Cyber Security Course Syllabus (Complete Module List)

Cyber Security Course Syllabus – Complete Overview

A good cyber security syllabus balances theory with practice and follows the order in which skills build on each other. Below is the detailed module structure of our flagship Cyber Security Course, followed by the module outlines of every specialised track so that you can compare them. Each module ends in a hands-on lab.

Flagship Cyber Security Course: Module by Module

Module 1: Cyber Security Foundations and the Threat Landscape

• CIA triad, AAA, defence in depth, zero trust basics
• Types of attackers, motives and the cyber kill chain
• MITRE ATT&CK overview
• Indian laws: IT Act 2000, DPDP Act 2023 essentials

Module 2: Networking Essentials for Security

• OSI and TCP/IP models, IP addressing, subnetting
• DNS, DHCP, HTTP/HTTPS, SMTP, FTP, SMB
• VLANs, NAT, VPNs, proxies, load balancers
• Packet capture and analysis with Wireshark

Module 3: Linux and Windows for Security Professionals

• Kali Linux setup, file system, users and permissions
• Bash scripting basics for automation
• Windows Active Directory concepts, event logs, PowerShell basics
• Hardening checklists (CIS benchmarks overview)

Module 4: Reconnaissance, Scanning and Enumeration

• OSINT, Google dorking, WHOIS, Shodan, theHarvester
• Nmap host discovery, port and service scanning, scripting engine
• Banner grabbing and service enumeration
• Vulnerability scanning with Nessus Essentials / OpenVAS

Module 5: System Hacking and Exploitation

• Password attacks, hashing, cracking with Hashcat / John
• Metasploit framework workflow
• Windows and Linux privilege escalation
• Post-exploitation, persistence and covering your tracks (detection view)

Module 6: Web Application and Mobile Security Basics

• SQL injection, XSS, CSRF, IDOR, file upload flaws, SSRF
• Authentication and session weaknesses
• Burp Suite proxy, intruder and repeater
• Intro to API and Android app testing

Module 7: Wireless, Social Engineering and Physical Attacks

• WPA2/WPA3 weaknesses and wireless auditing concepts
• Phishing simulation with GoPhish in a lab
• Vishing, smishing and UPI fraud patterns
• Security awareness programme design

Module 8: Security Operations, SIEM and Incident Response

• SOC tiers, shift handover, ticketing and playbooks
• Splunk / Elastic SIEM search, dashboards and alerts
• Log sources: firewall, proxy, endpoint, AD, cloud
• NIST incident response lifecycle, containment and reporting

Module 9: Digital Forensics Basics

• Forensic process, write blockers, hashing for integrity
• Autopsy and FTK Imager workflows
• Memory analysis with Volatility
• Email and browser artefacts

Module 10: Cloud Security, Cryptography and Compliance

• IAM, S3/Blob exposure, security groups, logging with CloudTrail
• Symmetric/asymmetric encryption, PKI, digital signatures
• ISO 27001, SOC 2, PCI DSS and DPDP basics
• Risk registers and security policies

Module 11: Career Lab: Resume, Portfolio and Interview Preparation

• Security resume and LinkedIn optimisation
• Scenario-based interview questions for SOC and VAPT roles
• Mock interviews with feedback
• Certification roadmap: Security+, CEH, CySA+, OSCP

Specialised Track Syllabi

Ethical Hacking Course (About 3 months (weekday or weekend batches))

