Intermediate Guide to Cybersecurity

In this module, you will learn the architecture of modern SIEM platforms, master Splunk Search Processing Language (SPL) for threat analysis, build real-time SOC alert triggers, construct operational security dashboards, and map correlate event logs against threat intelligence frameworks.

In this module, you will master the vulnerability management lifecycle, execute advanced Nmap scanning and evasion tactics, operate the Nessus vulnerability scanner, triage discovered security flaws using risk scoring frameworks, and implement defensive remediation workflows.

In this module, you will explore the primary security risks facing modern web applications through the framework of the OWASP Top 10. You will analyze broken access controls, dissect injection mechanisms (SQLi and OS Command Injection), evaluate client-side threat vectors (XSS and CSRF), identify security misconfigurations and software supply chain risks, and deploy Web Application Firewalls (WAF) alongside automated DAST tools to defend web infrastructure.

In this module, you will master network traffic capture and packet inspection using Wireshark and TShark. You will explore physical capture mechanics, conduct protocol deep dives into TCP, DNS, HTTP, and TLS traffic, spot network threat signatures such as C2 beaconing and data exfiltration, automate command-line PCAP triage, and integrate Network Intrusion Detection Systems (NIDS) like Suricata and Snort.

In this module, you will master operational incident response (IR) workflows across the NIST and SANS frameworks. You will analyze threat detection and triage strategies, preserve digital forensic evidence following the order of volatility, execute network and account containment actions, carry out system eradication and recovery from known-clean baselines, and lead post-incident root cause analysis (RCA) and tabletop exercises.

In this module, you will explore Endpoint Detection and Response (EDR) architecture, telemetry engines, and behavioral threat detection. You will analyze process execution trees and Sysmon telemetry, detect Living-off-the-Land (LOLBins) attacks and memory manipulation, write detection rules using Sigma and YARA-L, execute proactive EDR threat hunting, and integrate EDR streams into Extended Detection and Response (XDR) and Security Orchestration, Automation, and Response (SOAR) workflows.

In this capstone project, you will apply the skills acquired across the curriculum to execute, detect, contain, and remediate an end-to-end cyber-attack scenario. You will inspect enterprise lab topologies, analyze initial compromise vectors across web applications and endpoints, trace Active Directory enumeration and lateral movement, perform host isolation and persistence eradication, and produce executive-level post-incident deliverables.