This course introduces basic concepts of Information Security, CIA triad and focuses on emerging technologies and their connection with Cyber Security. The different facets of Information Security are explained along with the attack vectors for information security. This course covers the skills required to develop a security infrastructure, recognize threats and vulnerabilities to networks, and mitigate security threats, This course emphasizes core security technologies, the installation, troubleshooting and monitoring of network security devices to maintain integrity, confidentiality and availability of data.

Tools: CISCO Packet Tracer, CISCO Firepower, Wireshark

This course provides foundational knowledge and skills for Windows/Linux server platform. After completing this course, the participants will have an of operating systems and their importance in the cybersecurity space. They will learn relevant security configurations, file systems, user management and services along with ways to secure the services.

Tools: CentOS Linux, Windows Server 2012

The course will provide an in-depth understanding of threat vectors of connected IT Eco-system, understand the nature of insider and outsider threats and various threat models, understand the impact of threat realization and learn ways to control threat actors. At the end of this module, they will have improved knowledge of the threat landscape, the ability to articulate, prevent and detect Threat exploitation, the ability to measure and rank a threat on Threat models and analysis of security threats.

At the end of the module, participants will be able to practice threat models, able to take up the role of a threat researcher and they will be able to implement protocol anomaly analysis and pattern analysis.

Tools: Metaspoilt, Kali Linux, VirusTotal, Social Engineering Toolkit, The Harvester, Automater,  Shodan, Spiderfoot and more.

This module provides hands-on skills on managing threats and vulnerabilities in
the systems. This module comes with labs and course materials from EC-Council to
learn skills in a red team environment, focused on attacking computer systems and
gaining access to networks, applications, databases, and other critical data on
secured systems. The learner will gain skills on attack strategies, attack vectors and
mimic the skills and creativity of malicious hackers. Unlike malicious hackers and
actors, Certified Ethical Hackers operate with permission from the system owners
and take precautions to ensure the outcomes remain confidential. Bug bounty
researchers are expert ethical hackers who use their attack skills to uncover
vulnerabilities in the systems.

Tools: EC Council’s iLabs with 40 plus exercises

This course teaches how to perform an effective penetration test in an enterprise network
environment that must be attacked, exploited, evaded,
and defended. CPENT’s live practice range will provide
in-depth skills not only on working on flat networks
but also on to the next level by teaching you how to
pentest IoT systems, OT systems, how to write your
exploits, build your tools, conduct advanced binaries exploitation, double pivot to
access hidden networks, and also customize scripts/exploits to get into the
innermost segments of the network.

The Open Web Application Security Project (OWASP) is an open community dedicated to enabling organizations to develop, purchase, and maintain applications and APIs that can be trusted. The participants will learn the top 10 web application security risks; Injection flaws, Broken Authentication, Sensitive Data Exposure, XML External Entities, Broken Access Control, Security misconfiguration, Cross-Site Scripting, Insecure deserialization, Using Components with Known Vulnerabilities, Insufficient logging and monitoring.

Tools: OWASP Tools

Security analytics is a combination of software, algorithms, and analytic
processes used to proactively predict potential cyber threats to an
organization. The course provides practical exposure to building machine
learning-based defense systems. After completing the course, the participants
will be able to run the programming and data structures required for data
analysis with Python, identify the source of data, and how to capture test and
training sets from the data. They will also be able to develop important ML
models to predict intrusion, detection and user behavior analysis.
Tools: Python

The objective of this course is to let the participants learn about different
components of Identity and Access Management, security considerations, and
some labs with examples. After completing this course, the participants will get
developed the capabilities to ensure the right people and things have the right
access to the right resources at the right time. The course will provide an overview
of zero-trust security products.
Tools: MS Azure, AWS Service

This course introduces the concept of Information Security Governance, Risk and
Compliance (GRC) to participants. They will be able to implement the NIST Risk
Management Framework (RMF) to manage organizational risks effectively. The
course covers key security compliance programs like ISO 27001:2013, PCI-DSS,
SSAE 16, and HIPAA, and the course concludes by providing an introduction to
data privacy concepts like Privacy by Design and key privacy regulations like
GDPR, CCPA, and proposed PDPB.
Tools: NA

This course provides understanding and skills on responding and analysis to
breaches. The learners will be able to apply the techniques and lessons in

providing the first response to a breach situation and will also be able to analyze a
security incident. The course uses case studies and practical labs on Cyber Breach
Life Cycle, Handling the Crime Scene, Data Verification and Integrity Preservation
(Hashing), Maintaining Chain of Custody, Evidence Protection and Preservation,
Evidence Transportation, Evidence Analysis and Reporting, and sharing the
learnings.
Tools: SIFT Workstation, FTK, Veracrypt, log2timeline, Wireshark

