Courses Catalog

SEC467 equips security professionals with the knowledge and skills to recognize, prevent, and respond to social engineering attacks. This course delves into the psychological tactics used by attackers to manipulate individuals into divulging confidential information or compromising security systems. Through real-world scenarios and practical exercises, participants will learn to identify phishing, pretexting, baiting, and tailgating attacks, and develop effective countermeasures. SEC467 also covers ethical considerations and legal implications, providing a comprehensive understanding of social engineering threats in both organizational and personal contexts, helping professionals safeguard against these subtle yet highly effective attack methods.

SEC488 provides foundational knowledge for securing cloud environments across various platforms, including AWS, Azure, and Google Cloud. This course is designed for security professionals seeking to understand cloud-specific risks, security controls, and compliance requirements. Participants will explore core topics such as identity and access management (IAM), secure configuration, data protection, and monitoring in cloud-native environments. With hands-on labs and practical exercises, students will gain the skills needed to identify vulnerabilities, implement security best practices, and safeguard cloud infrastructure. SEC488 is the ideal starting point for building a strong cloud security strategy and ensuring a secure adoption of cloud technologies.

SEC201 is an entry-level course designed to provide a strong foundation in computing and technology concepts essential for cybersecurity professionals. The course covers fundamental topics such as computer hardware, operating systems, networking, and basic programming principles. Participants will also explore key cybersecurity concepts, including threat identification, basic encryption, and safe computing practices. Through practical exercises and real-world examples, SEC201 equips attendees with the essential technical knowledge and skills needed to succeed in more advanced cybersecurity training and roles, making it an ideal starting point for individuals new to the field.

This risk management course is specifically designed to guide a CISO in defining and implementing a risk management approach within an IS program. The course introduces the student to the most common approaches and practices used by organizations worldwide. It is not intended to cover risk outside of the IS enterprise (including financial and business risks).

EC-Council’s Certified Penetration Testing Professional program teaches you how to perform an effective penetration testing in an enterprise network environment that must be attacked, exploited, evaded, and defended. If you have only been working in flat networks, C|PENT’s live practice range will teach you to take your skills to the next level by teaching you how to pen test IoT systems, OT systems, how to write your own exploits, build your own tools, conduct advanced binaries exploitation, double pivot to access hidden networks, and also customize scripts/exploits to get into the innermost segments of the network.

SEC595 empowers cybersecurity professionals to leverage data science, artificial intelligence (AI), and machine learning (ML) to enhance threat detection, incident response, and security automation. This course provides a practical, hands-on approach to applying data-driven techniques for analyzing security data, identifying anomalies, and building predictive models. Participants will learn to work with popular tools and frameworks, explore real-world datasets, and develop ML models to solve cybersecurity challenges such as intrusion detection, malware classification, and phishing detection. SEC595 bridges the gap between data science and cybersecurity, equipping professionals with cutting-edge skills to tackle modern threats effectively.

SEC661 is a specialized course focused on advanced exploitation techniques for ARM-based architectures. Tailored for experienced security professionals, the course delves into the intricacies of ARM assembly, reverse engineering, and vulnerability discovery. Participants will explore real-world exploitation scenarios, including stack overflows, return-oriented programming (ROP), and bypassing modern mitigation techniques like DEP and ASLR on ARM systems. With hands-on labs and detailed guidance, SEC661 prepares attendees to analyze and exploit vulnerabilities in IoT devices, mobile platforms, and embedded systems, equipping them with the skills to defend against sophisticated attacks targeting ARM-based technologies.

SEC565 focuses on the strategies, tactics, and techniques used by red teams to emulate advanced adversaries and conduct realistic penetration testing. This course provides in-depth training on planning, executing, and reporting red team operations, with an emphasis on simulating real-world cyberattacks across various attack vectors, such as phishing, social engineering, lateral movement, and privilege escalation. Participants will learn how to apply the MITRE ATT&CK framework for adversary emulation and how to tailor their operations to test an organization’s defenses. Through hands-on labs and real-world scenarios, SEC565 equips professionals with the skills to conduct thorough red team assessments, identify vulnerabilities, and improve an organization’s overall security resilience.

SEC555 is a hands-on course that teaches security professionals how to effectively leverage Security Information and Event Management (SIEM) platforms for detecting, analyzing, and responding to cyber threats. The course focuses on configuring, tuning, and optimizing SIEM solutions to gather actionable intelligence from logs, events, and network data. Participants will explore advanced analytics techniques, threat hunting methodologies, and real-world scenarios to identify malicious activity and improve incident response. Through practical exercises and case studies, SEC555 equips attendees with the skills to transform their SIEM into a powerful tool for proactive defense and tactical decision-making in dynamic security environments.

FOR578 is a comprehensive course designed to teach cybersecurity professionals how to collect, analyze, and operationalize cyber threat intelligence (CTI) to proactively defend against advanced threats. The course covers intelligence lifecycle fundamentals, adversary tracking, attribution analysis, and threat modeling techniques such as the MITRE ATT&CK framework. Participants will learn how to leverage open-source intelligence (OSINT), analyze threat actor tactics, techniques, and procedures (TTPs), and integrate CTI into security operations. Through hands-on labs and real-world case studies, FOR578 equips analysts, SOC teams, and security leaders with the skills needed to transform raw data into actionable intelligence that enhances threat detection, incident response, and strategic decision-making.

CompTIA Advanced Security Practitioner (CASP+) is an advanced-level cybersecurity certification for security architects and senior security engineers charged with leading and improving an enterprise’s cybersecurity readiness. What Skills Will You Learn? 1. Security Architecture Analyze security requirements in hybrid networks to work toward an enterprise-wide, zero trust security architecture with advanced secure cloud and virtualization solutions. 2. Security Operations Address advanced threat management, vulnerability management, risk mitigation, incident response tactics and digital forensics analysis