• Ethical Hacking Basics, Law and Lab Setup: Hacker types, ethical hacking phases, rules of engagement; IT Act 2000 provisions relevant to unauthorised access; VirtualBox / VMware lab, snapshots, network isolation
• Networking and Linux Refresher for Hackers: TCP/IP, ports, DNS, ARP, HTTP; Linux permissions, services, cron and networking commands; Packet analysis with Wireshark and tcpdump
• Footprinting and Reconnaissance: OSINT: Google dorks, Shodan, Maltego, social media; Subdomain and email enumeration; Metadata extraction from documents
• Scanning and Enumeration: Nmap scan types, timing, NSE scripts; SMB, FTP, SSH, SNMP, LDAP and web enumeration; Vulnerability scanning and false positive handling
• Gaining Access: Exploitation and Password Attacks: Metasploit modules, payloads, handlers; Brute force, dictionary and hash cracking (Hydra, Hashcat); Reverse shells and bind shells
• Privilege Escalation and Post-Exploitation: Linux SUID, sudo misconfigurations, kernel exploits (conceptual); Windows token abuse, unquoted service paths, weak permissions; Credential harvesting and lateral movement in a lab domain
• Web Application Hacking: SQL injection (error, union, blind), NoSQL injection; Cross-site scripting, CSRF, clickjacking; Broken access control, IDOR, file upload and path traversal
• Wireless, Mobile and IoT Hacking Concepts: WPA2 handshake capture and wordlist attacks in a lab; Evil twin and rogue AP concepts; Android APK analysis basics
• Social Engineering, Malware Basics and Evasion Concepts: Phishing, pretexting and physical access tactics; Malware types: trojan, worm, ransomware, RAT; Obfuscation and AV detection principles
• Reporting, Bug Bounty and Career Preparation: CVSS scoring, impact and remediation language; Report templates for VAPT and bug bounty; Starting on HackerOne, Bugcrowd and Indian programmes

CEH Certification Training (About 2 months (intensive) or 3 months (relaxed pace))

• Information Security and Ethical Hacking Overview: Information security concepts and attack classifications; Cyber kill chain, MITRE ATT&CK, hacker frameworks; Laws and standards: IT Act, ISO 27001, PCI DSS, GDPR basics
• Footprinting, Reconnaissance and Scanning: Footprinting through search engines, social media, DNS, WHOIS; Network scanning: Nmap, hping, scan evasion concepts; Enumeration of NetBIOS, SNMP, LDAP, NTP, SMTP
• System Hacking, Malware and Sniffing: Password cracking, hash types, rainbow tables; Privilege escalation and maintaining access; Trojans, ransomware, fileless malware, analysis basics
• Social Engineering, DoS and Session Hijacking: Social engineering techniques and insider threats; DoS/DDoS types and mitigation; Session hijacking and cookie theft
• Web Servers, Web Applications and SQL Injection: Web server attacks and misconfigurations; OWASP Top 10, injection, XSS, CSRF, deserialisation; SQL injection methodology and tools
• Wireless, Mobile, IoT and OT Hacking: Wireless encryption, attacks and tools; Mobile platform risks, MDM, jailbreak/root concepts; IoT and OT architecture and vulnerabilities
• Cloud Computing and Cryptography: Cloud models, container security, serverless risks; Cloud attacks and the shared responsibility model; Symmetric, asymmetric, hashing, PKI, digital signatures
• Exam Strategy and Mock Tests: Full-length mock exams with answer analysis; Time management and question patterns; Quick-revision sheets by domain

Penetration Testing Course (About 4 months (weekday or weekend batches))

• Pentest Methodology, Scoping and Rules of Engagement: PTES, OWASP WSTG, NIST SP 800-115 overview; Statement of work, NDA, scope and out-of-scope; Black, grey and white box testing
• Information Gathering and Network Mapping: Passive/active recon pipelines; Nmap, Masscan and service fingerprinting; Attack surface mapping and technology stacks
• Network Penetration Testing: SMB, RDP, SSH, FTP, SNMP, database service attacks; Man-in-the-middle and credential capture; Exploit selection, modification and safe use
• Web Application Penetration Testing: Authentication, session and access control testing; Injection, XSS, SSRF, XXE, deserialisation; Business logic flaws
• API and Mobile Backend Testing: Postman and Burp for API testing; BOLA/IDOR, mass assignment, broken auth, rate limiting; JWT attacks and OAuth misconfigurations
• Active Directory Attacks: AD enumeration with BloodHound; Kerberoasting, AS-REP roasting, password spraying; Pass-the-hash and token abuse
• Cloud and Container Testing Basics: S3/Blob exposure, IAM misconfigurations; Metadata service abuse concepts; Docker and Kubernetes basics for testers
• Privilege Escalation and Post-Exploitation: Linux and Windows privilege escalation checklists; Credential dumping and lateral movement in a lab; Proof of impact without data damage
• Reporting, Retesting and Client Communication: Executive summary vs technical findings; Risk rating, CVSS, remediation priorities; Retest process and closure evidence

