Cyber Security Course in Hyderabad

1. Introduction to Cyber Security
2. Importance of Cyber Security in 2026
3. Cyber Security domains and career paths
4. CIA Triad: Confidentiality, Integrity and Availability
5. Vulnerability, Threat, Risk and Exploit
6. Types of cyber attacks and threat actors
7. Attack surface and attack vectors
8. Security controls: Preventive, Detective and Corrective
9. Cyber Security policies and best practices
10. Legal, ethical and responsible security practices

1. OSI and TCP/IP models
2. IPv4 and IPv6 fundamentals
3. TCP, UDP and ICMP
4. Ports, protocols and network services
5. DNS, DHCP, HTTP, HTTPS, SSH and FTP
6. Routers, switches and network devices
7. Subnetting and IP addressing
8. Network traffic analysis
9. Secure and insecure protocols
10. Introduction to packet analysis with Wireshark

1. Windows security fundamentals
2. Linux fundamentals and command line
3. User and permission management
4. File systems and access permissions
5. Windows PowerShell basics
6. Linux shell commands
7. Windows Event Logs
8. Active Directory fundamentals
9. Group Policy and authentication concepts
10. Active Directory attack surface and security controls

1. Introduction to Ethical Hacking
2. Ethical hacking methodology
3. Passive reconnaissance
4. Active reconnaissance
5. OSINT techniques
6. DNS and domain enumeration
7. Subdomain discovery
8. Network scanning
9. Service enumeration
10. Nmap scanning techniques
11. Vulnerability discovery
12. Reporting reconnaissance findings

1. CVE and CVSS fundamentals
2. Vulnerability prioritization
3. Risk-based vulnerability management
4. Nessus and vulnerability scanners
5. False positives and validation
6. Patch management
7. Vulnerability remediation
8. Vulnerability assessment reports
9. Practical vulnerability assessment exercise

1. Penetration testing methodology
2. Network discovery and enumeration
3. Port scanning and service analysis
4. Exploitation fundamentals
5. Metasploit Framework
6. Meterpreter
7. Password attacks
8. Hydra and credential testing
9. Network sniffing
10. Man-in-the-Middle attack concepts
11. Privilege escalation fundamentals
12. Post-exploitation concepts
13. Network penetration testing report

1. Web application architecture
2. HTTP requests and responses
3. Cookies, sessions and authentication
4. Burp Suite fundamentals
5. Broken Access Control
6. Security Misconfiguration
7. Software Supply Chain Failures
8. Cryptographic Failures
9. Injection vulnerabilities
10. Insecure Design
11. Authentication Failures
12. Software and Data Integrity Failures
13. Security Logging and Alerting Failures
14. Mishandling of Exceptional Conditions
15. SQL Injection
16. Cross-Site Scripting (XSS)
17. IDOR and authorization flaws
18. File inclusion
19. SSRF
20. Command injection
21. Web application penetration testing

1. API security fundamentals
2. REST API architecture
3. Authentication and authorization in APIs
4. API security testing
5. OWASP API security concepts
6. Broken object-level authorization
7. API authentication weaknesses
8. Rate limiting and abuse prevention
9. Mobile application security fundamentals
10. Android security concepts
11. Mobile application vulnerabilities
12. Secure data storage
13. Mobile authentication risks
14. Mobile penetration testing basics

OWASP maintains separate guidance for API security and mobile application security, making both valuable additions to a 2026 syllabus.

1. Introduction to Cryptography
2. Symmetric encryption
3. Asymmetric encryption
4. Public Key Infrastructure
5. Hashing algorithms
6. Digital signatures
7. Certificates and TLS
8. Password hashing
9. Encryption at rest and in transit
10. Key management fundamentals
11. Data protection principles
12. Cryptographic attacks and weaknesses

1. Introduction to Security Operations Center
2. SOC roles and responsibilities
3. SOC Tier 1, Tier 2 and Tier 3 roles
4. Security event monitoring
5. Alert triage
6. Log collection and analysis
7. Incident classification
8. Escalation procedures
9. SOC workflows
10. Security monitoring use cases
11. Threat detection fundamentals
12. SOC reporting and documentation

1. Introduction to SIEM
2. SIEM architecture
3. Log sources and log collection
4. Windows logs
5. Linux logs
6. Firewall logs
7. Authentication logs
8. Splunk fundamentals
9. QRadar fundamentals
10. ELK concepts
11. Creating SIEM alerts
12. Correlation rules
13. Security dashboards
14. Incident investigation using SIEM
15. Building SOC use cases

1. Endpoint security fundamentals
2. EDR concepts
3. Windows processes
4. Sysinternals tools
5. Sysmon
6. Osquery
7. Wazuh
8. Endpoint telemetry
9. Malware fundamentals
10. Malware behavior analysis
11. Static malware analysis
12. Dynamic malware analysis
13. Indicators of Compromise
14. YARA fundamentals
15. CAPA fundamentals
16. REMnux and FlareVM overview

1. Introduction to Threat Intelligence
2. Strategic, Tactical and Operational intelligence
3. Indicators of Compromise
4. Threat actors and campaigns
5. Threat intelligence lifecycle
6. Open-source threat intelligence
7. YARA
8. MISP
9. OpenCTI
10. Threat feeds
11. Intelligence analysis
12. Threat intelligence reporting

