Module 01: Cybersecurity Foundations

Duration: 3 Weeks | 24 Hours

Training Components:

• Networking Fundamentals: OSI model, TCP/IP, VPN, DNS, TLS for secure communications.
• Operating System Internals: Core architecture and security features of Windows and Linux environments.
• Cyber Threat Landscape Overview: Understanding modern attack vectors, MITRE ATT&CK framework, Cyber Kill Chain.
• Core Security Tools: Practical usage of essential tools — Nmap, Wireshark, Burp Suite, Nessus, Splunk.
• Technical Skills: Command-line basics, Bash scripting, Python fundamentals for automation and analysis.
• Lab Environment Setup: Building individual lab infrastructure for practical exercises and simulated attacks.

Module 02: Application Security & Penetration Testing

Duration: 6 Weeks | 48 Hours

Training Components:

• OWASP Top 10 Security Risks (2021/2023): Identification, exploitation, mitigation strategies for top web app vulnerabilities.
• Secure Software Development Lifecycle (SDLC): Integrating security into application development processes.
• Threat Modeling: Structured approach for identifying, evaluating, and mitigating threats in application architecture.
• Web, Mobile, API, Client Attacks & Exploits: Hands-on testing techniques for real-world scenarios.
• Blockchain/Web3 Security: Smart contract auditing, decentralized application (DApp) security assessments.
• DevSecOps and CI/CD Security: Integrating security into pipelines, secure deployments.
• Bug Bounty Methodologies: Reporting and documentation of security vulnerabilities for responsible disclosure.

Module 03: Red Teaming – Offensive Security Operations

Duration: 8 Weeks | 64 Hours

Training Components:

• Red Team Lifecycle: End-to-end methodology from reconnaissance to reporting.
• C2 Infrastructure & Tools: Deployment and use of Cobalt Strike, Brute Ratel, Mythic frameworks for advanced attacks.
• Active Directory Attacks: Enumeration and exploitation — Kerberoasting, DCSync, credential abuse.
• Email Infrastructure Security Testing: Targeting enterprise email systems (Exchange, O365).
• Evasion and OPSEC: Anti-forensics techniques, bypassing detection, maintaining stealth.
• Cross-Forest and Lateral Movement: Advanced attack scenarios in enterprise AD environments.
• Capstone Red Team Simulation: Real-world attack simulation to demonstrate learned skills.

Module 04: Blue Teaming – Cyber Defense & SOC Operations

Duration: 8 Weeks | 64 Hours

Training Components:

• SOC Fundamentals: Setting up a SOC, processes, and operations lifecycle.
• Incident Response (IR) Playbooks: Handling alerts, containment, eradication, recovery workflows.
• Threat Hunting Techniques: Proactive detection and investigation of advanced threats.
• Security Toolsets: Zeek/Suricata labs for network traffic analysis, Splunk/ELK SIEM configuration and usage.
• Endpoint Detection and Response (EDR/XDR): Monitoring and incident triage using modern endpoint tools.
• Malware Analysis: Static and dynamic analysis of malicious code and behavioral analysis.
• Ransomware Response Simulation: End-to-end exercise replicating a real ransomware attack scenario.

Module 05: Cloud Security, Containerization & Hybrid Red Team Operations

Duration: 8 Weeks | 64 Hours

Training Components:

• Cloud Enumeration and Exploitation: AWS, Azure, GCP environment discovery and IAM abuse scenarios.
• Hybrid Identity Management Security: AD + Cloud identity integrations (AAD Connect, AWS Directory Service).
• Cloud Attack Chains: Metadata abuse, token theft, consent phishing attack simulations.
• Container and Kubernetes Security: Securing Docker, K8s clusters, serverless environments, hypervisor threats.
• Hybrid Cloud Defense Simulation: Real-world exercise across on-premise and multi-cloud environments to simulate attacks and defense postures.

The Codec Networks Centre for Professional Excellence (CoPE) delivers the Post Graduate Certification in Advanced Cybersecurity (PGCAC) using a meticulously designed blended, experiential, and outcome-driven delivery methodology that ensures participants gain industry-relevant knowledge, practical skills, and certification-aligned competencies.

Our Training Methodology Benefits Aspirants and Hiring Companies:

• Produces immediately deployable cybersecurity professionals
• Ensures learners graduate with hands-on mastery over industry tools and procedures
• Aligns training outcomes to certification standards and enterprise hiring needs
•  Balances academic depth with practical, experiential learning
• Embeds real-world context and emerging technology relevance throughout every module and project.

Key Elements of the Delivery Methodology:

 1️) Blended Learning Approach (Online/Offline + Flexible Weekend Delivery)

• Training is delivered in a weekend-only format, ensuring that working professionals and final-year students can participate without disrupting their regular commitments.
• Live instructor-led sessions (both in-person and virtual) are interactive, allowing direct engagement with faculty and cybersecurity practitioners.
• Recorded sessions and supplementary resources are provided to enable self-paced review and deeper understanding.

