Cybersecurity, module by module.

How the course is structured and how you earn each certificate.

The bedrock concepts: the CIA triad and its extensions, who attacks and why, how security controls are classified and layered, threat modelling with STRIDE and the kill chain, and the secure design principles that decide whether a system ages well. Ends in a practical exam.

How networks are built and broken: the OSI and TCP/IP models and core protocols, the local-network and denial-of-service attacks that exploit trusting protocols, and the firewalls, IDS/IPS, VPNs and segmentation that defend them. Ends in a practical exam.

Symmetric and asymmetric encryption, hashing and password storage, digital signatures, certificates and TLS, and the ways real crypto fails, then a practical exam.

Securing the systems attacks actually land on: the Linux permission and privilege model, Windows and Active Directory with the credential attacks that dominate enterprise compromise, and authentication, MFA and access-control models. Ends in a practical exam.

The threat side end to end: classifying malware by how it spreads and what it does, the social engineering that delivers it, and mapping real adversary behaviour with MITRE ATT&CK and the Pyramid of Pain.

How the web breaks: HTTP and sessions, the OWASP Top 10:2025, injection and XSS, broken authentication and access control, then a practical exam.

Open-source intelligence end to end: domains and infrastructure, people, search, geolocation and breach data, then a practical exam.

Defensive forensics and incident response: the IR lifecycle, evidence handling and the order of volatility, disk, memory and network forensics, and how a SOC detects and responds at scale. Ends in a practical exam.

Governance, risk and compliance: how organisations assess and treat risk, the frameworks and standards that structure security, and the law and ethics that separate the work from a crime. Ends in a practical exam.

Putting the whole course to work on a target: engagement methodology and authorisation, reconnaissance and nmap scanning, the offensive toolset, and Linux and Windows privilege escalation, then a practical exam.