PG Master Diploma in Cyber Security with Cloud, DevSecOps & AI

Topics:

• Introduction to Cyber Security
• Cyber Attack Lifecycle
• Types of Threats & Vulnerabilities
• CIA Triad
• Ethical Hacking Concepts
• Security Policies & Compliance
• Risk Management Basics
• Security Operations Center (SOC)
• Incident Response Basics
• Cyber Security Career Paths

Topics:

• Networking Basics: OSI & TCP/IP models, IPv4 & IPv6 addressing, subnetting, public vs private IP, MAC addressing, DNS/DHCP/NAT, routing & switching, VLAN concepts, wireless networking basics
• Network Protocols: HTTP/HTTPS, FTP/SFTP, SSH/Telnet, SMTP/POP3/IMAP, SNMP, LDAP, SMB/NFS, ICMP
• Network Security: firewalls, IDS & IPS, VPN technologies, proxy servers, Zero Trust security, NAC basics, secure network architecture
• Networking Tools: Wireshark, Nmap, Tcpdump, Netstat, Ping & Traceroute, Dig & Nslookup

Topics:

• Linux Basics: architecture, file system, user & group management, permissions, file & directory operations, package management, process management
• Linux Administration: SSH configuration, service management, cron jobs, systemctl, disk & memory monitoring, log monitoring
• Linux Networking: network configuration, DNS settings, routing basics, firewall configuration
• Linux Security: IPTables/Firewalld, SELinux basics, Fail2Ban, SSH hardening, audit logs, Linux hardening

Topics:

• Windows Basics: architecture, file system (NTFS), user & group management, services, registry basics, Event Viewer
• Windows Administration: Active Directory basics, group policy basics, user access management, remote desktop configuration, updates & patch management
• Windows Security: Windows Defender, BitLocker, firewall configuration, account policies, endpoint protection, PowerShell security
• Windows Networking: IP configuration, DNS & DHCP basics, SMB protocol, network troubleshooting

Topics:

• Bash Scripting: variables & loops, conditional statements, functions, file operations, log monitoring scripts, automation tasks
• PowerShell Scripting: basics, cmdlets, Windows automation, user management scripts, event log monitoring, security automation

Topics:

• Python Basics: variables & data types, operators, loops & conditions, functions, file handling, exception handling
• Python for Security: socket programming, port scanner script, log parsing, API requests, automation scripts, JSON processing
• Regular Expressions: pattern matching, log filtering, input validation

Topics:

• Authentication & Authorization
• Encryption Basics
• Hashing Algorithms
• SSL/TLS Basics
• Multi-Factor Authentication
• Password Security
• Secure Coding Practices

Topics:

• Kali Linux Introduction
• Metasploit Basics
• Burp Suite Basics
• Nessus Basics
• SIEM Overview
• Endpoint Security Tools
• Vulnerability Scanning Basics

Labs & Assignments:

• Linux User & Permission Management
• Windows User & Policy Configuration
• Network Packet Analysis
• Port Scanning using Nmap
• Linux Firewall Configuration
• Windows Security Hardening
• Python Automation Scripts
• Bash & PowerShell Scripting Tasks
• Log Monitoring & Analysis

Projects:

• Project 1: Linux Server Hardening — SSH Security, Firewall Rules, User Access Controls, Audit Logging
• Project 2: Windows Security Monitoring — Event Log Monitoring, PowerShell Automation, User Activity Tracking
• Project 3: Python-Based Security Automation — Port Scanner, Log Analyzer, Basic Threat Detection Script
• Project 4: Network Traffic Analysis — Packet Capture, Suspicious Traffic Identification, Security Reporting

Scenarios:

• SOC Analyst Monitoring Scenarios
• Linux Security Troubleshooting
• Windows Endpoint Security Incidents
• Network Attack Detection
• Log Analysis & Threat Hunting
• Firewall Troubleshooting
• Patch Management Scenarios
• Security Alert Investigation

Topics:

• SOC Fundamentals: what is SOC, SOC team structure (L1/L2/L3), roles & responsibilities of SOC Analysts, Blue Team vs Red Team
• Threat Frameworks: Cyber Kill Chain, MITRE ATT&CK Framework, threat landscape overview, types of cyber attacks
• SOC Workflow: security monitoring basics, SOC workflow & incident lifecycle, alert management process, incident response basics, security operations best practices

