Cyber Security Training in Perungudi

• CIA Triad, AAA, and Security Principles
• Threat Actors, Attack Vectors, and Risk Management
• Security Policies, Standards, and Procedures
• NIST CSF 2.0, ISO 27001, and GDPR Overview
• Identity and Access Management (IAM) Basics
• Security Awareness Training Design
• Third-Party Risk Management (TPRM)

Beginner Draft a NIST-aligned information security policy for a mock fintech startup.

• OSI Model, TCP/IP, and Core Network Protocols
• Firewalls, IDS/IPS, and Proxy Configurations
• Network Segmentation and VLAN Security
• Packet Analysis and Traffic Monitoring with Wireshark
• Securing Wireless Networks (WPA3) and VPNs
• Software-Defined Networking (SDN) Security
• DNS Security Extensions (DNSSEC)

Beginner Configure a segmented network and capture live packets to identify simulated malicious traffic.

• Linux Command Line & File System Permissions
• Windows Active Directory (AD) Security & Group Policy
• Endpoint Detection and Response (EDR) Concepts
• System Hardening and Automated Patch Management
• Mobile Device Management (MDM) Security
• PowerShell for Security Automation
• Ransomware Behavior Analysis

Intermediate Harden a vulnerable Linux server and Windows AD environment against simulated ransomware.

• Penetration Testing Execution Standard (PTES)
• Reconnaissance and OSINT (Open Source Intelligence)
• Vulnerability Scanning with Nessus and OpenVAS
• Exploitation Techniques using Metasploit and Kali Linux
• Post-Exploitation, Privilege Escalation, and Reporting
• Social Engineering Simulations
• Active Directory Exploitation (BloodHound)

Intermediate Execute a full-scope penetration test on a mock network and deliver an executive report.

• OWASP Top 10 (2026 Updated) Vulnerabilities
• SQL Injection (SQLi), XSS, and CSRF Mitigation
• API Security Testing (OWASP API Top 10)
• Authentication Flaws and Session Management
• Secure Coding Practices for Developers
• GraphQL Security Testing
• JWT (JSON Web Token) Vulnerabilities

Intermediate Assess a vulnerable web app and API comprehensively using Burp Suite.

• SOC Architecture and Tier 1/2/3 Analyst Roles
• Log Management and SIEM Fundamentals (Microsoft Sentinel / Wazuh)
• Threat Hunting and Alert Triage
• Incident Response Lifecycle (PICERL)
• Writing Effective Incident Reports and Playbooks
• SOAR (Security Orchestration, Automation, and Response)
• Cyber Deception (Honeypots)

Intermediate to Advanced Deploy a Wazuh SIEM instance to investigate and contain a simulated malware incident.

• Shared Responsibility Model in Cloud Computing
• AWS IAM, Security Groups, and Key Management Service (KMS)
• Azure Security Center and Microsoft Defender for Cloud
• Cloud Security Posture Management (CSPM) Tools
• Securing Serverless Functions and Cloud Storage (S3/Blob)
• Kubernetes (K8s) Container Security
• Infrastructure as Code (Terraform) Security

Advanced Audit and remediate security misconfigurations in a deliberately vulnerable multi-cloud environment.

• Shift-Left Security and Secure SDLC Principles
• Static Application Security Testing (SAST) with SonarQube
• Dynamic Application Security Testing (DAST)
• Software Composition Analysis (SCA) and Dependency Scanning (Trivy)
• Securing CI/CD Pipelines (GitHub Actions, Jenkins)
• Secrets Management (HashiCorp Vault)
• Container Image Signing

Advanced Build a secure CI/CD pipeline blocking builds with critical vulnerabilities or hardcoded secrets.

• Principles of Zero Trust Architecture (ZTA)
• Micro-segmentation and Software-Defined Perimeters (SDP)
• Multi-Factor Authentication (MFA) and Passwordless Auth
• Privileged Access Management (PAM) Solutions
• Continuous Adaptive Risk and Trust Assessment (CARTA)
• Identity Threat Detection and Response (ITDR)
• Conditional Access Policies

Advanced Design a Zero Trust migration strategy for a legacy enterprise network with micro-segmentation.

• AI-Driven Threat Detection and Automated Response (SOAR)
• Adversarial Machine Learning and AI Evasion Techniques
• Securing Large Language Models (LLMs) and Prompt Injection Defense
• Data Privacy and Governance in AI Workflows
• Using AI Tools for Automated Code Review and Log Analysis
• LLM Red Teaming Methodologies
• AI Supply Chain Security

Advanced Build a secure RAG system for internal threat intel with strict access controls.

• Digital Evidence Collection and Chain of Custody
• Memory and Disk Forensics (Autopsy, Volatility)
• Static and Dynamic Malware Analysis (Sandboxing)
• Cyber Threat Intelligence (CTI) and MITRE ATT&CK Framework
• Open-Source Intelligence (OSINT) for Threat Hunting
• Network Forensics (Zeek/Suricata)
• Ransomware Decryption Techniques

Advanced Develop an automated OSINT agent to scrape, analyze, and correlate IoCs via MITRE ATT&CK.

• End-to-End Secure Network and Cloud Design
• Simulated Red Team vs. Blue Team Live Exercise
• Building a Professional Cybersecurity Portfolio (GitHub/Reports)
• Resume Building, LinkedIn Optimization, and Mock Interviews
• Final Certification Assessment and Career Roadmap Planning
• Incident Response Tabletop Exercises
• Security Metrics & KPI Reporting

Expert Deploy an MCP-powered agent connecting an LLM to SOC tools to automate incident response.