Module 1: Introduction to Cyber Security & Latest Attack Trends

What is Security, Vulnerabilities & O-Days, Attack life Cycle, Different Attack Vectors
Threats Vs. Risks, Why Perimeter defenses are failing? Why Anti-Virus is not enough?
Financial Implications of a Cyber Attack
Business Email Compromise (BEC) (Demo)
Ransomware (Demo)
Advanced Persistent Threat (Demo)
File-less Malwares (Demo)
Mobile Malwares (Demo)
Identity Theft (Demo)
Web Data Breach (Demo)
Malvertising (Demo)
Payment Gateway based attacks (Demo)
Social Media based attacks (Demo)
Password based attacks (Password Stuffing, Account Takeover, Phishing, etc) (Demo)
State sponsored attacks (Case Study)
Distributed Denial of Service (Case Study)
Insider Threat (Case Study)

Module 2: Security Operations Center (SOC) – Introduction

Module 3: Understanding Attack DNA

Module 4: Latest Cybersecurity Defence Technologies

Anti-Virus & Next Generation Anti-Virus (NGAV)
- How it works and Where is the Gap ?
Deep Learning & Machine Learning & Artificial Intelligence
- Cybersecurity use cases
Security Information and Event Management (SIEM)
- How it Works ?
- Understanding Logs & Log Correlation
- SIEM Deployment options
- Application Level Incident Detection Use Case Examples
- Network Incident Detection Use Case Examples
- Host Malware Incident Detection Use Case Examples
- Understanding why SIEM is not enough and why Noise/False Positives ?
- Lab / Demo
Endpoint Detection and Response (EDR)
- How it Works ?
- EDR vs. NGAV
- Understanding Memory and Process Detection & Mapping
- What is Managed Detection and Response
- Understanding various Response actions
- Lab / Demo
Security Orchestration, Automation and Response (SOAR)
- Alert / Notification Handling Challenges
- Why SOAR ?
- Sample Automated Playbooks
- Lab / Demo
Cyber Range
- Cyber Range Components
- Cyber Range Simulation Scenarios
Data Leakage Prevention (DLP)
User Behavior Analytics
Identity Management
Virtual Dispersive Networking (VDN)

Module 5: Cybersecurity Incident Response

Introduction to Incident Response
- Types of Computer Security Incidents
- Fingerprint of an Incident
- Incident Categories & Incident Prioritization
- Why Incident Response?
Incident Reporting
Incident Response & Handling Methodology
Incident Response Plan
Incident Response and Handling : Identification, Incident Recording, Initial Response, Communicating the Incident, Containment, Formulating a Response Strategy, Incident Classification, Incident Investigation, Data Collection, Forensic Analysis, Evidence Protection, Systems Recovery, Incident Documentation, Incident Damage and Cost Assessment, Review and Update the Response Plan and Policies
Incident Response Checklist and Best Practices
CSIRT & its best practices
Incident Response Team
Incident Tracking and Reporting
Incident handling : Real Word examples and exercises on Malware, Web Application attacks, Email attacks and Insider attacks.

Module 6: Threat Intelligence & Threat Hunting

CSOCA: Certified Security Operation Center (SOC) Analyst