Topics:

• Core Networking: OSI & TCP/IP models, IPv4 & IPv6, ports & protocols, DNS/DHCP/NAT
• Protocols & Security: HTTP/HTTPS, FTP/SSH/SMTP, VPN basics, firewalls, IDS & IPS, proxy servers, wireless security basics
• Traffic Analysis: packet flow analysis, network troubleshooting basics

Topics:

• Linux for SOC: file system, user management, commands, process monitoring, log analysis, SSH security, networking commands
• Windows for SOC: architecture, Event Viewer, Active Directory basics, Group Policy basics, services, Windows logs analysis, PowerShell basics

Topics:

• Monitoring Concepts: security monitoring concepts, log collection methods, types of security logs, syslog fundamentals
• Log Sources: Windows Event Logs, application logs, cloud logs, endpoint monitoring
• Monitoring Practice: real-time monitoring, alert prioritization, baseline monitoring, threat detection techniques

Topics:

• SIEM Basics: what is SIEM, SIEM architecture, log aggregation, event normalization
• SIEM Practice: correlation rules, dashboards & reporting, incident correlation, threat intelligence integration, alert tuning, use case development, SIEM best practices

Topics:

• Splunk: architecture, data inputs, indexing, SPL queries, dashboards, alerts & reports, correlation searches, Enterprise Security basics
• IBM QRadar: architecture, log sources, offense management, rules & correlation, dashboard analysis
• Microsoft Sentinel: basics, data connectors, analytics rules, workbooks, incident investigation
• ELK Stack: Elasticsearch basics, Logstash configuration, Kibana dashboards, Beats agents

Topics:

• Detection Concepts: IOC & IOA concepts, malware detection basics, threat hunting basics
• Attack Detection: brute force detection, phishing detection, suspicious login monitoring, privilege escalation detection, data exfiltration detection, ransomware indicators
• Incident Handling: incident escalation process, incident documentation

Topics:

• Endpoint Monitoring: Endpoint Detection & Response (EDR), antivirus monitoring
• Network Monitoring: firewall log monitoring, IDS/IPS monitoring, network traffic analysis, packet capture basics, proxy log analysis, VPN monitoring
• Cloud Security Monitoring

Topics:

• AWS/Azure/GCP Security Monitoring: AWS security monitoring, Azure security monitoring, GCP monitoring basics
• Cloud Logging & SIEM: CloudTrail logs, Azure Monitor, cloud SIEM concepts, cloud threat detection

Topics:

• Threat Intelligence: threat intelligence platforms, open source threat intelligence, MITRE ATT&CK mapping
• SOC Automation: SOAR basics, automation in SOC, security playbooks, alert automation, basic Python for SOC automation

Topics:

• Python for SOC: variables & loops, functions, file handling, log parsing, API basics, automation scripts
• PowerShell for SOC: Windows monitoring scripts, event log monitoring, user monitoring scripts

Labs & Assignments:

• Analyze Windows Event Logs
• Configure Syslog Server
• Splunk Dashboard Creation
• SIEM Alert Configuration
• Threat Detection Lab
• Firewall Log Monitoring
• Linux Log Analysis
• Network Packet Analysis using Wireshark
• Brute Force Detection Scenario
• PowerShell Monitoring Scripts
• Threat Hunting Exercises
• Create SIEM Correlation Rules
• Build SOC Dashboards
• Analyze Security Logs
• Configure Alerting Mechanisms
• Threat Intelligence Mapping
• Security Incident Reporting
• Network Traffic Investigation

Projects:

• Project 1: SOC Monitoring Lab — Centralized Log Collection, SIEM Integration, Real-Time Alert Monitoring
• Project 2: Splunk Security Monitoring — Dashboard Creation, Correlation Rules, Incident Alerts
• Project 3: Threat Detection & Incident Response — Malware Detection, Login Failure Monitoring, Incident Escalation Workflow
• Project 4: Cloud Security Monitoring — AWS/Azure Log Monitoring, Cloud Threat Detection, Security Reporting

