Penetration Testing and Incident Response

This module covers the foundational stages of penetration testing, focusing on proper planning and reconnaissance activities. Students learn to scope penetration testing engagements, gather intelligence about target systems, and perform systematic discovery of network assets and potential vulnerabilities. The module emphasizes the importance of thorough preparation and information gathering before executing security assessments.

This module focuses on the active exploitation phase of penetration testing where students learn to execute controlled attacks against identified vulnerabilities. The module covers various attack vectors, exploitation techniques, and methods for gaining unauthorized access to systems in a controlled testing environment. Students develop practical skills in simulating real-world cyber attacks to assess organizational security posture.

This module teaches students how to document and communicate penetration testing findings effectively. Students learn to create comprehensive reports that detail discovered vulnerabilities, exploitation methods, potential business impacts, and remediation recommendations. The module emphasizes clear communication of technical findings to both technical and non-technical stakeholders for informed decision-making.

This module explores proactive security measures through threat hunting methodologies and threat intelligence analysis. Students learn to actively search for hidden threats within networks, analyze threat indicators, and leverage intelligence sources to anticipate and identify potential security breaches. The module covers techniques for detecting advanced persistent threats and understanding adversary tactics and behaviors.

This module provides comprehensive coverage of cryptographic concepts, algorithms, and their applications in cybersecurity. Students explore encryption techniques, cryptographic protocols, key management, and how cryptography protects data confidentiality, integrity, and authenticity. The module examines both symmetric and asymmetric encryption methods and their practical implementation in securing communications and data.

This module provides students with the opportunity to demonstrate their comprehensive understanding of penetration testing, threat hunting, and cryptography concepts. Through a capstone project, students apply integrated knowledge from all course areas to solve realistic cybersecurity challenges. The final assessment evaluates overall mastery of course material and readiness for professional roles in cyber defense.