SOC Analyst Course (About 3 months (weekday or weekend batches))

• SOC Fundamentals and Security Monitoring: SOC roles L1/L2/L3, shift handover, SLAs and KPIs; People, process and technology in a SOC; Ticketing and escalation workflows
• Log Sources and Network Traffic Analysis: Windows event logs, Sysmon, Linux syslog/auth logs; Firewall, proxy, DNS and VPN logs; Packet analysis with Wireshark and Zeek basics
• SIEM Administration and Searching (Splunk / Elastic): Data ingestion, indexing, field extraction; SPL and KQL query writing; Correlation searches, alerts and dashboards
• Threat Detection and Alert Triage: Brute force, malware beaconing, lateral movement, privilege abuse detections; IOC enrichment with VirusTotal, AbuseIPDB, URLScan; EDR alert analysis (CrowdStrike / Defender concepts)
• Incident Response and Containment: NIST incident response phases; Ransomware, phishing and account takeover playbooks; Containment, eradication, recovery
• Threat Intelligence and Detection Engineering Basics: Types of threat intelligence, STIX/TAXII overview; Sigma and YARA rules; Threat hunting basics with hypotheses
• Interview Preparation and SOC Career Roadmap: Common SOC interview questions and live scenarios; Shift-life reality, growth path to threat hunter / IR / engineer; Home-lab ideas to keep practising

Digital Forensics Course (About 3 months (weekday or weekend batches))

• Forensic Principles, Law and Evidence Handling: Forensic process: identify, preserve, acquire, analyse, report; IT Act 2000 and Section 65B Indian Evidence Act (admissibility concepts); Chain of custody forms and hashing
• Windows and Linux File System Forensics: NTFS, FAT, ext4 structures and metadata; Deleted file recovery and file carving; Registry hives, prefetch, jump lists, shellbags
• Memory Forensics: Capturing RAM safely; Volatility 3 process, network and malware plugins; Detecting injected code and persistence
• Network and Email Forensics: PCAP analysis and protocol reconstruction; Zeek logs and NetFlow; Email header tracing and phishing evidence
• Mobile and Cloud Forensics Basics: Android and iOS acquisition concepts; WhatsApp, SMS and app data artefacts (lab data); Cloud logs: M365 unified audit log, AWS CloudTrail
• Incident Response, Reporting and Court Readiness: DFIR playbooks and coordination with legal and HR; Writing findings, limitations and conclusions; Expert-witness basics

Network Security Course (About 2.5 months (weekday or weekend batches))

• Networking Fundamentals Through a Security Lens: OSI/TCP-IP, routing and switching essentials; ARP, DHCP, DNS and common protocol attacks; IPv6 security considerations
• Firewalls and Access Control: Stateful vs next-generation firewalls; pfSense / OPNsense and iptables/nftables rule building; NAT, DMZ design and rule base reviews
• VPN, Remote Access and Zero Trust: IPsec and SSL VPN with WireGuard / OpenVPN; Site-to-site vs remote-access VPNs; MFA, ZTNA and zero-trust principles
• IDS/IPS and Network Monitoring: Snort and Suricata rules; Zeek and NetFlow analysis; Honeypots and deception
• Network Segmentation, NAC and Secure Design: VLANs, private VLANs, micro-segmentation; 802.1X and network access control; Secure design patterns for offices, data centres and branches
• Wireless and Mobile Network Security: WPA2/WPA3 Enterprise, RADIUS; Rogue AP detection; Guest network and BYOD policy