Scenarios:

• Suspicious Login Detection
• Malware Alert Investigation
• Ransomware Activity Monitoring
• Firewall Traffic Analysis
• Insider Threat Detection
• Failed Login Monitoring
• Privilege Escalation Alerts
• VPN Abuse Detection
• Endpoint Security Incident Handling
• Phishing Investigation
• Cloud Security Incident Analysis

Topics:

• Ethical Hacking Basics: what is ethical hacking, types of hackers, cyber security fundamentals, ethical hacking methodology, Cyber Kill Chain
• Pentest Lifecycle: penetration testing lifecycle, types of penetration testing, vulnerability assessment vs penetration testing, legal & compliance aspects
• Foundations: OWASP Top 10 overview, information security concepts, risk/threat & vulnerability management

Topics:

• Networking Basics: OSI & TCP/IP models, IPv4 & IPv6, subnetting, ports & protocols, DNS/DHCP & NAT, routing & switching, VLAN concepts
• Network Security & Analysis: VPN technologies, firewalls, IDS & IPS, proxy servers, wireless networking basics, packet analysis fundamentals

Topics:

• Linux Basics: file system, user & permission management, networking commands, file & process management, package management
• Linux Admin & Security: SSH configuration, service management, bash scripting basics, security hardening, log analysis basics

Topics:

• Windows Basics: architecture, file system, user & group management, Active Directory basics, services
• Windows Tools & Security: PowerShell basics, Event Viewer, networking, security features, Group Policy basics

Topics:

• Recon Techniques: OSINT, WHOIS lookup, DNS enumeration, Google Dorking, email enumeration, social media reconnaissance, website information gathering, subdomain enumeration, network discovery, banner grabbing
• Tools: Maltego, Recon-ng, Shodan, theHarvester, Netcraft

Topics:

• Scanning & Enumeration: network scanning, port scanning, service enumeration, vulnerability scanning, SMB/SNMP/LDAP/NFS enumeration, web server enumeration
• Tools: Nmap, Nessus, Nikto, Enum4linux, OpenVAS

Topics:

• Vulnerability Assessment: management process, CVE & CVSS concepts, risk prioritization, patch management basics, vulnerability reporting, false positive analysis, web & system vulnerability assessment

Topics:

• Web Vulnerabilities: OWASP Top 10, SQL Injection, XSS, CSRF, file upload vulnerabilities, directory traversal, authentication bypass, session hijacking, broken access control, command injection
• Tools: Burp Suite, OWASP ZAP, SQLMap, Postman

Topics:

• Network Exploitation: exploitation basics, service & SMB exploitation, password/brute-force attacks, pivoting concepts, lateral movement basics, privilege escalation basics, exploit research
• Tools: Metasploit, Hydra, Netcat, CrackMapExec

Topics:

• Wireless Testing: networking basics, Wi-Fi security standards, wireless threats, WPA/WPA2 attacks, rogue access points, evil twin attacks, wireless packet analysis
• Tools: Aircrack-ng, Kismet, Wireshark

Topics:

• Cloud Pentesting: AWS & Azure security basics, cloud misconfigurations, IAM security concepts, S3 bucket security, cloud monitoring basics, cloud threat detection

Topics:

• Post-Exploitation: exploit development basics, reverse shell concepts, privilege escalation, persistence techniques, password dumping basics, data exfiltration concepts, covering tracks basics

Topics:

• Monitoring for Pentesters: log analysis, security monitoring, SIEM fundamentals, Splunk basics, threat detection concepts, incident response basics

Topics:

• Python for Pentesting: variables & loops, functions, file handling, socket programming, API requests, automation scripts
• Bash & PowerShell: Linux automation & enumeration scripts, PowerShell Windows automation, security monitoring scripts

Topics:

• Tools Deep Dive: Kali Linux, Metasploit, Burp Suite, Wireshark, Nmap, Nessus, SQLMap, Hydra, John the Ripper, Aircrack-ng

Labs & Assignments:

