Security Education Courses

This course provides an in-depth exploration of penetration testing techniques tailored to modern cloud environments. Participants will gain hands-on experience identifying vulnerabilities, exploiting weaknesses, and understanding the unique attack vectors that cloud infrastructures introduce. Covering leading platforms such as AWS, Azure, and Google Cloud, SEC588 emphasizes real-world scenarios, enabling students to assess and secure cloud systems effectively. With a focus on both offensive and defensive strategies, the course equips cybersecurity professionals with the tools to stay ahead in a rapidly evolving threat landscape.

This course delves into the powerful capabilities of Metasploit as a comprehensive tool for enterprise-level penetration testing. Designed for security professionals, SEC580 teaches participants how to utilize Metasploit to uncover vulnerabilities, develop custom exploits, and simulate real-world attack scenarios. The course covers advanced features such as pivoting, automation, and integration with other tools, empowering attendees to assess complex network environments effectively. With hands-on labs and practical exercises, SEC580 ensures mastery of Metasploit’s potential, enabling organizations to strengthen their security posture against evolving threats.

This course empowers security professionals to leverage Python for automating complex information security tasks. SEC573 provides a hands-on approach to writing custom scripts for vulnerability scanning, data analysis, log parsing, and intrusion detection. Participants will learn to develop tools that streamline repetitive workflows, enhance threat hunting, and integrate seamlessly into existing security operations. With a focus on practical problem-solving, SEC573 equips attendees with the skills to create scalable, efficient, and adaptable solutions, ensuring organizations stay ahead in a fast-paced security landscape.

SEC560 focuses on advanced techniques for conducting thorough penetration tests in large-scale enterprise environments. Participants will learn to assess complex networks, web applications, and systems for vulnerabilities using real-world attack strategies. The course covers both external and internal penetration testing, emphasizing effective exploitation, post-exploitation, and lateral movement techniques. With a strong hands-on approach, students will gain experience in identifying, exploiting, and mitigating risks within enterprise infrastructures. SEC560 prepares professionals to tackle the growing security challenges faced by large organizations and helps them develop comprehensive strategies for improving overall cybersecurity resilience.

SEC587 provides an in-depth exploration of advanced techniques for gathering and analyzing open-source intelligence (OSINT) in cybersecurity. The course teaches participants how to effectively leverage publicly available data—from social media and websites to government databases and deep web sources—to uncover potential security threats and vulnerabilities. Students will learn how to use OSINT tools for real-time threat intelligence, competitor analysis, and threat actor profiling. Emphasizing practical, hands-on exercises, SEC587 enhances the ability to conduct in-depth investigations, identify attack vectors, and anticipate cyber threats, all while adhering to legal and ethical standards.

SEC554 explores the rapidly evolving world of blockchain technology and its security implications, focusing on securing decentralized applications (dApps) and smart contracts. Participants will gain an understanding of blockchain architectures, consensus mechanisms, and cryptographic principles, along with the vulnerabilities that can exist within blockchain networks and smart contracts. Through practical labs, students will learn to identify and mitigate risks such as reentrancy attacks, transaction malleability, and gas limit vulnerabilities. SEC554 prepares professionals to secure blockchain ecosystems, ensuring the integrity of decentralized applications and protecting against emerging threats in blockchain-based environments.

SEC530 offers a comprehensive approach to designing and implementing a Zero Trust security model within hybrid enterprise environments. This course emphasizes the importance of security architecture in mitigating modern threats by assuming that every user, device, and application could be compromised. Participants will explore Zero Trust principles, including identity and access management, micro-segmentation, continuous monitoring, and least-privilege access. Through hands-on labs and case studies, students will learn to implement these concepts across hybrid infrastructures, ensuring robust defenses and minimizing the attack surface. SEC530 prepares security professionals to create and maintain resilient, adaptive security architectures aligned with the latest industry standards and best practices.

SEC510 provides a deep dive into securing public cloud infrastructures, focusing on the top three platforms: Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). The course covers key security challenges unique to the cloud, such as identity and access management (IAM), data protection, network security, and compliance across these environments. Participants will learn to assess and mitigate risks, implement best practices, and leverage native cloud security tools for threat detection and incident response. Through hands-on exercises and real-world case studies, SEC510 equips security professionals with the skills to protect and secure critical cloud-based resources in multi-cloud and hybrid cloud environments.

SEC505 teaches security professionals how to secure Windows environments and automate security tasks using PowerShell while maintaining robust protection against internal and external threats. The course explores techniques for hardening Windows systems, securing PowerShell scripts, and detecting malicious automation. Participants will gain practical experience in securing automation workflows, managing administrative privileges, and mitigating common attack vectors like PowerShell-based exploits. With hands-on labs and real-world examples, SEC505 enables attendees to effectively secure Windows environments, automate incident response, and safeguard against advanced threats that target Windows systems and PowerShell automation.

SEC501 is designed for experienced security professionals who protect enterprise environments from advanced threats. This course provides in-depth training on defending against sophisticated attacks using modern security tools and techniques. Participants will explore topics such as advanced intrusion detection, threat hunting, malware analysis, and effective use of security information and event management (SIEM) systems. The curriculum emphasizes real-world scenarios, including defending against ransomware, lateral movement, and insider threats. Through hands-on labs and exercises, SEC501 equips defenders with the expertise to strengthen an organization’s security posture, respond to incidents effectively, and build a resilient enterprise defense strategy.

SEC575 provides a comprehensive approach to identifying, analyzing, and exploiting vulnerabilities in mobile applications on iOS and Android platforms. This course equips security professionals with the skills to perform advanced penetration testing and reverse engineering of mobile apps. Topics include secure coding practices, mobile app architecture, API security, and common vulnerabilities such as insecure data storage, improper authentication, and cryptographic flaws. Through hands-on labs and real-world scenarios, participants will learn to evaluate the security of mobile applications, uncover weaknesses, and provide actionable recommendations for remediation. SEC575 prepares attendees to tackle the unique challenges of securing mobile ecosystems effectively.

SEC595 empowers cybersecurity professionals to leverage data science, artificial intelligence (AI), and machine learning (ML) to enhance threat detection, incident response, and security automation. This course provides a practical, hands-on approach to applying data-driven techniques for analyzing security data, identifying anomalies, and building predictive models. Participants will learn to work with popular tools and frameworks, explore real-world datasets, and develop ML models to solve cybersecurity challenges such as intrusion detection, malware classification, and phishing detection. SEC595 bridges the gap between data science and cybersecurity, equipping professionals with cutting-edge skills to tackle modern threats effectively.