Bug Bounty & Web Application Security Course (About 2.5 months (weekday or weekend batches))

• Web Fundamentals and Bounty Workflow: HTTP, cookies, headers, same-origin policy, CORS; Programme rules, safe harbour, duplicates and severity; Setting up Burp Suite and a recon workflow
• Injection and Client-Side Vulnerabilities: SQL, NoSQL, command and template injection; Reflected, stored and DOM XSS; CSP bypass concepts; CSRF, clickjacking, open redirects
• Authentication, Session and Access Control: Broken access control, IDOR, privilege escalation; Password reset, OTP and MFA bypass patterns; JWT and OAuth/SSO flaws
• API, GraphQL and Mobile Backend Testing: REST and GraphQL testing, introspection and abuse; Rate-limit, mass assignment and BOLA; Intercepting Android/iOS traffic
• Advanced Bugs: SSRF, XXE, Race Conditions, Cache Issues: SSRF to cloud metadata (lab); XXE and deserialisation; Race conditions and business logic
• Reporting, Ethics and Building a Reputation: Impact statements, reproduction steps, CVSS; Communicating with triagers and avoiding duplicates; Legal and ethical boundaries

Cloud Security Course (About 3 months (weekday or weekend batches))

• Cloud Concepts and Shared Responsibility: IaaS, PaaS, SaaS and deployment models; Shared responsibility across AWS and Azure; Cloud threat landscape and common breaches
• Identity and Access Management: Users, roles, policies and least privilege; MFA, SSO, conditional access; Privilege escalation paths in IAM
• Network and Data Protection in the Cloud: VPC/VNet design, security groups, NACLs; Private endpoints and WAF; Encryption at rest and in transit, KMS
• Logging, Monitoring and Detection: CloudTrail, GuardDuty, Security Hub, Config; Azure Monitor, Defender for Cloud, Sentinel basics; Cloud incident response
• Posture Management, Containers and Serverless: CSPM concepts and CIS benchmarks; Docker and Kubernetes security basics; Serverless function risks
• Compliance, Governance and Career Roadmap: ISO 27001, SOC 2, PCI DSS, DPDP overview; Data residency and CERT-In expectations; Cloud security architect career path

CompTIA Security+ Training (About 2 months (intensive) or 3 months)

• General Security Concepts: CIA, AAA, zero trust, gap analysis; Symmetric/asymmetric crypto, PKI, hashing; Change management and its security impact
• Threats, Vulnerabilities and Mitigations: Threat actors, motivations, attack surfaces; Malware, phishing, social engineering, application attacks; Indicators of compromise; mitigation techniques
• Security Architecture: Network segmentation, firewalls, VPN, zero-trust architecture; Cloud and virtualisation security; Resilience, backups and redundancy
• Security Operations: Hardening, vulnerability management, patching; SIEM, logging, alert response; Incident response and digital forensics basics
• Security Program Management and Oversight: Risk assessment and management; Policies, standards, third-party risk; Compliance, audits, privacy, security awareness
• Exam Practice and Performance-Based Questions: Timed mock exams; Performance-based question drills; Weak-area revision

CISSP Certification Training (About 3 months (weekend-friendly))

• Security and Risk Management: CIA, governance, compliance, ethics; Risk assessment, treatment, business continuity; Legal and regulatory issues; privacy
• Asset Security and Security Architecture: Data lifecycle and classification; Security models, cryptography, secure design; Physical and environmental security
• Communication and Network Security: Network design and components; Secure channels and wireless; Network attacks and defences
• Identity and Access Management: Authentication, authorisation, federation; Access control models; Privileged access management
• Security Assessment and Testing: Vulnerability assessments, penetration testing; Audit processes and metrics; Security control testing
• Security Operations: Logging, monitoring, incident response; Disaster recovery and continuity; Change and configuration management
• Software Development Security: SDLC models, secure coding principles; DevSecOps, API security; Software assurance and acceptance
• Exam Strategy and Mock Exams: The “manager mindset” approach; Mock exams with rationale review; Time management

