Network Security 

Network attacks and defence strategies module covers attack techniques and hacking methodologies mechanisms that hackers use to breach the organizations secure networks. 

Key topics covered: Attack, adaptive security strategy, application attacks, cloud attacks, defence-in-depth security, email attack, hacking methodologies and frameworks, mobile attacks, network attacks, social engineering attacks, supply chain attacks, risk, wireless attacks, threat, threat actors, threat sources, and vulnerability.  

With the hands-on lab exercises in this module, you will be able to understand the modus operandi of various attacks at application, host levels, and network.

Administrative Network Security module especially covers administrative security measures.  

Key topics covered: Asset management, compliance efforts, creation and enforcement of security policies, security awareness training, recent cybersecurity trends, etc. 

By getting hands-on lab experience in this module, you will be able to demonstrate your skills in asset management, employee monitoring, security policy implementation, etc.  

Technical network security module covers the technical aspects of network security. 

Key topics covered: Access controls, authentication, authorization, and accounting (AAA), Identity and access management (IAM), cryptography, network segmentation, zero trust, network security controls, various network security devices, and protocols. 

With rigorous hands-on lab exercises in this module, you will demonstrate your skills in implementing access controls VPN, etc.  

Network Perimeter Security module will help you cover the security configuration of its devices such as firewalls, intrusion detection, and intrusion protection systems (IDSS/IPSs), and routers, switches, etc., for effective perimeter protection.  

Key topics covered: False negatives, Firewalls, firewall administration, firewall implementation and deployment, firewall selection, firewall topologies, firewall types, IDS/IPS, IDS/IPS classification, IDS/IPS selection, router security, switch security, software-define perimeter (SDP).  

Experiencing this module will help you demonstrate skills in perimeter security. It includes configuration and implementation of firewalls and IDS/IPS inculcating well-known tools like pfSence, Smoothwalls, Window Firewall, iptables, Suricata, Wazuh, ModSecurity, etc.  

Endpoint Security – Windows Systems module covers a variety of security features and configuration techniques especially used to secure Windows systems. 

Key topics covered: Windows security risks, Windows security components, Windows security features, Windows security baseline configurations, user account and password management, Windows patch management, Windows user access management, active directory security, Windows network services and protocol security, and Windows security best practices. 

With the hands-on laboratory exercises, it will help you demonstrate Windows security skills, including Windows patch management, Windows file integrity, Windows endpoint protection, Windows security configuration baseline, active directory security, security troubleshooting, permissions, etc.  

In the module, Endpoint Security- Linux Systems, you will cover the Linux-OS, its security features, and different techniques to secure the operation system.  

Key topics covered: Linux security risks, Linux installation and patching, Linux user access and password management, Linux OS hardening techniques, Linux network and remote access security, and Linux security tools and frameworks.  

With the hands-on laboratory experience and exercises, the module will help you demonstrate skills in Linux security. It includes but not limited to hardening systems, security auditing, file integrity monitoring, permissions, access controls, etc. 

Endpoint security- mobile devices modules specifically covers the security of mobile devices under various mobile usage policies implementation and enforcement in enterprises. 

Key topics covered: Android security, Business Only (COBO), Enterprise Mobility Management (EMM), Bring Your Own Device (BYOD), Choose Your Own Device (CYOD), Corporate Owned, Personally Enabled (COPE), Company Owned, iPhone security, Mobile Device Management (MDM), Mobile Application Management (MAM), Mobile Threat Defence (MTD), Unified Endpoint Management (UEM), Mobile Email Management (MEM), Mobile Content Management (MCM), mobile device security. 

Experiences hands-on lab exercises in this module. By completion of this module, you will be able to demonstrate skills in implementing mobile device management solutions and their security measures.  

The module for endpoint security – lot devices will help you understand the challenges and risks of security associated with it and appropriate security measures implemented to security loT-enabled environments.  

Key topics covered: loT devices, loT application areas, loT ecosystem, loT communication models, loT-enabled environments, loT security risk and challenges, loT security in loT-enabled IT environments, loT security tools, loT security best practices, loT security standards, initiatives, and efforts. 

Administrative application security module covers the implementation of security measures to monitor patch, and upgrade the installed applications constantly. 

Key topics covered: Application whitelisting, application blacklisting, application sandboxing, application patch management, and web application firewalls (WAFs). 

By covering this module, you will be able to demonstrate your skills in application whitelisting, application sandboxing, WAD, etc. 

Data security module covered in the information security course will help you gain the skills with various security measures and its implementation to secure and organization’s data from prying eyes. 

Key topics covered: Data security, data encryption data at rest, data encryption at transit, data masking, data backup, data retention, data destruction, data loss prevention (DLP), and data integrity. 

