Cyber training

Lesson 1 • Core Concepts and Terminology

Introduces confidentiality, integrity, and availability as the foundational triad. Establishes shared vocabulary used throughout the entire course.

Lesson 2 • Asset Identification and Classification

Teaches systematic identification and classification of organisational assets by sensitivity. Enables prioritised protection aligned with business value.

Lesson 3 • Understanding the Threat Landscape

Maps current attacker categories, motivations, and common attack vectors. Connects threat awareness to proactive defensive decision-making.

Lesson 4 • Security Policies and Governance

Covers how organisations formalise security expectations through policy frameworks. Provides context for compliance-driven and risk-driven security programmes.

Lesson 1 • Firewalls, Proxies, and Access Control

Teaches how firewalls and proxies enforce traffic policies at network boundaries. Connects rule design to threat mitigation outcomes.

Lesson 2 • Core Protocols and Their Weaknesses

Examines widely used protocols and their inherent security limitations. Prepares learners to recognise protocol-level exploitation techniques.

Lesson 3 • Network Architecture and Models

Explains OSI and TCP/IP models and how each layer relates to security controls. Grounds all subsequent network security topics in a layered framework.

Lesson 4 • Network Segmentation and Zoning

Covers VLANs, DMZs, and segmentation strategies that limit lateral movement. Directly supports network hardening covered in later chapters.

Lesson 1 • System Hardening and Baseline Configuration

Applies security benchmarks to reduce attack surface on both Windows and Linux. Produces measurable, auditable secure configurations.

Lesson 2 • Windows Security Architecture

Examines Windows authentication, privilege model, and key security subsystems. Establishes the OS internals knowledge needed for hardening and attack analysis.

Lesson 3 • User and Privilege Management

Teaches least-privilege implementation and privileged account controls. Reduces insider threat and credential-based attack impact.

Lesson 4 • Audit Logging and System Monitoring

Configures OS-level logging to capture security-relevant events. Feeds into detection and incident response workflows introduced later.

Lesson 1 • Public Key Infrastructure

Explains certificate authorities, certificate lifecycle, and trust chains. Enables learners to deploy and manage PKI in enterprise environments.

Lesson 2 • Cryptographic Attacks and Weaknesses

Surveys known attacks against cryptographic implementations and weak configurations. Builds critical evaluation skills for selecting robust solutions.

Lesson 3 • Cryptographic Fundamentals

Introduces symmetric and asymmetric encryption, hashing, and key concepts. Provides the theoretical grounding for all applied cryptography topics.

Lesson 4 • Securing Data at Rest

Applies encryption to stored data including full-disk, file-level, and database encryption. Addresses key management as the critical operational challenge.

Lesson 1 • Reconnaissance and Information Gathering

Covers passive and active reconnaissance techniques used to map target environments. Builds situational awareness skills that precede exploitation attempts.

Lesson 2 • Ethical Hacking Methodology

Establishes the phases of a structured penetration test and legal authorisation requirements. Sets professional and ethical boundaries for all offensive activities.

Lesson 3 • Exploitation Techniques

Introduces common exploitation methods including buffer overflows, injection, and misconfigurations. Develops hands-on skills in a controlled lab environment.

Lesson 4 • Post-Exploitation and Reporting

Covers privilege escalation, lateral movement, and persistence after initial access. Teaches professional report writing that translates findings into business risk.

Lesson 1 • Authentication and Session Vulnerabilities

Examines broken authentication, session fixation, and credential attacks in web contexts. Connects findings to secure authentication design patterns.

Lesson 2 • Web Application Architecture

Maps client-server interaction, HTTP mechanics, and common web technology stacks. Provides the structural knowledge needed to identify application-layer weaknesses.

Lesson 3 • API Security Testing

Applies web security concepts to REST and GraphQL APIs, including authentication and data exposure risks. Prepares learners for modern application assessment scenarios.

Lesson 4 • Cross-Site Scripting and Client-Side Attacks

Teaches reflected, stored, and DOM-based XSS along with browser-based attack techniques. Develops skills to test and remediate client-side vulnerabilities.

Lesson 1 • Incident Response Process

Applies a structured six-phase incident response lifecycle to real-world scenarios. Builds coordination and decision-making skills under operational pressure.

Lesson 2 • Digital Forensics Essentials

Covers evidence acquisition, chain of custody, and forensic analysis of endpoints and logs. Supports investigation quality and legal defensibility of findings.

Lesson 3 • Threat Hunting Fundamentals

Introduces hypothesis-driven hunting using threat intelligence and behavioural analytics. Develops proactive detection skills beyond automated alerting.

Lesson 4 • Intrusion Detection and Prevention

Teaches signature-based and behavioural detection using IDS and IPS technologies. Connects detection logic to the attack techniques studied in earlier chapters.

Lesson 1 • Third-Party and Supply Chain Risk

Addresses vendor risk assessment, contractual security requirements, and supply chain attack vectors. Extends the security perimeter beyond organisational boundaries.

Lesson 2 • Business Continuity and Resilience Planning

Integrates disaster recovery and business continuity planning into the security architecture. Ensures organisational resilience against disruptive cyber events.

Lesson 3 • Enterprise Security Architecture Frameworks

Surveys major security architecture frameworks and their application to enterprise design. Provides a structured approach to building cohesive security programmes.

Lesson 4 • Security Programme Metrics and Measurement

Defines meaningful security KPIs and maturity models to track programme effectiveness. Enables data-driven security investment decisions.