Cyber Security Diploma Course (9-12 months (weekday or weekend))

• Phase 1 – Foundations (Months 1-2): Networking and TCP/IP in depth; Linux, Windows, Active Directory basics; Bash and Python for security tasks
• Phase 2 – Offensive Security (Months 3-5): Ethical hacking methodology; Web, network and wireless attacks; Active Directory and privilege escalation
• Phase 3 – Defensive Security (Months 6-8): SIEM, log analysis and detection; Incident response playbooks; Digital forensics fundamentals
• Phase 4 – Specialisation and Capstone (Months 9-12): Track options: cloud security, application security, GRC/compliance; Capstone project with mentor review; Certification preparation (Security+, CEH or cloud)

Cyber Security Course for Beginners (About 6-8 weeks)

• How Computers and the Internet Work: Hardware, operating systems, files and processes; IP addresses, DNS, web servers, browsers; How emails, UPI and websites actually work
• Cyber Threats Explained: Phishing, vishing, smishing and UPI scams; Malware, ransomware, spyware; Password attacks and data breaches
• Linux and Command Line Basics: Installing Kali Linux in a virtual machine; Files, permissions, users; Basic commands and networking tools
• Staying Safe: Defence Basics: Password managers, 2FA, safe browsing; Antivirus, firewalls and updates; Backup and recovery
• Your First Hacking Labs: Legal and ethical boundaries; Scanning with Nmap in a lab; A simple web vulnerability and password audit
• Career Paths and Next Steps: SOC, VAPT, cloud, GRC, forensics roles; Certifications overview; Learning plan and home-lab suggestions

Malware Analysis Course (About 3 months)

• Safe Malware Lab and Triage: Isolated VMs, snapshots, network simulation (INetSim); Hashing, file types, strings, packers; VirusTotal and sandbox triage
• Static Analysis and PE File Structure: PE headers, imports, sections; Strings, entropy and packing detection; Document and script malware (macros, PowerShell)
• Dynamic and Behavioural Analysis: Process Monitor, Process Hacker, Regshot; Network behaviour, C2 patterns; Cuckoo/CAPE sandbox use
• Reverse Engineering Basics: x86/x64 basics, calling conventions; Ghidra and x64dbg workflow; Decrypting strings, defeating simple obfuscation
• Detection Engineering and Reporting: YARA and Sigma rule writing; IOC extraction and sharing (STIX/MISP); Analyst report structure

Mobile Application Security Course (About 2 months)

• Mobile Platform Security Architecture: Android sandbox, permissions, components; iOS keychain and entitlements; OWASP Mobile Top 10 and MASVS
• Static Analysis: APK structure, decompiling with jadx; Manifest analysis, exported components; MobSF automated review, secrets discovery
• Dynamic Analysis and Runtime Instrumentation: Frida and Objection basics; Hooking functions, bypassing root checks; Insecure storage and logging review
• Network Traffic and API Testing: Burp proxy setup for Android; Certificate pinning bypass techniques; API authorisation flaws
• iOS Testing Basics and Reporting: IPA analysis and jailbreak concepts; Keychain and plist review; MASVS-based reporting and fixes

Cyber Security GRC & ISO 27001 Course (About 2 months)