This module on Cyber Law is designed to give the participants the latest updates
on Cyber Laws, Rules, and Regulations, and enable them to understand various
techno-legal aspects. Further, the participants will be exposed to practical aspects
of learning including drafting privacy policies, disclosure policies as per the law,
drafting 65B digital evidence matter of fact and observation certificates, and
getting to know the various interpretations of the IT Act.
Tools: NA

This course will provide the participants with an understanding of Secure
Software Development Lifecycle, Threat Modeling, Risk Assessments, ability to
create and analyze secure designs, codes, development practices, and apply the
right security controls. They will have an understanding of underlying principles
and technologies of security engineering, security requirements for modern-day
application, and the future of it with rapidly changing technologies.
Tools: Microsoft Threat Modeling Tool, Static Code analyser -Fortify), DVWA,
BURP, IDS tools like Snort, IPS tools like OSSEC.

Note: Based on industry trends, inputs from mentors or board of studies members,
suggestions from participants as per their learning needs, further electives will be
offered, subject to a minimum number of ten enrolments

This course aims to provide participants with
adequate knowledge and exposure on Cloud
Computing, Cloud Deployment Models, Cloud
Architecture, and how to secure data and the best
practices. The labs will provide skills on managing
security operations in Azure using Azure inbuilt
tools. The course will cover cloud application
security, secure software development life cycle
(SDLC), cloud software assurance and validation,
software, specifics of cloud application architecture,

design appropriate Identity Management (IAM)
Solutions. verified and Access
Tools: MS Azure secure

The module is an instructor-led course leading to
certification. The course covers manage identity and
access, implement platform protection, manage
and
applications through MS Azure Cloud’s inbuilt
features.
Tools: MS Azure Sentinel, Key Vault and other
features Leading to certification AZ-500

The SOC management course is to master Tier I and Tier II SOC
analyst roles to achieve proficiency in performing SOC
operations. Gain Knowledge of SOC processes, procedures,
technologies, and workflows. At the end of the course, the
learners will recognize attacker tools, tactics and procedures to
identify indicators of compromise (IOCs). They will gain
experience and extensive knowledge in Security Information
and Event Management (SIEM). The learners will be able to
develop threat cases (correlation rules), create reports, plan,
organize, and perform threat monitoring and analysis in the
enterprise, prepare briefings, and
reports of analysis methodology
results
understanding of SOC and IRT
collaboration for better incident
response.
Tools: Practice Labs on four SIEM
Tools; Splunk, QRadar, ArcSight,
OSIM

This purple range simulation-based course on a Purple theme
allowing the participants to experiment on the red/blue team
skills. This exposure is essential to build a resilient defense
architecture while anticipating every move of a hacker. The
teams will be able to detect threats that were not blocked,
understand patterns in the security data with a variety of attacks
and 16 plus scenarios. Through this top-notch learning platform
as cybersecurity professionals, they can test the resistance of
their defense team by pushing it to its maximum capabilities,
early detection of a potential attack, and understand the
sequence patterns.

This module aims to build hands-on skills on conducting threat
intelligence and hunting after the attack. The topics include
Introduction to Threat Intelligence -Life cycle and Frameworks,
Data Collection and Processing – Feeds and Sources, Bulk Data
Processing and Exploitation, Threat Analysis – Process, Run
Books and Knowledge Base, Intelligence Reporting and
Dissemination – Threat Intel Reports, Dissemination Practices,
and more.
Tools: Ubuntu Machines, Web-based tools for scraping and
detection

The first-year cybersecurity capstone project is designed to
ensure a detailed scenario-based analysis of industry-specific
challenges in Cybersecurity. It involves identifying potential
opportunities as suggested by the mentors and designing
solutions and preparing a detailed analysis of the same along
with presenting an elaborate case study with implementation.
The objective is to develop execution and consulting capabilities
for the topics at hand.
Tools: Full-stack

The second-year program will culminate in designing, preparing, demonstrating,
and presenting a real-time capstone project on an end-to-end cybersecurity
challenge. The scope and industry applications of the project need to be larger
than the first-year project. The program office will support with mentoring and
report writing. The evaluation is based on viva-voce by an industry panel of experts.
The duration of the second-year capstone project is two months.
Tools: Full Stack

This module credits can be earned by writing and publishing a research paper on
the capstone project done in the earlier module. The participant needs to publish or
present the paper in a peer-reviewed journal or reputed international conference.
The participants will learn skills in research paper writing and publishing/presenting.
Note: Second-year capstone project needs to be mandatorily published in a peer-reviewed
journal or presented at an international conference.