Cyber Security Expert Course

Lesson 1 • Cryptography Essentials

This module introduces symmetric, asymmetric, and hashing algorithms and their practical uses. It builds the cryptographic literacy needed for later network and application security topics.

Lesson 2 • Risk Management Fundamentals

This module introduces risk identification, assessment, and treatment options. It connects business impact to technical security decisions.

Lesson 3 • Security Governance and Compliance

This module explains governance frameworks, policy hierarchies, and compliance obligations. It grounds technical work in organisational accountability.

Lesson 4 • Core Security Concepts and Principles

This module covers confidentiality, integrity, availability, and the CIA triad in practice. It anchors all subsequent technical topics to a unified security framework.

Lesson 1 • TCP/IP and Protocol Fundamentals

This module reviews OSI and TCP/IP models, packet structure, and common protocols. It provides the protocol literacy required for traffic analysis and attack recognition.

Lesson 2 • Secure Remote Access and VPNs

This module explains VPN protocols, tunnelling, and remote access authentication controls. It addresses the growing need for secure connectivity in distributed environments.

Lesson 3 • Firewalls and Network Segmentation

This module covers stateful firewalls, next-generation firewall features, and segmentation strategies. It directly supports perimeter and internal network defence design.

Lesson 4 • Wireless Network Security

This module covers Wi-Fi encryption standards, rogue access point threats, and enterprise wireless controls. It prepares students to secure both corporate and guest wireless environments.

Lesson 1 • Mobile and IoT Device Security

This module addresses mobile device management, IoT attack surfaces, and firmware risks. It extends endpoint security principles to non-traditional devices.

Lesson 2 • Endpoint Detection and Response

This module introduces EDR platforms, behavioural detection, and telemetry collection. It connects endpoint visibility to threat hunting and incident response workflows.

Lesson 3 • Windows Security Architecture

This module examines Windows authentication, privilege model, and built-in security features. It establishes the OS-level knowledge needed for hardening and incident response.

Lesson 4 • Endpoint Hardening Techniques

This module applies CIS benchmarks and configuration baselines to reduce attack surface. It directly reduces exploitable vulnerabilities on managed endpoints.

Lesson 1 • Reconnaissance and OSINT

This module teaches passive and active information gathering using open-source intelligence tools. It builds the attacker perspective needed to identify exposed organisational assets.

Lesson 2 • Post-Exploitation and Lateral Movement

This module covers persistence, credential harvesting, and lateral movement within compromised networks. It teaches defenders to recognise attacker behaviour after initial access.

Lesson 3 • Exploitation Techniques

This module demonstrates common exploitation methods including buffer overflows, misconfigurations, and credential attacks. It builds hands-on offensive capability in controlled lab environments.

Lesson 4 • Vulnerability Scanning and Analysis

This module covers automated scanning tools, false positive reduction, and vulnerability prioritisation. It bridges reconnaissance findings to targeted exploitation planning.

Lesson 1 • Web Application Testing and Secure SDLC

This module applies Burp Suite and manual testing techniques within a secure development lifecycle. It integrates security testing into development workflows to reduce production risk.

Lesson 2 • Web Application Architecture and Threats

This module maps client-server architecture, HTTP mechanics, and common web threat categories. It provides the structural context needed to understand web-specific attack vectors.

Lesson 3 • Injection and Input Validation Attacks

This module demonstrates SQL injection, command injection, and XXE vulnerabilities with remediation. It covers the most prevalent and damaging class of web application flaws.

Lesson 4 • Cross-Site Scripting and CSRF

This module explains reflected, stored, and DOM-based XSS alongside cross-site request forgery. It teaches both exploitation and defence for client-side attack categories.

Lesson 1 • Threat Intelligence Integration

This module introduces threat intelligence feeds, indicators of compromise, and MITRE ATT&CK mapping. It elevates detection from reactive alerting to intelligence-driven defence.

Lesson 2 • Intrusion Detection and Prevention Systems

This module explains signature-based and anomaly-based IDS/IPS operation and tuning. It connects network-level detection to the broader SOC alert pipeline.

Lesson 3 • Threat Hunting Techniques

This module teaches hypothesis-driven hunting using behavioural analytics and endpoint telemetry. It advances analyst capability beyond alert-driven detection to proactive discovery.

Lesson 4 • Log Management and SIEM Operations

This module covers log source onboarding, normalisation, and SIEM query construction. It enables analysts to extract actionable intelligence from high-volume log data.

Lesson 1 • Incident Response Lifecycle

This module defines preparation, detection, containment, eradication, recovery, and lessons-learned phases. It provides the procedural backbone for all incident handling activities.

Lesson 2 • Malware Analysis Fundamentals

This module introduces static and dynamic malware analysis in isolated lab environments. It provides the skills to characterise malware behaviour and extract indicators of compromise.

Lesson 3 • Memory and Disk Forensics

This module applies Volatility and disk analysis tools to extract artifacts from compromised systems. It enables reconstruction of attacker activity from volatile and persistent storage.

Lesson 4 • Digital Forensics Fundamentals

This module covers evidence acquisition, chain of custody, and forensic imaging principles. It ensures all investigative actions meet evidentiary integrity standards.

Lesson 1 • Zero Trust Architecture Design

This module applies zero trust principles to identity, device, and network access decisions. It provides a modern architectural alternative to perimeter-centric security models.

Lesson 2 • Cloud Security Architecture

This module covers shared responsibility models, cloud-native controls, and misconfiguration risks. It extends security architecture skills to public and hybrid cloud environments.

Lesson 3 • Advanced Persistent Threat Tactics

This module analyses APT lifecycle, living-off-the-land techniques, and supply chain attacks. It prepares defenders to counter sophisticated, long-dwell adversaries.

Lesson 4 • Business Continuity and Disaster Recovery

This module defines BCP and DR planning, RTO/RPO objectives, and resilience testing methods. It ensures security programmes account for operational continuity under adverse conditions.