• Network Scanning Lab
• Vulnerability Assessment Lab
• SQL Injection Exploitation
• XSS Exploitation
• Password Cracking Lab
• Wireless Security Lab
• Linux Enumeration
• Windows Enumeration
• Web Application Security Testing
• SIEM Log Monitoring
• Create Pentesting Reports
• Perform OSINT Reconnaissance
• Develop Python Automation Scripts
• Perform Vulnerability Assessments
• Analyze Security Logs
• Create Exploitation Documentation

Projects:

• Project 1: Web Application Penetration Testing — Reconnaissance, Vulnerability Scanning, Exploitation, Security Reporting
• Project 2: Internal Network Penetration Test — Network Enumeration, Exploitation, Privilege Escalation, Risk Assessment
• Project 3: Wireless Security Assessment — Wireless Scanning, WPA2 Testing, Rogue AP Detection
• Project 4: Vulnerability Assessment & Reporting — Scan Enterprise Systems, Analyze Vulnerabilities, Generate Professional Reports

Scenarios:

• Web Server Compromise Investigation
• Phishing Simulation Scenario
• Internal Network Breach Simulation
• SQL Injection Attack Scenario
• Ransomware Detection Scenario
• Privilege Escalation Investigation
• Wireless Attack Investigation
• Cloud Misconfiguration Detection

Topics:

• Threat Hunting Fundamentals: what is threat hunting, methodology, proactive vs reactive security, threat hunting lifecycle, MITRE ATT&CK Framework, Cyber Kill Chain
• Concepts: Indicators of Compromise (IOC), Indicators of Attack (IOA), threat intelligence basics, threat hunting team roles, use cases, Advanced Persistent Threats (APT)

Topics:

• Networking for Threat Hunting: OSI & TCP/IP models, IPv4 & IPv6, ports & protocols, DNS & DHCP, HTTP/HTTPS analysis, VPN concepts, firewalls & IDS/IPS, proxy servers, packet flow analysis, network traffic monitoring, secure network architecture
• Tools: Wireshark, Tcpdump, Nmap, Netstat, Zeek basics

Topics:

• Linux for Threat Hunting: file system, user & group management, process monitoring, networking commands, log analysis, SSH security, cron job monitoring, service monitoring, security hardening, malware indicators

Topics:

• Windows Security Monitoring: architecture, Windows Event Logs, PowerShell basics, Active Directory basics, user activity monitoring, services monitoring, registry monitoring, Windows Defender, security features, endpoint monitoring

Topics:

• Hunting Methodologies: hypothesis-driven hunting, IOC-based hunting, behavioral analysis, threat modeling, attack surface analysis, malware analysis basics
• Hunting Practice: threat hunting workflow, threat prioritization & validation, hunting for persistence mechanisms, lateral movement detection, privilege escalation detection

Topics:

• SIEM Fundamentals: log aggregation, event correlation, dashboards & alerts, correlation rules, security analytics
• Splunk: SPL queries, threat detection searches, dashboard creation, alert tuning
• ELK Stack: Elasticsearch basics, Kibana dashboards, Logstash configuration
• Microsoft Sentinel: analytics rules, incident investigation, threat detection workbooks

Topics:

• EDR Fundamentals: EDR concepts, endpoint monitoring, process analysis, suspicious behavior detection, malware detection, ransomware indicators, persistence detection, endpoint telemetry
• Tools: Microsoft Defender, CrowdStrike, SentinelOne, Carbon Black

Topics:

• Threat Intelligence: platforms, IOC feeds, MITRE ATT&CK mapping & techniques, adversary emulation, threat actor profiling, IOC enrichment, threat intelligence automation

Topics:

• SOAR Fundamentals: what is SOAR, automation vs orchestration, security playbooks, incident automation, automated alerting, workflow & ticketing automation, threat response automation

Topics:

• Python Basics: variables & data types, loops & conditions, functions, file handling, exception handling
• Python for Threat Hunting: log parsing, IOC matching, API integration, threat intelligence automation, alert automation, security reporting, SIEM API integration, email alerting scripts

Topics:

• PowerShell Automation: Windows monitoring scripts, event log analysis, user & process monitoring
• Bash Automation: Linux log monitoring, file integrity monitoring, process monitoring scripts

Topics:

• Cloud Threat Hunting: AWS/Azure/GCP security monitoring, CloudTrail analysis, Azure Sentinel integration, cloud threat detection, cloud misconfiguration hunting