 2️) Theoretical Foundation + Hands-on Practice Integration

• Each module begins with a conceptual deep dive covering frameworks, standards, methodologies, and attacker/defender mindsets.
• Theoretical lectures are directly linked to guided hands-on labs using enterprise-grade tools (e.g., Splunk, Burp Suite, Nessus, Cobalt Strike, Docker, Kubernetes).
• Lab-first philosophy: Every concept taught is reinforced with real-world practical scenarios to ensure knowledge retention and immediate applicability.

 3️) Progressive, Modular Learning Pathway

• The program is structured into five core modules (Phase 1) with increasing complexity — starting from cybersecurity foundations and progressing to advanced Red/Blue Team, Cloud Security, and emerging technologies.
• Each module is independent yet interconnected, ensuring holistic skill development across offensive security, defensive operations, application security, DevSecOps, and hybrid cloud security.

 4️) Real-World Industry Scenarios & Use Case Labs

• Training uses simulated enterprise environments that mirror real-world architectures including on-prem, hybrid, cloud-native deployments, and emerging tech ecosystems (Web3, IoT, blockchain).
• Case studies and real-world attack-defense scenarios are integrated into labs to prepare aspirants for enterprise environments.

 5️) Capstone Labs and Cyber Range Simulations

• Capstone exercises at the end of Phase 1 and Phase 2 offer live, comprehensive Red vs Blue simulations, ransomware response drills, hybrid cloud exploit-defense exercises, etc.
• Candidates participate in full-scope attack-defense cycles to build confidence and demonstrate readiness for advanced cybersecurity roles.

 6️) Industry Project / Internship-Based Learning (Phase 2)

• The second phase of the program emphasizes project-based, experiential learning where aspirants work on real-world scenarios mapped to Red Teaming, SOC Operations, Web3 security, Cloud audits, and DevSecOps security reviews.
• Faculty mentors guide learners through professional-quality project documentation, reporting, and presentation preparation.

 7️) Global Certification Readiness Support

• The curriculum is directly aligned with globally recognized certifications such as CEH, CRTP, CHFI, CySA+, AWS Security Specialty, AZ-500, CKS, OSWE, Web3 certifications.
• Mock tests, certification-aligned quizzes, and exam preparation guidance are included throughout the program to prepare participants for certification success.

 8️) Continuous Assessment and Feedback Loop

• Regular quizzes, assignments, and lab validations help track learner progress.
• Faculty provides continuous feedback during hands-on labs, projects, and presentations, ensuring skill development remains on track.

 9️) Mentoring by Industry Practitioners

• The program is taught and mentored by active cybersecurity professionals with practical industry experience, not just academic trainers.
• Learners benefit from exposure to current tools, real-world war stories, and practitioner insights.

 10) Portfolio & Outcome-Focused Delivery

• By the end of the program, each participant builds a comprehensive portfolio of technical reports, penetration test summaries, incident response documentation, audit reports, and Red/Blue Team logs, which can be showcased to potential employers.

Codec Networks CoPE Training Delivery to aspiring candidates is based on candidates performance and achievements based on our training performance metrices

• These training performance metrics ensure the program is outcome-focused, learner-centric, and measurable for continuous improvement.
• Metrics also demonstrate transparency and effectiveness for hiring companies evaluating the relevance of PGCAC-trained candidates.

These capstone labs:

• Simulate complex, real-world enterprise scenarios across Red Team, Blue Team, Cloud, Application, IoT, and GRC domains.
• Require professional-quality reports, logs, dashboards, executive summaries, developing communication skills alongside technical mastery.
• Ensure aspirants graduate with job-ready, demonstrable expertise aligned to industry needs and global best practices (MITRE ATT&CK, OWASP, ISO 27001, GDPR, DPDPA, etc.).
• Provide portfolio-ready deliverables to showcase to future employers or clients.

 1️) Red vs Blue Team Cyber Range Simulation
Overview:
A full-scope adversarial simulation where aspirants operate in opposing teams to attack and defend an enterprise hybrid IT environment (on-premise + cloud).
Specialization Track: Red Teaming / Blue Teaming
Tools, Techniques & Procedure:

• Red Team: Nmap, Cobalt Strike, Kerberoasting, password spraying, lateral movement, privilege escalation
• Blue Team: SIEM (Splunk), EDR/XDR, Suricata, threat hunting, log correlation, incident response
  Deliverables:
• Attack plan and execution report (Red Team)
• Detection and mitigation report (Blue Team)
• Consolidated incident report and lessons learned
  Skill Development:
  Develops deep adversarial mindset, team coordination, incident detection, and enterprise defense capabilities.

