Cybersecurity Course for Beginners

Lesson 1 • Types of Cyber Threats

Surveys malware, phishing, insider threats, and denial-of-service attacks. Provides the threat vocabulary needed to discuss defences in later chapters.

Lesson 2 • Security Frameworks and Standards

Introduces widely adopted security frameworks and compliance concepts. Provides a structured vocabulary for organising security programmes.

Lesson 3 • What Cybersecurity Actually Means

Defines cybersecurity, its scope, and why it matters to individuals and organisations. Anchors all subsequent technical content in real-world relevance.

Lesson 4 • The CIA Triad Explained

Covers confidentiality, integrity, and availability as the three pillars of security. Every later control and technique maps back to protecting one or more of these properties.

Lesson 1 • How Networks Transmit Data

Explains packets, protocols, and the OSI model layers. Provides the mental model needed to understand where attacks and defences operate.

Lesson 2 • Network Devices and Segmentation

Describes routers, switches, firewalls, and DMZ architecture. Segmentation is the primary structural defence covered in later chapters.

Lesson 3 • Key Protocols and Their Risks

Examines DNS, HTTP/S, SMTP, FTP, and SSH from a security perspective. Identifies inherent weaknesses attackers exploit in each protocol.

Lesson 4 • Capturing and Analysing Traffic

Introduces packet capture tools and basic traffic analysis techniques. Hands-on traffic reading skills underpin intrusion detection work ahead.

Lesson 1 • Windows Security Architecture

Covers user accounts, the registry, and Windows security subsystems. Understanding the OS internals is prerequisite to hardening and log analysis.

Lesson 2 • Patch Management and Updates

Establishes why timely patching is the single highest-impact control. Covers patch cycles, testing, and rollback procedures.

Lesson 3 • Linux Security Architecture

Explains file permissions, user management, and the Linux security model. Linux dominates server and cloud environments targeted by attackers.

Lesson 4 • Hardening Services and Applications

Teaches disabling unnecessary services, removing default credentials, and applying CIS benchmarks. Reduces the exploitable attack surface on any system.

Lesson 1 • Cryptography Core Concepts

Introduces plaintext, ciphertext, keys, and algorithm types. Establishes the vocabulary for evaluating any encryption solution.

Lesson 2 • Hashing and Data Integrity

Explains hash functions, collision resistance, and their role in verifying data integrity. Hashing underpins password storage and digital signatures.

Lesson 3 • Common Cryptographic Weaknesses

Identifies deprecated algorithms, weak key management, and implementation flaws. Knowing failure modes prevents selecting insecure cryptographic solutions.

Lesson 4 • Public Key Infrastructure

Covers certificates, certificate authorities, and the chain of trust. PKI enables HTTPS, email signing, and VPN authentication discussed later.

Lesson 1 • Authentication Methods and Factors

Compares passwords, tokens, biometrics, and certificates as authentication factors. Multi-factor authentication is the primary control against credential attacks.

Lesson 2 • Access Control Models

Explains DAC, MAC, RBAC, and ABAC models and their appropriate use cases. Access control models determine how permissions are assigned and enforced.

Lesson 3 • Identity Lifecycle Management

Manages provisioning, role changes, and deprovisioning to prevent orphaned accounts. Stale accounts are a persistent entry point for attackers.

Lesson 4 • Multi-Factor Authentication Implementation

Covers MFA deployment, bypass risks, and phishing-resistant options. Builds on authentication factors to show how layering reduces account compromise.

Lesson 1 • Network-Based Attacks

Analyses man-in-the-middle, ARP spoofing, and denial-of-service techniques. Network attacks exploit the protocol weaknesses introduced in Chapter 2.

Lesson 2 • Malware Behaviour and Analysis

Dissects ransomware, trojans, rootkits, and fileless malware behaviour. Behavioural understanding enables detection and response covered in the next chapter.

Lesson 3 • Social Engineering Attack Techniques

Details phishing, spear-phishing, vishing, and pretexting scenarios. Human exploitation bypasses technical controls and requires awareness-based defences.

Lesson 4 • Web Application Attacks

Examines SQL injection, XSS, CSRF, and broken authentication vulnerabilities. Web apps are the most targeted attack surface in modern environments.

Lesson 1 • Endpoint Detection and Response

Introduces EDR platforms, behavioural detection, and endpoint telemetry collection. EDR extends visibility beyond the network perimeter to individual devices.

Lesson 2 • Firewall Configuration and Rules

Covers stateful inspection, rule ordering, and zone-based firewall design. Firewalls are the first enforcement point in any layered defence strategy.

Lesson 3 • Intrusion Detection and Prevention

Explains signature-based and anomaly-based IDS/IPS operation and tuning. IDS/IPS provides visibility into attacks that bypass perimeter controls.

Lesson 4 • Security Information and Event Management

Configures log ingestion, correlation rules, and dashboards in a SIEM platform. SIEM aggregates signals from all prior controls into a unified detection view.

Lesson 1 • Digital Forensics Fundamentals

Covers evidence preservation, chain of custody, and forensic imaging. Proper forensics protects legal admissibility and supports root-cause analysis.

Lesson 2 • Log Analysis During Incidents

Uses system, network, and application logs to reconstruct attack timelines. Log analysis translates raw data into the narrative needed for containment decisions.

Lesson 3 • Business Continuity and Disaster Recovery

Defines RTO, RPO, backup strategies, and failover procedures for cyber events. Recovery planning ensures organisations survive incidents with minimal operational impact.

Lesson 4 • Incident Response Lifecycle

Maps the preparation, detection, containment, eradication, recovery, and lessons-learned phases. The lifecycle provides the operational framework for all response activities.