Topics:

• Detection Techniques: brute force, phishing, DNS tunneling, insider threat, data exfiltration, malware beaconing, suspicious login, privilege abuse, command & control detection, persistence hunting

Topics:

• Reporting: threat hunting reports, incident documentation, executive security reports, IOC documentation, threat intelligence reporting, security metrics & KPIs

Labs & Assignments:

• Splunk Threat Hunting Queries
• IOC Detection Lab
• Threat Intelligence Integration
• Windows Event Log Analysis
• Linux Log Monitoring
• Suspicious Process Detection
• Python Automation Scripts
• Malware IOC Analysis
• Network Traffic Analysis
• MITRE ATT&CK Mapping
• Create Threat Hunting Playbooks
• Develop Automation Scripts
• Build SIEM Dashboards
• Perform IOC-Based Hunting
• Analyze Endpoint Telemetry
• Create Security Reports

Projects:

• Project 1: Enterprise Threat Hunting Lab — Log Aggregation, IOC Detection, Alert Investigation, Threat Reporting
• Project 2: SIEM-Based Threat Detection — Correlation Rule Creation, Dashboard Development, Automated Alerting
• Project 3: Python-Based Security Automation — IOC Matching Tool, Automated Threat Reports, Email Alerting System
• Project 4: Cloud Threat Monitoring — AWS/Azure Monitoring, Threat Detection, Incident Response Workflow

Scenarios:

• Ransomware Threat Hunting
• Insider Threat Investigation
• Brute Force Detection
• Malware Infection Investigation
• Data Exfiltration Detection
• Phishing Attack Investigation
• Lateral Movement Analysis
• Cloud Threat Monitoring
• Persistence Mechanism Detection
• SIEM Alert Tuning

Topics:

• DevSecOps Foundations: what is DevSecOps, DevOps vs DevSecOps, SDLC & Secure SDLC, Shift Left security, DevSecOps lifecycle, CI/CD security concepts
• Culture & Governance: DevSecOps culture & best practices, security in Agile & DevOps, threat modeling basics, risk management fundamentals, compliance & governance overview, roles & responsibilities

Topics:

• Networking Fundamentals: OSI & TCP/IP models, IP addressing basics, DNS/DHCP & NAT, ports & protocols
• Network Security: firewalls, VPN concepts, IDS & IPS, reverse proxy concepts, load balancer security, network segmentation, Zero Trust security basics

Topics:

• Linux for DevSecOps: file system, user & permission management, networking commands, process & package management, SSH hardening, firewall configuration, SELinux basics, system monitoring, security hardening

Topics:

• Bash Scripting: variables & loops, conditional statements, automation scripts, log monitoring scripts
• Python: variables & functions, file handling, API requests, security automation scripts, log parsing scripts
• PowerShell: Windows automation, security monitoring scripts

Topics:

• Git & GitHub/GitLab: basics, branching & merging, pull requests, security best practices, secret management in Git
• Secure Coding: OWASP Top 10, secure development guidelines, code review process, dependency security, input validation, authentication & authorization basics

Topics:

• Jenkins: architecture, secure configuration, pipeline security, credentials management, role-based access control
• GitHub Actions / GitLab CI: secure CI/CD pipelines, secrets management, pipeline hardening
• Build Security: CI/CD security best practices, artifact signing, build validation, secure deployment pipelines

Topics:

• Docker Fundamentals: architecture, container lifecycle, Dockerfile best practices
• Container Hardening: image security, vulnerability scanning, runtime security, secrets management, Docker Bench Security
• Tools: Trivy, Clair, Docker Bench, Anchore

Topics:

• Kubernetes Security: architecture, cluster security, RBAC configuration, pod security, network policies, namespace isolation, secrets management, admission controllers, hardening, secure deployments, logging & monitoring
• Tools: kube-bench, kube-hunter, Falco, Kyverno

Topics:

• AWS Security: IAM security, security groups, CloudTrail, GuardDuty, S3 security, Secrets Manager
• Azure Security: Security Center, Key Vault, Defender, IAM
• GCP Security: IAM management, cloud logging, security basics