 2️) Hybrid Cloud Attack-Defense Simulation Lab
Overview:
Simulated attacks on a hybrid infrastructure using AWS and on-prem AD integrated via Azure AD Connect.
Specialization Track: Cloud Security / Hybrid Red Team Ops
Tools, Techniques & Procedure:

• AWS/Azure IAM abuse, metadata service exploitation, credential harvesting
• Logging and monitoring AWS CloudTrail, GuardDuty, Azure Sentinel
  Deliverables:
• Attack path diagrams
• Cloud misconfiguration assessment report
• Defense logs and monitoring dashboards
  Skill Development:
  Practical expertise in cloud attack chains, IAM abuse scenarios, and cloud-native security controls.

 3️) Smart Contract Security Audit Lab
Overview:
Audit a vulnerable Solidity-based smart contract for functional and security flaws.
Specialization Track: Blockchain / Web3 Security
Tools, Techniques & Procedure:

• Static and dynamic analysis using Mythril, Slither, Oyente
• Manual source code review and exploitation (reentrancy, overflow/underflow, front-running attacks)
  Deliverables:
• Audit report with vulnerability descriptions
• Exploit PoCs and recommended fixes
  Skill Development:
  Hands-on experience with smart contract code auditing, blockchain security frameworks, and DApp security assurance.

 4️) Ransomware Attack Simulation & Response Drill
Overview:
Simulate a ransomware campaign on enterprise servers and endpoints, followed by a coordinated incident response exercise.
Specialization Track: Blue Team / Incident Response / Malware Analysis
Tools, Techniques & Procedure:

• Deploy simulated ransomware payload
• Forensic analysis with Volatility, FTK Imager, YARA rules
• Recovery using IR playbooks
  Deliverables:
• IR logs and timeline reconstruction
• Malware behavior analysis report
• Post-incident summary and containment plan
  Skill Development:
  Sharpens malware reverse engineering, incident containment, ransomware mitigation, and forensic investigation skills.

 5️) Mobile Application Pentesting Lab (iOS + Android)
Overview:
Conduct a penetration test on a simulated mobile banking application backend integrated with APIs.
Specialization Track: Application Security / Mobile Security
Tools, Techniques & Procedure:

• Tools: MobSF, Frida, Burp Suite Mobile Assistant, Drozer
• API analysis, SSL pinning bypass, insecure storage, authentication bypass
  Deliverables:
• Vulnerability report with exploitation screenshots
• API security assessment findings
  Skill Development:
  Deepens mobile application security testing, reverse engineering, and secure API integration knowledge.

  6️) DevSecOps Pipeline Attack & Hardening Lab
Overview:
Analyze and attack an insecure CI/CD pipeline to simulate a supply chain attack, followed by pipeline hardening recommendations.
Specialization Track: DevSecOps / Application Security
Tools, Techniques & Procedure:

• Jenkins/GitHub Actions environment
• Credential harvesting, malicious code injection
• Secure pipeline design with integrated security scanning tools (Snyk, SonarQube)
  Deliverables:
• Pipeline vulnerability report
• Secure pipeline architecture recommendations
  Skill Development:
  Teaches pipeline security assessment, DevSecOps best practices, and secure automation workflow design.

 7️) IoT/OT Network Security Assessment Lab
Overview:
Perform penetration testing of a simulated smart factory network including IoT sensors and ICS/SCADA systems.
Specialization Track: IoT/OT Security
Tools, Techniques & Procedure:

• Tools: Shodan, Wireshark, Metasploit, firmware extraction tools
• ICS protocol analysis (Modbus, DNP3), wireless attacks (BLE/Wi-Fi)
  Deliverables:
• IoT device vulnerability report
• Network architecture security review
  Skill Development:
  Hands-on IoT/OT pentesting, protocol security analysis, device exploitation, and critical infrastructure protection.

 8️) Insider Threat Simulation Lab
Overview:
Simulate privilege escalation and data exfiltration by an insider in an enterprise network environment.
Specialization Track: Insider Threat Management / IAM Security
Tools, Techniques & Procedure:

• Tools: BloodHound, PowerView, mimikatz
• Attack path analysis, privilege escalation, data access monitoring
  Deliverables:
• Insider threat simulation report
• IAM configuration and mitigation recommendations
  Skill Development:
  Develops expertise in privilege analysis, insider threat detection, access control hardening, and internal risk monitoring.

 9️) Privacy Impact Assessment (PIA) & Data Protection Lab
Overview:
Conduct a PIA on a simulated enterprise handling sensitive personal information under India DPDPA 2023 / GDPR requirements.
Specialization Track: Data Privacy / GRC
Tools, Techniques & Procedure:

• Data mapping, risk assessment matrix
• Consent lifecycle management, breach simulation
  Deliverables:
• PIA report with identified risks
• Data flow diagrams, remediation plan
  Skill Development:
  Builds skills in privacy governance, data protection audits, legal alignment (DPDPA/GDPR), and policy implementation.