After the completion of this module, you will be able to understand data encryption at rest, data encryption at transit, database encryption, email encryption, data backup, data recovery, disk encryption, etc.  

Enterprise Virtual Network Security module covers virtualization concepts and technologies like network virtualization, software-defined network, function virtualization, and their security.  

Key topics covered: Network virtualization (NV), software-defined network (SDN), network function virtualization (NFV) security, OS virtualization security, container security, docker security, and Kubernetes security. 

The hands-on lab exercises in this module help demonstrate skills in docker security audit, SDN communication security, Kubernetes security, etc.  

The certified network defender program’s enterprise cloud security module covers its various aspect important for an organization to store or process securely on the cloud.  

Key topics covered: Cloud Computing, cloud security, shared responsibility model, Amazon Cloud (AWS) Security, Microsoft Azure cloud security, and Google Cloud Platform (GCP) security. 

After you complete the module with hands-on lab exercises, you will be able to demonstrate your skills in AWS IAM, AWS KMS, AWS Storage, Azure MFA, GCP IAM, Azure Resource locking, and GCP Cloud IAP.  

Enterprise wireless network security covers various security measures and best practices especially used to secure wireless networks in enterprises.  

Key topics covered: Wi-Fi security tools, Wireless network, wireless standards, wireless topologies, wireless network components, wireless network encryption, wireless network authentication, and wireless network security measures. 

Network traffic monitoring and analysis cover bandwidth, threat, and performance monitoring to help your network traffic monitoring and analysis.  

Key topics covered: Network traffic monitoring, baseline traffic signatures, suspicious network traffic signatures, threat detection with Wireshark, bandwidth monitoring, performance monitoring, network anomaly detection, and behaviour analysis. 

With the hands-on lab experience after course completion. It helps demonstrate skills in packet capturing, traffic monitoring, traffic analysis, threat detection, and bandwidth monitoring with tools like Wireshark, tcpdump, PRTG, Capsa, NTOP, etc.  

Network Logs Monitoring and Analysis covers detection of threats with the help of log analysis and monitoring.  

Key topics covered: Logs, Windows log analysis, Linux log analysis, Mac log analysis, firewall log analysis, router log analysis, web server log analysis, and centralized log management. 

With the hands-on experience, this module will help you configuring, viewing, and analysing logs in a local as well as a centralized location.  

Incident response and forensics investigation will cover the roles of incident response and forensic investigation in an organization’s security.  

Key topics covered: First responder, incident handling and response process, SOAR, endpoint detection and response (EDR), extended detection and response (XDR), and forensics investigation. 

Understanding and experiencing this module will help you demonstrate your skills in incident ticketing, reporting, and escalations with OSSIM.  

Business continuity and disaster recovery module covers concepts around business continuity and disaster recovery. 

Key topics covered: Business Continuity (BC), Disaster Recovery (DR), Business Continuity Management (BCM), BC/DR Activities, Business Impact Analysis (BIA), Recovery Time Objective (RTO), Recovery Point Objective (RPO), Business Continuity Plan (BCP), and Disaster Recovery Plan (DRP). 

With the hands-on expertise to demonstrate skills in implementing business continuity and disaster recovery scenarios with NLB. 

Risk anticipation with risk management covers various implementation and execution techniques for organization’s risk management program.  

Key topics covered: Risk management, risk identification, risk assessment, risk treatment, risk treatment steps, risk tracking and review, risk management frameworks (RMFs), vulnerability management, vulnerability scanning, vulnerability reporting, and privacy impact assessment (PIA). 

Demonstrate your skills with network security in network security in network security audit, vulnerability management, application vulnerability scanning, and analysis.  

hreat assessment with attack surface analysis is the concept around visualization, analysis, and reduction of the attack surface.  

Key topics covered: Attack surface, attack surface analysis, system attack surface, network attack surface, software attack surface, physical attack surface, human attack surface, Indicators of Exposures (loEs), attack simulation, attack surface reduction, attack surface monitoring tools, and cloud and loT attack surface analysis. 

With the hands-on expertise after completion of this module will help you with system attack surface analysis, application attack surface analysis, attack surface mapping, etc.  

Threat prediction with cyber threat intelligence covers leveraging its capabilities to respond quickly, decisively, and effectively to emerging threats. 

Key topics covered: Cyber threat intelligence, threat Intelligence types, Indicators of Compromise (loCs), Indicators of Attack (loA), threat intelligence layers, threat intelligence sources, threat intelligence feeds, threat intelligence platforms (TIP), and threat hunting. 

After the completion of the module of threat prediction with cyber threat intelligence, you will be able to demonstrate your skills in integration of OTX threat feeds, threat hunting, etc.