Topics:

• SAST: SonarQube, Checkmarx basics, code security analysis
• DAST: OWASP ZAP, Burp Suite basics
• Dependency & Container Scanning: Snyk, OWASP Dependency Check, Trivy, Clair

Topics:

• Logging & SIEM: security logging concepts, centralized log management, SIEM fundamentals, Splunk basics, ELK Stack basics, threat detection, security monitoring dashboards, alerting mechanisms

Topics:

• Security Automation & SOAR: automation basics, incident response automation, security playbooks, automated threat detection, SOAR concepts, Python automation scripts, API-based automation

Topics:

• Terraform Security: secure Terraform practices, secret management, Terraform scanning
• Tools: Checkov, tfsec
• IaC Best Practices: compliance validation, infrastructure hardening

Topics:

• Compliance & Governance: CIS Benchmarks, NIST Framework, ISO 27001 basics, PCI-DSS basics, GDPR overview, security policies, audit logging, compliance monitoring

Topics:

• Incident Response: lifecycle, threat detection, malware basics, ransomware indicators, security alert investigation, threat hunting basics, root cause analysis

Labs & Assignments:

• Secure Jenkins Pipeline Setup
• Docker Image Hardening
• Kubernetes RBAC Configuration
• Vulnerability Scanning Labs
• Terraform Security Scanning
• SIEM Log Monitoring
• SonarQube Security Analysis
• Trivy Container Scanning
• Git Secret Detection
• Security Incident Investigation

Projects:

• Project 1: Secure CI/CD Pipeline — GitHub + Jenkins + Security Scanning, Automated Vulnerability Checks, Secure Deployment Workflow
• Project 2: Kubernetes Security Implementation — Cluster Hardening, RBAC Policies, Pod Security Controls
• Project 3: DevSecOps Automation Platform — Automated Security Testing, Container Scanning, Compliance Validation
• Project 4: Cloud DevSecOps Implementation — AWS/Azure Secure Infrastructure, Terraform Security, Monitoring & Logging

Scenarios:

• Container Vulnerability Investigation
• Kubernetes Security Incident
• CI/CD Pipeline Misconfiguration
• Secret Leakage Detection
• Cloud IAM Misconfiguration
• Ransomware Detection in Containers
• DevOps Security Audit
• Infrastructure Compliance Validation
• Docker Runtime Threat Detection

Topics:

• Cloud Security Foundations: what is cloud security, cloud computing models (IaaS/PaaS/SaaS), public/private/hybrid cloud, shared responsibility model, cloud threat landscape, cloud security best practices
• AI Security Foundations: introduction to AI security, AI/ML security risks
• Core Concepts: cyber security fundamentals, CIA Triad, risk/threat & vulnerability concepts, compliance & governance basics

Topics:

• AWS IAM: users/groups/roles, MFA implementation, AWS Organizations, SCP policies, security best practices
• AWS Security Services: CloudTrail, GuardDuty, Security Hub, Config, Inspector, WAF & Shield, KMS, Secrets Manager
• AWS Network Security: VPC security, security groups, NACLs, VPN security, bastion hosts

Topics:

• Azure Security: identity & access management, Azure AD security, RBAC, Azure Security Center, Microsoft Defender for Cloud, Key Vault, Sentinel basics, NSG security, Azure Firewall, policies, conditional access

Topics:

• GCP Security: IAM, VPC security, cloud logging, cloud monitoring, Security Command Center, encryption concepts, best practices

Topics:

• Cloud Network Security: secure network design, firewalls & IDS/IPS, Zero Trust security, VPN security, DNS security, load balancer & reverse proxy security, WAF, network segmentation, secure remote access

Topics:

• Docker Security: container hardening, secure images, image vulnerability scanning, runtime security, secret management
• Kubernetes Security: RBAC, pod security, network policies, namespace isolation, admission controllers, hardening, threat detection
• Tools: Trivy, Falco, kube-bench, Kyverno

Topics:

• Identity Security: IAM best practices, least privilege access, RBAC, MFA, Privileged Access Management (PAM), identity federation, SSO, Zero Trust identity security

Topics:

