Cyber security course in Pune

1. Linux Foundations

• Introduction to Linux and its flavours

2. Linux Distributions

• Red Hat family: RHEL, CentOS
  Stream, Rocky Linux (AWS EC2
  default relevance)
• Debian family: Debian, Ubuntu (most
  used in cloud & containers)
• SUSE (enterprise use)
  • Amazon Linux (AWS-optimized)

3. Linux architecture
4. Linux Installation
5. Concept of Files and Directories in
Linux

• File System
• Directory Structure (FHS
  Filesystem Hierarchy Standard)

6. User and Group Policies

• User management
• Group Management
• Permissions & Ownership

7. Unix / Linux General Commands

• File & Directory Commands
  • ls, pwd, cd
  • touch, mkdir, rmdir
  • cp, mv, rm
  • file, stat
    
    
• File Viewing & Editing
  • cat, less, more
  • head, tail
  • nano, vi/vim
    
    
• Search & Text Processing
  • grep
  • find
  • awk
  • sed
  • sort, uniq, wc
    
    
• Access Permissions & Ownership
  • chmod
  • chown
  • umask
    
    
• Process Management
  • ps, top, htop
  • kill, killall
    
    

8. Vi Editor

• Modes in Vi
• Command Mode (Default)
• Insert Mode
• Last Line Mode (Ex Mode)
• Basic Insert Commands
• Save & Exit Commands
• Editing commands

1. Introduction to Databases & MySQL

• What is a Database?
• Why use a Database?
  DBMS vs RDBMS
• Introduction to SQL & MySQL
• Database vs DBMS vs
• SQL vs MySQL
• Installing & Configuring MySQL
• MySQL Architecture: How MySQL
  Works
• MySQL Clients: CLI & Workbench
• Connecting to MySQL Server
  
  

2. Working with Databases & Tables

• Creating and Using Databases
• Dropping Databases
• Creating Tables (CREATE TABLE)
• Viewing Table Structure (DESCRIBE)
• Renaming & Dropping Tables
• Data Types in MySQL
  • Numeric
  • String
  • Date/Time
  • CHAR vs VARCHAR, INT types
• Data Constraints: Primary Key,
  Foreign Key, NOT NULL, UNIQUE,
  CHECK, DEFAULT
  
  

3. SQL Fundamentals

• SQL Command Categories
  • DDL (CREATE, ALTER, DROP)
  • DML (INSERT, UPDATE, DELETE)
  • DQL (SELECT)
  • DCL (GRANT, REVOKE – basic
    only)
  • TCL (COMMIT, ROLLBACK)
    
    

4. Data Manipulation & Transactions

• Inserting Data (INSERT INTO)
• Updating Data (UPDATE)
• Deleting Data (DELETE)
• Transactions: BEGIN, COMMIT,
  ROLLBACK
  
  

5. Querying & Filtering Data

• SELECT Statement
• Filtering Data with WHERE
• Comparison & Logical Operators
  • =, <>, >, <, >=, <=
  • AND, OR, NOT
  • BETWEEN / NOT BETWEEN
  • IN / NOT IN
  • IS NULL / IS NOT NULL
    
    

6. Sorting, Aggregation & Subqueries

• Sorting Results with ORDER BY
• Aggregate Functions: COUNT, SUM,
  AVG, MIN, MAX
• GROUP BY and HAVING
• Subqueries (single-row & multi-row)
• Exporting / Importing MySQL
  Databases7
  
  

7. Functions

• Character functions
• Number functions
• Date functions
  
  

8. Working with Joins
Why Joins?

• CROSS JOIN
• INNER JOIN
• LEFT & RIGHT
• OUTER JOIN
• UNION vs UNION ALL
  
  

9. Database Design & Optimization
Basics

• Principles of Database Design
• Relationships: One-to-One, One-to
  Many, Many-to-Many
• Normalization vs Denormalization
  (1NF, 2NF, 3NF only)

Course Introduction
Course Components
Importance of OS in Cyber Security

IT Security & Risk Concepts

• Risk
• Threats
• Exploits
• Vulnerability
• Basics of Enterprise IT risk mitigation
• Fundamentals of NIST Cybersecurity Framework (CSF)
• MITRE Framework
  
  

General security concepts

• Security controls: comparing technical, preventive, managerial, deterrent,
  operational, detective, physical, corrective, compensating, and directive
  controls.
• Fundamental concepts: summarizing confidentiality, integrity, and availability
  (CIA); non-repudiation; authentication, authorization, and accounting (AAA);
  zero trust; and deception/disruption technology.
• Change management: explaining business processes, technical implications,
  documentation, and version control.
• Cryptographic solutions: using public key infrastructure (PKI), encryption,
  obfuscation, hashing, digital signatures, and blockchain.
  
  

Endpoint Security

• What and why of Endpoint Security
• Threat vectors and challenges for organisation relating to EPS
  • Tackling Malwares
  • Remote Code Execution
  • Data Theft
  • Software Compliance
• Various IT Security Technologies for EPS
  • EDR/XDR
  • NGAV
  • MDM
  • SASE
  • DLP
  • ZTNA

1. Introduction to System and Network Hardening

• Overview of the importance and objectives of system hardening.
• General principles and best practices across systems and networks.
  
