Cybersecurity With AI

Module 0.1 — NETWORKING

OSI & TCP/IP MODELS

• OSI 7 layers, TCP/IP 4-layer model, encapsulation & decapsulation, OSI vs TCP/IP comparison

IP ADDRESSING

• IPv4 & IPV6, Public vs Private IP, Address Classes A/B/C/D/E, Network & Broadcast IDs, Static vs Dynamic

SUBNETTING

• Subnet mask basics, Class A/B/C subnetting, CIDR notation, subnetting practice problems

CORE PROTOCOLS

• DHCP server/client, DORA process | DNS hierarchy, forward/reverse lookup, record types (A, MX, PTR)

ARP, ICMP & TOOLS

• ARP request/reply process, ICMP messages, Ping & Traceroute working, Wireshark packet capture & filtering

ROUTING

• Static routing, default route | Dynamic routing: RIP, routing tables, metric & administrative distance

ACCESS CONTROL LISTS

• Standard & Extended ACL, placement rules (in/out), real-time scenarios, troubleshooting ACL

CRYPTOGRAPHY

• Symmetric vs Asymmetric encryption, Hashing (MD5, SHA), Digital Signatures, PKI & Certificates

VPN TECHNOLOGIES

• Site-to-Site VPN, Remote Access VPN, IPsec basics, tunneling protocols (GRE, L2TP), SSL VPN

WIRELESS SECURITY

• Wi-Fi 802.11 standards, WPA2 vs WPA3, common wireless attacks, securing wireless networks

Module 0.2 — PRE-SECURITY MODULE

LINUX BASICS

• Architecture, file system hierarchy (FHS), basic terminal commands, VirtualBox/VMware setup

USERS & PERMISSIONS

• File permissions (rwx), chmod & chown, user creation & management, process management (htop, ps, top)

LINUX NETWORKING

• IP config (ifconfig/ip), netstat/ss, ping, curl, grep, tail — monitoring auth logs & SSH attempts

WINDOWS FUNDAMENTALS

• Windows architecture, NTFS file system, Services & Registry, Task Manager, regedit, msconfig

WINDOWS SECURITY

• UAC, Windows Defender, Firewall, password policies — tools: secpol.msc, gpedit.msc

WINDOWS LOGS

• Event Viewer, Event IDs: 4624 (login), 4625 (failed), 4688 (process), 4720/4732 (user/group), PowerShell logs

HTTP & HTTPS

• Request/response structure, methods (GET/POST/PUT/DELETE), status codes, TLS/SSL, cookies & sessions

PROTOCOLS & PORTS

• TCP vs UDP, 3-way handshake, common ports (22, 80, 443….), nmap basics, Wireshark & tcpdump

Module 0.3 — VAPT — VULNERABILITY ASSESSMENT & PENETRATION TESTING

WEB APPLICATION

• File Inclusion (LFI/RFI), XSS (Reflected/Stored/DOM), Command Injection, SQL Injection

OWASP TOP 10 (2025)

• Broken Access Control, Cryptographic Failures, Injection, IDOR, Security Misconfiguration, SSRF

NMAP SCANNING

• Live host discovery, basic port scans (TCP/SYN/UDP), advanced scans, OS fingerprinting, NSE scripts

BURP SUITE

• Proxy setup, Repeater manual testing, Intruder brute-force (Sniper/Cluster Bomb), payload configs

VULNERABILITY TOOLS

• CVE/CVSS scoring, Metasploit framework, searching & running exploits, Vulnerability Capstone

SHELL TECHNIQUES

• Bind/Reverse/Web shells, Netcat, Socat, msfvenom payloads, Metasploit handler, WebShells

VAPT — PRIVILEGE ESCALATION, AI / EVILGPT & KEY TOOLS

Linux Privilege Esc.

• Enumeration, linPEAS, Kernel exploits, Sudo/SUID/GTFOBins abuse, Capabilities, Cron, NFS

Windows Privilege Esc.

• Password harvesting, Service misconfigs, DLL hijacking, Token impersonation, WinPEAS

AI / EvilGPT

• AI-driven threat actors, AI phishing campaigns, automated vulnerability discovery, defense awareness

KEY TOOLS — VAPT MODULE

NO	EXPLOITATION	SCANNING
01	Metasploit Framework	Nmap
02	Msfvenom payloads	Burp Suite
03	SQLmap	Nikto web scanner
04	Netcat	OWASP ZAP

PRIVILEGE ESCALATION ANALYSIS

NO	PRIVILEGE ESCALATION	ANALYSIS
01	linPEAS / WinPEAS	Wireshark deep analysis
02	GTFOBins reference	VirusTotal
03	Rainbow Tables	Crackstation

Module 0.4 — SOC — SECURITY OPERATIONS CENTER

SOC Fundamentals

• SOC roles (L1/L2 Analyst), core responsibilities: monitoring, detection, incident response, log analysis