• SIEM & Monitoring: fundamentals, security monitoring, log analysis, threat detection, alert correlation, cloud log monitoring, threat intelligence integration
• Tools: Splunk, Microsoft Sentinel, ELK Stack, QRadar basics

Topics:

• AI Security Fundamentals: threat landscape, risks in AI systems, model vulnerabilities, adversarial attacks, AI data poisoning, prompt injection attacks, LLM security risks, AI privacy & ethics, responsible AI

Topics:

• LLM Security: architecture basics, secure prompt engineering, prompt injection detection, RAG security concepts, AI hallucination risks, data leakage prevention, secure AI APIs, AI access control, governance frameworks

Topics:

• AI Threat Detection: AI-powered threat detection, ML-based anomaly detection, security analytics using AI, AI SOC automation, behavioral threat detection, AI-assisted incident response, threat intelligence automation

Topics:

• Python Basics: variables & functions, file handling, exception handling, API integration
• Python for Security: log parsing, cloud security automation, SIEM API integration, AI security scripts, threat detection automation

Topics:

• DevSecOps Automation: secure CI/CD pipelines, Terraform security, IaC security, secret management, automated security scanning, vulnerability management, compliance automation
• Tools: Terraform, Checkov, tfsec, GitHub Actions, Jenkins

Topics:

• Incident Response & Threat Hunting: cloud incident response, AI threat hunting, malware detection, ransomware indicators, cloud forensics basics, threat hunting workflow, MITRE ATT&CK mapping, root cause analysis

Topics:

• Compliance & Governance: ISO 27001 basics, GDPR overview, HIPAA basics, PCI-DSS basics, cloud compliance frameworks, AI governance policies, security auditing, risk management

Labs & Assignments:

• AWS IAM Security Lab
• Azure Security Center Monitoring
• Kubernetes Hardening
• Docker Vulnerability Scanning
• Splunk Threat Monitoring
• Prompt Injection Detection
• AI Security Risk Assessment
• CloudTrail Log Analysis
• SIEM Alert Investigation
• Python Security Automation Scripts
• Build SIEM Dashboards
• Configure IAM Policies
• Secure Kubernetes Environment
• Develop Python Security Scripts
• Analyze AI Security Threats
• Implement DevSecOps Security Checks
• Threat Hunting Exercises

Projects:

• Project 1: Multi-Cloud Security Monitoring — AWS + Azure Security Monitoring, SIEM Integration, Threat Detection Dashboard
• Project 2: Kubernetes Security Implementation — Secure Kubernetes Cluster, RBAC & Network Policies, Runtime Threat Detection
• Project 3: AI Security Threat Detection — Detect Prompt Injection Attacks, AI Threat Monitoring, Secure LLM Access Controls
• Project 4: DevSecOps Security Pipeline — Automated Security Scanning, Terraform Compliance Checks, CI/CD Security Integration

Scenarios:

• Cloud IAM Misconfiguration Investigation
• Prompt Injection Attack Detection
• Cloud Data Leakage Scenario
• Kubernetes Security Incident
• Cloud Malware Investigation
• AI Model Abuse Detection
• Cloud Threat Hunting
• Secure AI Deployment Validation
• Ransomware Detection in Cloud
• Multi-Cloud Security Monitoring

Topics:

• AI in Cyber Security: evolution of AI in cyber security, what is Generative AI, what is Agentic AI, AI vs traditional automation, AI security landscape
• AI-Powered Security Operations: cyber security challenges, AI-powered security operations, AI use cases in SOC, AI for threat detection
• Responsible AI: responsible AI concepts, AI risks & ethics in security, future of AI in cyber security

Topics:

• LLM Fundamentals: introduction to LLMs, GPT models overview, transformer architecture basics, prompt engineering fundamentals, AI hallucination concepts, context windows & tokens
• LLM Integration: AI APIs & integrations, open source LLMs overview, Retrieval-Augmented Generation (RAG), AI knowledge bases, model fine-tuning basics

Topics:

• Agentic AI: what is Agentic AI, autonomous AI agents, decision-making concepts, workflow automation, multi-agent systems, agent orchestration, memory concepts, planning & reasoning, human-in-the-loop security, AI security operations workflows

Topics:

