Cyber Security-2

Prerequisite

Minimum Intermediate or Equivelant, having a personal Computer (with average specifications) , able to read write and undersatnd the English Language and Paas out of CCF-1

Course Description

This Beginner level cybersecurity course offers an immersive introduction to key concepts and tools essentials for understanding and securing digital environments. Through a combination of theoretical lectures and hand-on exercises, students will gain practical knowledge in using industry-standard tools and Framework.

What you will learn

• Gain practical experience in using Kali Linux tools for penetration testing and ethical hacking. • Understand the MITRE ATT&CK framework and its application in threat analysis. • Learn to develop security use cases and create effective security policies. • Acquire hands-on skills in using QRadar for security monitoring and incident response. • Develop proficiency in deploying and managing Wazuh for host-based intrusion detection and response.

Course Outline

• Week 1

  • Introduction to Course • Introduction and Configuration of Kali Linux
  • • Popular tools available in Kali Linux.

• Week 2 Nmap

  • Basic Nmap commands (e.g., nmap -sP for ping scan)
  • • Understanding different scan types (e.g., TCP connect scan, SYN scan)
  • • Interpreting Nmap scan results
  • • Practical exercises to scan local and remote networks.

• Week 3 Burpsuit

  • Basic proxy setup in Burpsuite
  • • Capturing HTTP requests and responses
  • • Introduction to Burpsuite's automated scanner

• Week 4 DVWA

  • Setting up DVWA in a local environment
  • • Exploring different security levels in DVWA
  • • Understanding common web vulnerabilities (e.g., SQL injection, XSS, CSRF)
  • • Practical exercises to exploit vulnerabilities using DVWA

• Week 5 Metasploit

  • Basics of Metasploit's architecture
  • • Understanding exploits, payloads, and auxiliary modules
  • • Introduction to Metasploit's command-line interface
  • • Basic exploitation exercises (e.g., exploiting a vulnerable service)

• Week 6 Wireshark

  • Understanding Wireshark's interface
  • • Capturing network traffic
  • • Analyzing captured packets (e.g., protocols, headers)
  • • Basic filtering and search capabilities in Wireshark

• Week 7 MITRE

  • Understanding MITRE Framework • Studying different Tactics and Techniques

• Week 8

  • Common Usecase Policies based on critical Windows Event ID based

• Week 9 Common Usecase Policies based on Firewall:

  • 1
  • Reconnaissance 2
  • Brute Force 3
  • Exfiltration Inbound and outbound on critical ports

• Week 10 QRadar Hands-on

  • QRadar Interface overview
  • Creating custom rules

• Week 11

  • • Monitoring and responding to offenses
  • • Investigation using search and correlation
  • • Generating reports

• Week 12 Wazuh Hands-on

  • Basic Interface overview • Applying basic searches • Creating dashboards

Grading Criteria

Particulars	Marks (%)
Quizzes	20
Class Participation/ Attendance	15
Projects	25
Final Projects	40
Total	100