Unit 1 Security Posture

3 lecture hours

• The current threat landscape
• The credentials – authentication and authorization
• Apps - Data
• Cybersecurity challenges - data breaches based on old attacks
• The shift in the threat landscape Enhancing security posture
• The Red and Blue Team Incident Response Process – Reasons to have IR process
• creating an incidence response
• incidence response team
• incident life cycle
• Handling an incident
• Post incident activity

Unit 2 Cyber strategy, Best cyber attack strategy(Red Team) – External testing strategy,

16 lecture hours

• internal testing strategy
• Blind testing strategy
• targeted testing strategy Best cyber defence strategy(Red Team) – defense in depth
• defense in breadth Understanding the Cybersecurity Kill Chain – Reconnaissance External reconnaissance- Scanning - Nmap
• John the ripper
• Aircrack- ng, Nikto
• Deauther board
• EvilOSX Weaponization Access and privilege escalation – vertical and horizontal privilege escalation
• Obfuscation Threat life cycle management – Data collection phase
• Discovery phase
• qualification phase
• investigation phase
• Neutralization phase
• recovery phase
• shared files Webshag
• Email harvester Web browser enumeration tool – Penetration testing
• Net craft
• dumpster diving Internal Reconnaissance – sniffing and scanning – Prismdump
• Cain and Able
• War driving

Unit 3 Compromising the System

• Analyzing current trends – Extortion attacks
• Data manipulation attacks
• backdoors Hacking everyday devices Phishing
• Exploiting a vulnerability Zero-day – Chrome zero day vulnerability
• source code analysis
• types of zero day exploits- Buffer overflow Performing the steps to compromise a system – Deploying payloads – installing and using vulnerability scanner
• Using Metasploit
• Compromising operating systems
• compromising a remote system
• Compromising web based system – SQL injection
• cross site scripting
• Broken authentication
• DDos attack Chasing a User's Identity Compromising user’s identity – Gaining access to control
• Harvesting credentials
• Hacking a user's identity - Brute force
• social engineering
• pass the hash 8 Program Name: Bachelor of Engineering Level: UG Subject Code: BE05048021 Subject Name: Cyber Crime and Mitigation

Unit 4 Lateral Movement

6 lecture hours

• Infiltration - Network mapping
• Avoiding alerts Performing lateral movement – Think like hacker
• port scans
• file shares
• Remote Desktop
• token stealing
• stolen credentials
• Network sniffing
• ARP spoofing
• Email pillaging
• pass the ticket
• pass the hash Performing privilege escalation – exploiting unpatched operating systems
• Access token manipulation
• exploiting accessibility features
• Application shimming
• Bypassing user account control
• DLL injection
• DLL search order hijacking
• exploration of vulnerability

Unit 5 Security Policy

4 lecture hours

• Reviewing your security policy
• Educating the end user
• Policy enforcement – Application whitelisting
• Monitoring for compliance Network Segmentation Defense in depth approach
• Physical network segmentation
• Securing remote access to the network
• Virtual network segmentation
• zero trust networks

Unit 6 Active Sensors

4 lecture hours

• Detection capabilities
• Intrusion detection systems
• Intrusion prevention system
• Behavior analytics on-premises
• Threat Intelligence Introduction to threat intelligence
• Open source tools for threat intelligence
• Leveraging threat intelligence to investigate suspicious activity

Unit 7 Vulnerability Managment -

4 lecture hours

• Creating vulnerability management strategy – Asset inventory
• Information management
• Risk assessment – vulnerability and threat analysis
• vulnerability assessment
• Reporting and remediation tracking
• Response planning Vulnerability management tools – intruder
• patch manager plus