• Cyber Security Foundations: threats/risks & vulnerabilities, Cyber Kill Chain, MITRE ATT&CK Framework, SIEM & SOC basics, threat intelligence basics, incident response lifecycle, malware basics, authentication & authorization, cloud & endpoint security basics

Topics:

• Gen AI for SOC: AI-based threat detection, AI for log analysis, alert correlation, threat intelligence enrichment, incident summarization, malware analysis, IOC detection, AI chatbots for SOC analysts, security reporting, threat hunting

Topics:

• Splunk + AI: AI-driven log analysis, Splunk AI Assistant concepts, threat pattern recognition
• Microsoft Sentinel + AI: Copilot for Security, AI incident investigation, automated threat analysis
• ELK + AI: AI-based log correlation, intelligent alerting

Topics:

• Python Fundamentals: variables & functions, file handling, APIs & JSON, error handling
• Python for Cyber AI: security log parsing, AI API integration, threat intelligence automation, AI-powered alerting, automated incident reporting, AI chatbot development basics

Topics:

• RAG Fundamentals: introduction to RAG, vector databases basics, embeddings concepts, secure AI retrieval systems
• RAG for Security: security knowledge base creation, AI search for security logs, RAG for threat intelligence, AI-based documentation search
• Tools: LangChain basics, ChromaDB/Pinecone, OpenAI APIs, Ollama basics

Topics:

• AI Agents: security AI agent architecture, agents for incident response & threat hunting, AI-based ticketing automation, autonomous threat detection, multi-agent security systems, security workflow automation, AI decision engines

Topics:

• Cloud + AI Security: AI in AWS & Azure security, AI threat detection in cloud, AI-powered cloud monitoring, AI-based compliance monitoring, AI security analytics, cloud SIEM + AI integration

Topics:

• AI Security Risks: prompt injection & jailbreak attacks, AI hallucinations, data leakage risks, model poisoning, adversarial AI attacks
• AI Governance: secure prompt engineering, AI access control, governance basics, responsible AI policies

Topics:

• AI + DevSecOps: AI in DevSecOps, AI-based vulnerability scanning, AI for secure CI/CD, IaC security, automated compliance validation, AI security testing, AI-powered code review

Topics:

• AI Threat Hunting: AI-based behavioral analysis, UEBA concepts, anomaly detection, threat correlation & prediction, AI-powered threat intelligence, AI-driven root cause analysis

Topics:

• AI + SOAR: SOAR fundamentals, AI-based playbooks, AI incident response, ticket automation, automated threat containment, escalation workflows, security workflow orchestration

Topics:

• Monitoring & Reporting: AI security dashboards, security KPI monitoring, executive reporting, AI incident summaries, automated SOC reporting, threat intelligence dashboards

Labs & Assignments:

• AI-Based Log Analysis
• Prompt Engineering Labs
• Build Security AI Chatbot
• AI Threat Detection Scripts
• SIEM + AI Integration
• RAG-Based Security Knowledge Base
• Threat Intelligence Automation
• AI-Powered Incident Reports
• AI Security Risk Analysis
• Prompt Injection Testing
• Create AI Security Playbooks
• Develop Python AI Security Scripts
• Build RAG Pipelines
• Design AI SOC Workflows
• Implement Threat Intelligence Automation
• Create AI-Based Dashboards

Projects:

• Project 1: AI-Powered SOC Assistant — AI Chatbot for Security Operations, Threat Summarization, Incident Assistance
• Project 2: RAG-Based Threat Intelligence Platform — Security Knowledge Base, AI Search & Threat Correlation, Vector Database Integration
• Project 3: Agentic AI for Incident Response — Automated Alert Investigation, Threat Prioritization, AI Workflow Automation
• Project 4: AI Threat Hunting Platform — Behavioral Threat Detection, AI-Based Anomaly Detection, SIEM Integration

Scenarios:

• AI-Based Phishing Detection
• Prompt Injection Investigation
• AI-Assisted Malware Analysis
• AI Incident Response Automation
• Threat Hunting using AI
• Cloud Threat Monitoring with AI
• Automated SOC Alert Investigation
• AI-Driven Root Cause Analysis
• AI Security Governance Scenarios