1. Introduction to MITRE ATT&CK
2. ATT&CK tactics, techniques and sub-techniques
3. Initial Access
4. Execution
5. Persistence
6. Privilege Escalation
7. Defense Evasion
8. Credential Access
9. Discovery
10. Lateral Movement
11. Collection
12. Command and Control
13. Exfiltration
14. Impact
15. Mapping incidents to ATT&CK
16. ATT&CK Navigator
17. Detection coverage and gaps
18. Red Team and Blue Team mapping

1. Incident Response lifecycle
2. Preparation
3. Identification
4. Containment
5. Eradication
6. Recovery
7. Lessons learned
8. Evidence collection
9. Chain of custody
10. Windows forensics
11. Linux forensics
12. Memory forensics
13. Volatility
14. Autopsy
15. KAPE
16. Velociraptor
17. Timeline analysis
18. Incident response reporting

1. Social engineering fundamentals
2. Phishing attack techniques
3. Spear phishing
4. Business Email Compromise
5. Email header analysis
6. Malicious links and attachments
7. Phishing investigation
8. Phishing prevention
9. Email security controls
10. Security awareness
11. Practical phishing analysis exercises

1. Cloud computing fundamentals
2. Shared responsibility model
3. Cloud identity and access management
4. Cloud network security
5. Data protection in the cloud
6. Secure cloud storage
7. Cloud logging and monitoring
8. Cloud misconfigurations
9. Cloud security posture management concepts
10. AWS security fundamentals
11. Azure security fundamentals
12. Cloud incident response
13. Cloud security audit project

1. Red Team fundamentals
2. Blue Team fundamentals
3. Purple Team concepts
4. Attack simulation
5. Initial access techniques
6. Privilege escalation
7. Credential attacks
8. Lateral movement
9. Detection engineering
10. Security monitoring
11. Threat hunting
12. Incident investigation
13. Red Team vs Blue Team simulation
14. Capture the Flag exercises
15. Attack-and-defend lab

1. Introduction to AI in Cyber Security
2. AI-assisted threat detection
3. AI for SOC operations
4. AI-assisted log analysis
5. AI for vulnerability analysis
6. AI-assisted incident investigation
7. Security risks in Generative AI
8. Prompt Injection
9. Sensitive Information Disclosure
10. Insecure AI output handling
11. AI supply-chain risks
12. LLM security testing basics
13. Secure use of Generative AI in security teams
14. Human validation of AI-generated security findings

AI security is increasingly relevant to cybersecurity workforce skills, and NIST has been working on an AI Security competency area within NICE. OWASP also maintains dedicated security guidance for LLM applications.

1. Cyber Security Governance
2. Risk assessment
3. Risk management
4. Security policies
5. Information Security Management Systems
6. ISO 27001 concepts
7. Business Continuity Management
8. PCI-DSS concepts
9. Compliance auditing
10. Security controls
11. Audit evidence
12. Risk register preparation
13. Compliance reporting

1. Security architecture fundamentals
2. Defense in Depth
3. Zero Trust concepts
4. Identity and Access Management
5. Multi-Factor Authentication
6. Least Privilege
7. Network segmentation
8. Secure remote access
9. Privileged access fundamentals
10. Secure architecture design
11. Attack surface reduction
12. Security architecture case study

1. Introduction to DevSecOps
2. Secure Software Development Lifecycle
3. Secure coding fundamentals
4. Source code security
5. SAST and DAST
6. Dependency security
7. Software supply-chain security
8. Secrets management
9. Container security
10. Docker security fundamentals
11. Kubernetes security basics
12. CI/CD pipeline security
13. Security testing automation

Software supply-chain security deserves explicit coverage in 2026 because it is now a major category in OWASP Top 10:2025.

Students should gain guided exposure to tools such as:

• Kali Linux
• Nmap
• Wireshark
• Tcpdump
• Metasploit
• Burp Suite
• Nessus
• OWASP ZAP
• Hydra
• John the Ripper
• SQLMap
• Gobuster
• Splunk
• QRadar
• Wazuh
• Sysmon
• Osquery
• Snort
• Zeek
• YARA
• MISP
• OpenCTI
• Volatility
• Autopsy
• KAPE
• Velociraptor
• CyberChef

Students apply multiple skills through guided practical work such as:

1. Network Vulnerability Assessment
2. Web Application VAPT
3. SOC Monitoring and Alert Investigation
4. SIEM Log Analysis Project
5. Phishing Email Investigation
6. Windows Incident Response
7. Digital Forensics Investigation
8. Cloud Security Audit
9. Red Team vs Blue Team Simulation
10. Threat Intelligence Report
11. MITRE ATT&CK Mapping Project
12. Enterprise VAPT Capstone Project

1. Cyber Security career roadmap
2. SOC Analyst career path
3. Cyber Security Analyst roles
4. Ethical Hacker career path
5. Penetration Tester roles
6. Security Engineer roles
7. Resume preparation
8. LinkedIn profile optimization
9. GitHub project presentation
10. Technical interview preparation
11. Mock interviews
12. Scenario-based security interview questions
13. Project explanation during interviews
14. Certification guidance
15. Job application strategy