk
• AI-related security risks and responsible security practices

Strategic Build: Create a risk register and recommend security controls aligned with compliance frameworks.

• Plan a security project and define its scope
• Configure a safe lab environment
• Collect and analyze security evidence
• Identify risks and implement suitable fixes
• Prepare a technical report and project presentation
• Practise technical interviews and discuss project findings

Capstone Build: Deliver a documented project portfolio with technical reports, lab configurations, and interview preparation.