Security Frameworks

• Cyber Kill Chain (7 stages) | MITRE ATT&CK: Tactics, Techniques, Sub-techniques, Navigator, threat profiling

Windows Log Analysis

• Event IDs: 4624/4625/4688/4720/4732 | Security, System, Application logs | brute force & lateral movement

Linux Log Analysis

• /var/log/auth.log, syslog, secure, messages | SSH brute force, sudo misuse, cron jobs, service failures

SIEM — Splunk

• Setup: install, forwarders, architecture (Indexer/Search Head) | SPL queries, dashboards, alerts, field extraction

SIEM — ELK & Wazuh

• Elastic Stack basics, Kibana dashboards, advanced ELK queries | Wazuh: agents, vulnerability assessment, API, reports

Network Monitoring

• Snort (Sniffer/Packet Logger/IDS-IPS mode, rule writing, PCAP) | Wireshark traffic analysis for incident response

Incident Handling

• Phishing analysis (VirusTotal, URLScan, Any.run) | Playbooks: Phishing, Malware, Brute Force, Insider Threat

Threat Analysis

• IOC analysis, malware behavior, log correlation, MITRE mapping, threat intelligence integration

Cloud Security

• Cloud service models (IaaS/PaaS/SaaS), cloud monitoring, IAM security, data protection, cloud IR

SIEM + Monitoring Tools

MODULE	TOPIC
Splunk	Industry-leading SIEM — SPL queries, dashboards, threat correlation, alerting
ELK Stack	Log ingestion, visualization, analysis
Wazuh	Open-source XDR/SIEM — agent-based monitoring, vulnerability assessment

PREPARATION — REAL-TIME PROJECTS / OUTCOMES

PREPARATION	OUTCOMES
Set up vulnerable lab environment	Portfolio-ready security project
Perform full vulnerability assessment	Bug bounty platform exposure
Conduct penetration test with report	Responsible disclosure knowledge
Analyze malware sample in sandbox	ATS-friendly resume preparation
Configure SIEM and monitor alerts	LinkedIn profile & GitHub setup
Respond to a simulated incident	Mock interview practice (tech + HR)

PLACEMENT PREPARATION PROCESS

AREA	WHAT WE COVER
Resume Building	ATS-friendly resume tailored to security job roles, GitHub projects integration
Mock Technical interviews	Technical rounds (tools, concepts, scenarios) + HR rounds (communication, situational)
LinkedIn Profile Optimization	Profile writing strategy, content strategy, connection building with security professionals
Job Applications	Regular job link applications, profile submission to placement partners, portal strategy
Aptitude & Tests	Aptitude test preparation, coding rounds, problem-solving exercises
Communication Skill	Presentation skills, mock reviews with expert mentors, articulating technical concepts

Career Roles

• SOC Analyst
• Penetration Tester
• Security Analyst
• Cybersecurity Engineer

Module 0.5 — ENTERPRISE SECURITY & COMPLIANCE ROADMAP

1. FOUNDATION – RISK MANAGEMENT

• Start here first: Understand risks, threats, vulnerabilities, impact, likelihood and controls.
• You will learn: identify assets and threats, assess risk and impact, risk treatment & controls, build security posture.

2. NIST CYBERSECURITY FRAMEWORK

• Build a structured security program using NIST framework.
• You will learn: Identify, Protect, Detect, Respond, Recover; implement security controls; improve resilience.

3. IT ACT 2000 (INDIA CYBER LAW)

• Understand cyber laws in India.
• You will learn: IT Act provisions, cyber offences & penalties, electronic evidence, legal responsibilities.

4. CERT-IN GUIDELINES

• India’s cyber incident response ecosystem.
• You will learn: Incident reporting process, time-bound compliance, log retention, breach handling.

5. RBI CYBERSECURITY FRAMEWORK

• Sector-specific compliance for BFSI.
• You will learn: Governance & risk management, SOC & monitoring, security controls, regulatory compliance.

6. GDPR (GLOBAL PRIVACY)

• Global data protection and privacy laws.
• You will learn: Data protection principles, rights of data subjects, lawful processing, cross-border transfers.

7. HIPAA (HEALTHCARE SECURITY)

• Healthcare data protection compliance.
• You will learn: HIPAA privacy rule, security rule, safeguarding PHI, breach notification rules.

BONUS: DPDP ACT 2023 (INDIA)

• India’s Digital Personal Data Protection law.
• You will learn: Data processing rules, rights, fiduciary obligations, grievance redressal, penalties.vacy rule, security rule, safeguarding PHI, breach notification rules.

WHAT YOU WILL GAIN:

• Strong security & compliance foundation
• Industry-ready skills
• Better career opportunities
• Global & local compliance knowledge
• Ability to manage security programs
• Become a cyber security professional