Cybersecurity Foundations

• Hardware, operating systems, processes, files and permissions
• Client-server applications, databases and common enterprise services
• Confidentiality, integrity and availability in everyday systems

• IP addressing, subnet basics, ports and protocols
• Switches, routers, firewalls, NAT, DNS, DHCP and VPNs
• Following a request from a laptop to a web application

• Users, groups, services, event logs and local policy
• Active Directory concepts, authentication and common attack paths
• Basic hardening and evidence collection

• File system, permissions, packages, processes and networking commands
• Reading logs and safely using the shell
• Simple automation concepts for repeatable work

• Threat, vulnerability, likelihood, impact and control
• Least privilege, defence in depth, Zero Trust and shared responsibility
• Policies, standards, procedures and evidence

• Phishing, malware, credential attacks, web attacks and insider risk
• Attack surface, initial access, persistence, lateral movement and impact
• Using MITRE ATT&CK as a learning and investigation map

• Authentication, authorization, MFA, SSO and federation
• Privileged access, service accounts and access reviews
• Recognizing risky sign-ins and access anomalies

• Firewall policy, segmentation, secure remote access and DNS protection
• Antivirus, EDR, patching, baselines and device control
• Reading basic network and endpoint evidence

• HTTP, sessions, cookies, TLS and same-origin concepts
• OWASP risks explained through safe demonstrations
• Secure development, WAF and API protection roles

• Mail flow, spoofing, phishing, BEC and malicious attachments
• SPF, DKIM and DMARC at a foundation level
• Reporting and responding to suspicious messages

• Cloud service models and shared responsibility
• Cloud identity, networking, logging, configuration and data protection
• Common cloud misconfigurations and posture management

• What a SOC monitors and how alerts become incidents
• Log sources, timestamps, fields, searches and correlation
• Severity, priority, false positives and escalation

• Preparation, detection, containment, eradication, recovery and lessons learned
• Preserving evidence, maintaining notes and building a timeline
• Ransomware and account-compromise tabletop exercises

• Asset inventory, scanning, validation, prioritization and remediation
• CVSS, exploitability and business context
• Authorization, scope and ethical boundaries for security testing

• Investigate a simulated incident and document findings
• Create a clear security report and evidence pack
• Choose a next path: SOC, cloud, network security, GRC or testing

Yes. The early modules deliberately build computer, networking, Windows and Linux foundations before security tools.

This is a practical foundation and Techclick completion course. It prepares you to choose a suitable vendor or role-based certification next.

Yes. Exercises use approved local or isolated learning environments and emphasize authorization and scope.