Certified Ethical Hacker (CEH v13) Courses in Pune

Course Introduction
Course Components
Importance of OS in Cyber Security

IT Security & Risk Concepts

• Risk
• Threats
• Exploits
• Vulnerability
• Basics of Enterprise IT risk mitigation
• Fundamentals of NIST Cybersecurity Framework (CSF)
• MITRE Framework

General security concepts

• Security controls: comparing technical, preventive, managerial, deterrent,
  operational, detective, physical, corrective, compensating, and directive
  controls.
• Fundamental concepts: summarizing confidentiality, integrity, and availability
  (CIA); non-repudiation; authentication, authorization, and accounting (AAA);
  zero trust; and deception/disruption technology.
• Change management: explaining business processes, technical implications,
  documentation, and version control.
• Cryptographic solutions: using public key infrastructure (PKI), encryption,
  obfuscation, hashing, digital signatures, and blockchain.

Endpoint Security

• What and why of Endpoint Security
• Threat vectors and challenges for organisation relating to EPS
  • Tackling Malwares
  • Remote Code Execution
  • Data Theft
  • Software Compliance
• Various IT Security Technologies for EPS
  • EDR/XDR
  • NGAV
  • MDM
  • SASE
  • DLP
  • ZTNA

1. Introduction to System and Network Hardening

• Overview of the importance and objectives of system hardening.
• General principles and best practices across systems and networks.

2. Hardening Windows and Linux Systems

• Key strategies for securing Windows environments.
• Essential Linux server security tips.
• Configuring security policies and user rights.
• Implementing audit policies and monitoring with Windows Security Logs.
• Managing user privileges, services, and network configurations.
• Setting up and configuring SELinux.
• Implementing firewall rules using iptables or firewalld.
• Managing user accounts, permissions, and security-enhanced Linux (SELinux)
  settings.

3. Application and Message Hardening Through Cryptography

• Techniques for securing applications against common vulnerabilities (such as
  buffer overflows, SQL injection).
• Using sandboxing, input validation, and dependency management.
• Ensuring message confidentiality and integrity using cryptographic methods.
• Overview of encryption, digital signatures, and hashing for securing data.
• Encrypting and decrypting messages using tools like OpenSSL.
• Generating and verifying digital signatures.

4. Authentication Mechanisms and Network Hardening with IPSec and Other
Protocols

• Role of authentication in securing access to resources.
• Encrypting and decrypting messages using tools like OpenSSL.
• Generating and verifying digital signatures.
• Using IPSec for secure network communications.

• Introduction to the legal framework governing cyber security in India.
• Importance of understanding these laws before engaging in ethical hacking
  and testing.
• Detailed discussion on the IT Act, focusing on provisions related to
  cybersecurity.
• Penalties and remedies under the IT Act for various cyber offenses.
• How the IT Act addresses data protection, privacy, and cyber crimes.
• Introduction to the Indian Computer Emergency Response Team (CERT-In).
• CERT-In’s mandate and its role in handling cybersecurity incidents.
• Reporting requirements for cybersecurity incidents and the types of
  assistance CERT-In provides.
• Discussion on the Securities and Exchange Board of India’s expectations for
  cybersecurity in the capital market.
• Specific cybersecurity practices mandated for financial institutions to protect
  against cyber threats.
• Key International Cybersecurity Laws and Regulations
• Overview of the Reserve Bank of India’s guidelines for cybersecurity in the
  banking sector.
• Analysis of SEBI circulars concerning cyber security frameworks, audits, and
  compliance requirements for market intermediaries.

General security concepts

• Security controls: comparing technical, preventive, managerial, deterrent,
  operational, detective, physical, corrective, compensating, and directive
  controls.
• Fundamental concepts: summarizing confidentiality, integrity, and availability
  (CIA); non-repudiation; authentication, authorization, and accounting (AAA);
  zero trust; and deception/disruption technology.
• Change management: explaining business processes, technical implications,
  documentation, and version control.
• Cryptographic solutions: using public key infrastructure (PKI), encryption,
  obfuscation, hashing, digital signatures, and blockchain.

• Threat actors and motivations: comparing nation-states, unskilled attackers,
  hacktivists, insider threats, organized crime, shadow IT, and motivations like
  data exfiltration, espionage, and financial gain.
• Threat vectors and attack surfaces: explaining message-based, unsecure
  networks, social engineering, file-based, voice call, supply chain, and
  vulnerable software vectors.
• Vulnerabilities: explaining application, hardware, mobile device, virtualization,
  operating system (OS)-based, cloud-specific, web-based, and supply chain
  vulnerabilities.
• Malicious activity: analyzing malware attacks, password attacks, application
  attacks, physical attacks, network attacks, and cryptographic attacks.
• Mitigation techniques: using segmentation, access control, configuration
  enforcement, hardening, isolation, and patching.