  

2. Hardening Windows and Linux Systems

• Key strategies for securing Windows environments.
• Essential Linux server security tips.
• Configuring security policies and user rights.
• Implementing audit policies and monitoring with Windows Security Logs.
• Managing user privileges, services, and network configurations.
• Setting up and configuring SELinux.
• Implementing firewall rules using iptables or firewalld.
• Managing user accounts, permissions, and security-enhanced Linux (SELinux)
  settings.
  
  

3. Application and Message Hardening Through Cryptography

• Techniques for securing applications against common vulnerabilities (such as
  buffer overflows, SQL injection).
• Using sandboxing, input validation, and dependency management.
• Ensuring message confidentiality and integrity using cryptographic methods.
• Overview of encryption, digital signatures, and hashing for securing data.
• Encrypting and decrypting messages using tools like OpenSSL.
• Generating and verifying digital signatures.
  
  

4. Authentication Mechanisms and Network Hardening with IPSec and Other
Protocols

• Role of authentication in securing access to resources.
• Encrypting and decrypting messages using tools like OpenSSL.
• Generating and verifying digital signatures.
• Using IPSec for secure network communications.

• Introduction to the legal framework governing cyber security in India.
• Importance of understanding these laws before engaging in ethical hacking
  and testing.
• Detailed discussion on the IT Act, focusing on provisions related to
  cybersecurity.
• Penalties and remedies under the IT Act for various cyber offenses.
• How the IT Act addresses data protection, privacy, and cyber crimes.
• Introduction to the Indian Computer Emergency Response Team (CERT-In).
• CERT-In’s mandate and its role in handling cybersecurity incidents.
• Reporting requirements for cybersecurity incidents and the types of
  assistance CERT-In provides.
• Discussion on the Securities and Exchange Board of India’s expectations for
  cybersecurity in the capital market.
• Specific cybersecurity practices mandated for financial institutions to protect
  against cyber threats.
• Key International Cybersecurity Laws and Regulations
• Overview of the Reserve Bank of India’s guidelines for cybersecurity in the
  banking sector.
• Analysis of SEBI circulars concerning cyber security frameworks, audits, and
  compliance requirements for market intermediaries.
  
  

General security concepts

• Security controls: comparing technical, preventive, managerial, deterrent,
  operational, detective, physical, corrective, compensating, and directive
  controls.
• Fundamental concepts: summarizing confidentiality, integrity, and availability
  (CIA); non-repudiation; authentication, authorization, and accounting (AAA);
  zero trust; and deception/disruption technology.
• Change management: explaining business processes, technical implications,
  documentation, and version control.
• Cryptographic solutions: using public key infrastructure (PKI), encryption,
  obfuscation, hashing, digital signatures, and blockchain.

• Threat actors and motivations: comparing nation-states, unskilled attackers,
  hacktivists, insider threats, organized crime, shadow IT, and motivations like
  data exfiltration, espionage, and financial gain.
• Threat vectors and attack surfaces: explaining message-based, unsecure
  networks, social engineering, file-based, voice call, supply chain, and
  vulnerable software vectors.
• Vulnerabilities: explaining application, hardware, mobile device, virtualization,
  operating system (OS)-based, cloud-specific, web-based, and supply chain
  vulnerabilities.
• Malicious activity: analyzing malware attacks, password attacks, application
  attacks, physical attacks, network attacks, and cryptographic attacks.
• Mitigation techniques: using segmentation, access control, configuration
  enforcement, hardening, isolation, and patching.

Soft Skills 

1. Self-Analysis

• Know yourself
• Personality types
• Areas of interest

 2 Self-Discoveryy

• SWOT Analysis – strength, weakness,
• opportunities, threats

3. Goal Setting

• Short-term plan
• Long-term plan Effective
• Time-management

4. Effective Self-Presentation

• Personal grooming, Dressing, Hygiene

5. Effectivee Communication

• Verbal – Language
• Voice modulation – Tone, Pitch
• Clarity of Speech
• Listening skills – Active Listening,
• Selective Listening
• Written communication – general
• business correspondence

6. Email Etiquette SOFT SKILLS

7. Body Language

• Understanding non-verbal
• communication
• Postures, Gestures, Eye contact

8. Tips to prepare an impressive Resume

9. Tips for Group Discussion

10. Handling Telephonic interview

11. Mock – Technical interview

12. Mock – Personal Interview (PI)

13. Office Etiquettes and Mannerisms

Aptitude 

1. Quantitative Aptitude

• Number Systems
• LCM and HCF
• Percentages
• Profit, Loss, and Discount
• Interest (Simple and Compound)
• Speed, Time, and Distance
• Ratio and Proportion
• Probability
• Permutation & Combination
• Time and Work
• Heights and Distances

2. Logical Reasoning

• Number and Letter Series
• Calendars
• Clocks
• Logical Sequence
• Blood Relations
• Ages Speed math
• Mixture & Allegations
• Trains,Boats & Streams
• Coding & Decoding
• Simplification
• Seating arrangements
• Puzzles
• Sequence