• Governance and Security Management Basics: Roles: CISO, ISO, DPO, risk owner; Security policy hierarchy; Standards vs frameworks vs laws
• Risk Assessment and Treatment: Asset inventory and valuation; Threats, vulnerabilities, likelihood, impact; Risk treatment: accept, mitigate, transfer, avoid
• ISO/IEC 27001:2022 Implementation: ISMS scope, context and leadership; Statement of Applicability; Annex A organisational, people, physical, technological controls
• Other Frameworks: SOC 2, PCI DSS, NIST CSF, RBI Guidelines: SOC 2 trust criteria; PCI DSS requirements overview; NIST Cybersecurity Framework
• Privacy and the DPDP Act: Digital Personal Data Protection Act 2023 key duties; Consent, data principal rights, breach notification; Data inventories and DPIA concepts
• Internal Audit, Business Continuity and Reporting: Audit planning, evidence, findings; BCP/DR basics, RTO and RPO; Metrics and management reporting

Threat Intelligence & Threat Hunting Course (About 2.5 months)

• Adversary Behaviour and MITRE ATT&CK: ATT&CK matrix, groups and software; Kill chain vs ATT&CK; Mapping incidents to techniques
• Hunting Methodology: Hypothesis-driven vs intel-driven hunts; Data sources and visibility gaps; Baselining normal behaviour
• Endpoint and Network Hunting: Sysmon and EDR telemetry hunting; PowerShell, WMI, scheduled task abuse; DNS, beaconing and lateral movement hunts
• Cyber Threat Intelligence: Intelligence lifecycle and types; OSINT sources, MISP, OpenCTI; IOC vs TTP; confidence and bias
• Detection Engineering: Sigma rules and conversion to SIEM queries; YARA for files and memory; Testing with Atomic Red Team

Python for Cyber Security Course (About 2 months)

• Python Fundamentals: Data types, conditions, loops; Functions, modules and virtual environments; File handling and exceptions
• Networking with Python: Socket programming, TCP/UDP clients and servers; Port scanner with threading; Scapy for packet crafting and sniffing
• Web and API Automation: Requests and BeautifulSoup; Login form testing in a lab; Using VirusTotal / AbuseIPDB APIs
• Security Tooling Projects: Subdomain enumerator; Hash cracker with wordlists; File integrity monitor
• Automation for SOC and Reporting: Parsing JSON and CSV from SIEM exports; Generating HTML/PDF reports; Slack/Email alerts from scripts

OSCP Preparation Course (About 4 months)

• Methodology, Notes and Enumeration: Systematic enumeration checklists; Note-taking with Obsidian/CherryTree and screenshots; Service-specific enumeration
• Exploitation and Public Exploits: Exploit-DB, searchsploit, modifying exploits; Web application attacks (SQLi, LFI/RFI, uploads); Reverse shells and stabilising shells
• Privilege Escalation: Linux and Windows: Enumeration scripts and manual checks; SUID, cron, capabilities, sudo, services; Token privileges, unquoted paths, DLL hijacking, registry
• Active Directory: Enumeration with BloodHound / PowerView; Kerberos attacks, password spraying, pass-the-hash; Lateral movement and domain compromise
• Pivoting, Tunnelling and Buffer Overflow Concepts: SSH tunnels, Chisel, Ligolo; Port forwarding strategies; Stack buffer overflow overview and practice
• Exam Simulation and Reporting: Time management and strategy; 24-hour mock exam; Professional reporting for OSCP

Kali Linux & Linux for Hackers Course (About 5-6 weeks)

• Installing and Understanding Linux: VirtualBox/VMware, Kali and Ubuntu installation; File system hierarchy; Package management
• Command Line Mastery: Navigation, file operations, searching with find/grep; Pipes, redirection, text processing (awk, sed, cut); Editors: nano and vim basics
• Users, Permissions and Processes: Users, groups, sudo; chmod, chown, SUID/SGID; Processes, services, cron
• Networking on Linux: ip, ss, netstat, ping, traceroute; ssh, scp, netcat; iptables basics
• Bash Scripting and Kali Tool Tour: Variables, loops, functions; Scripting a ping sweep; Overview of Nmap, Wireshark, Burp, Metasploit, John

Cyber Security Internship Program (4-8 weeks (choose your track))

• Orientation, Tools and Reporting Standards: Project workflow and ticketing; Report templates and severity scoring; Evidence and note-taking
• Offensive Track Projects: Network vulnerability assessment; Web application testing on practice apps; Remediation recommendations
• Defensive Track Projects: SIEM log analysis and alert triage; Phishing investigation; Incident timeline and report
• GRC Track Projects: Risk register for a fictional company; Policy drafting; Gap analysis against ISO 27001
• Presentation and Feedback: Final presentation to mentors; Written feedback and improvement plan; Portfolio and LinkedIn publishing

Cyber Security Certification Course (1.5 – 4 months depending on the certification)

• Certification Roadmap and Counselling: Entry, intermediate, advanced ladders; Offensive, defensive, cloud, GRC paths; Cost, validity and renewal considerations
• Foundational Certification Preparation: Core security domains; Performance-based questions; Mock exams
• Offensive Certification Preparation: Knowledge vs practical exams; Lab practice plans; Report writing
• Defensive and Cloud Certification Preparation: SIEM and detection topics; Cloud security services; Scenario questions
• Exam Registration, Strategy and Renewal: Registration with Pearson VUE / certifying bodies; Study schedules and revision methods; CPE/renewal requirements

DevSecOps Course (About 3 months)

• DevSecOps Principles and Threat Modelling: Shift-left, secure SDLC, OWASP SAMM; Threat modelling with STRIDE; Security requirements and user stories
• Secure CI/CD Pipelines: GitHub Actions / GitLab CI; Secrets management, signed commits, branch protection; Pipeline attacks and hardening
• SAST, SCA and DAST: SonarQube / Semgrep for static analysis; Dependency scanning with OWASP Dependency-Check / Trivy; DAST with OWASP ZAP
• Container and Kubernetes Security: Docker image hardening, non-root, minimal bases; Image scanning and signing; Kubernetes RBAC, network policies, pod security
• Infrastructure as Code Security and Compliance: Terraform scanning with Checkov/tfsec; Policy as code with OPA; Cloud guardrails
• Monitoring, Incident Response and Metrics: Logging and runtime detection (Falco); Vulnerability management workflow; DevSecOps metrics

AI & LLM Security Course (About 6-8 weeks)

• AI and LLM Fundamentals for Security People: How LLMs, embeddings and RAG work; AI application architecture; Where trust boundaries sit
• Prompt Injection and Jailbreaks: Direct and indirect prompt injection; Jailbreak patterns and defences; Data exfiltration through model output
• Data, Model and Supply Chain Risks: Training data poisoning and model backdoors; Insecure plugins and agent tools; Model supply chain and dependency risks
• AI Red Teaming and Evaluation: Test plans for LLM features; Automated attack frameworks; Reporting AI risks
• Using AI in Security Operations: Log summarisation and enrichment; Detection and query drafting; Risks: hallucination, data leakage
• Governance, Privacy and Compliance for AI: AI usage policies, DPDP considerations; NIST AI RMF overview; Vendor risk for AI tools

How the Syllabus Maps to Industry Roles

Syllabi are reviewed periodically to reflect new tools and threats. Request the latest PDF during the free demo, and read about fees on our fees page.

Batch Timings, Free Demo and How to Register

A new batch for your chosen course starts every week, with weekday evening, weekend and fast-track options depending on trainer availability. The simplest way to begin is the free demo class: you join a live session, see the lab platform, review the syllabus with the trainer and ask any question about fees, schedule or career outcomes before you decide.

1. Fill the enquiry form on this page or message us on WhatsApp at +91 81888 77720.
2. We call you back, understand your background and suggest the right course and batch.
3. Attend the free demo class and review the complete syllabus.
4. Confirm your seat for the upcoming batch and receive lab and class access.