 10) Advanced Threat Hunting Lab using SIEM Platforms
Overview:
Set up and conduct a multi-stage threat hunting exercise using Splunk and ELK Stack in a simulated SOC environment.
Specialization Track: SOC Operations / Threat Hunting
Tools, Techniques & Procedure:

• Custom rule creation, search queries, correlation analysis
• Detection of lateral movement, credential dumping, beaconing activity
  Deliverables:
• Threat hunt workbook
• Detection signatures and alerts
  Skill Development:
  Hands-on experience in SIEM tuning, threat pattern detection, log correlation, and proactive defense methodologies.

Summary of Outcomes for Aspirants:

These projects are designed to:

• Provide real-world, scenario-based experience mapped to specialized tracks.
• Ensure delivery of professional-grade project reports, logs, PoCs, presentations, and remediation strategies.
• Build demonstrable expertise in offensive security, SOC operations, cloud security, DevSecOps, Web3 security, IoT, insider threats, incident response, and data privacy.
• Equip candidates with industry-ready portfolios and practical documentation skills essential for cybersecurity consulting and enterprise security roles.

1️.Red Team Simulation for Fintech Environment
Overview: Simulate a full-scale offensive security engagement against a mock fintech environment with applications, APIs, and infrastructure components.
Specialization Track: Red Teaming / Offensive Security
Deliverables: Recon reports, exploitation reports, lateral movement maps, attack path diagrams, C2 infrastructure deployment logs, executive summary report.
Skill Development: Builds expertise in offensive techniques, AD exploitation, credential attacks, C2 management, and report writing tailored for sensitive financial environments.

2️.Cloud Security Audit for Multi-Cloud Deployment (AWS + Azure)
Overview: Comprehensive assessment of a hybrid multi-cloud environment for misconfigurations, IAM abuse risks, and cloud-native vulnerabilities.
Specialization Track: Cloud Security / Cloud Audit
Deliverables: Audit checklist, vulnerability findings, remediation recommendations, risk report for cloud configurations and IAM roles.
Skill Development: Strengthens skills in AWS/Azure architecture security, misconfiguration detection, cloud attack chains, policy reviews, and compliance mapping.

3️.Web3 DApp & Smart Contract Security Assessment
Overview: Perform a security audit of a blockchain-based decentralized application and its underlying smart contracts.
Specialization Track: Blockchain/Web3 Security
Deliverables: Code audit report, exploit PoCs, vulnerability register, gas optimization and security improvement recommendations.
Skill Development: Develops smart contract auditing skills, blockchain vulnerability analysis, DeFi security assessment, Web3 ecosystem exposure.

4️.SOC Threat Monitoring and Detection Playbook Development
Overview: Work in a simulated SOC environment to create detection playbooks for common threats and optimize alert tuning in SIEM platforms.
Specialization Track: Blue Team / SOC Operations
Deliverables: Threat detection rules, correlation searches (Splunk, ELK), SOC playbooks, response workflows, incident reporting templates.
Skill Development: Builds SOC operations expertise, use of EDR/XDR tools, threat hunting, alert tuning, incident triage, and reporting best practices.

5️.Mobile Application Security Test for eCommerce Platform (iOS & Android)
Overview: Perform an end-to-end penetration test on a simulated eCommerce mobile application including API and backend integration.
Specialization Track: Application Security Testing / Mobile Security
Deliverables: Vulnerability reports, API security findings, screenshots of exploits, remediation plan, penetration test executive summary.
Skill Development: Provides hands-on experience in mobile platform vulnerabilities, API security, mobile SDK weaknesses, secure coding advice.

6️.Insider Threat Simulation and IAM Risk Assessment
Overview: Simulate insider scenarios involving privilege escalation, data exfiltration, and IAM bypass in an enterprise environment.
Specialization Track: Insider Threat Management / Identity & Access Security
Deliverables: Threat scenarios, logs of simulated attacks, IAM configuration review, insider threat mitigation recommendations.
Skill Development: Develops understanding of IAM abuse, privilege misuse, insider detection techniques, and access control governance.

7️.CI/CD Pipeline Security Assessment and DevSecOps Integration
Overview: Evaluate a simulated DevOps CI/CD pipeline for security weaknesses and recommend secure DevSecOps integration practices.
Specialization Track: DevSecOps / Application Security
Deliverables: CI/CD security review report, proposed secure pipeline design, demonstration of attack vectors and mitigation strategies.
Skill Development: Enhances knowledge of DevSecOps tools (e.g., Jenkins, GitHub Actions), secure SDLC integration, pipeline threat modeling, and automated scanning.

8️. oT Device and Network Security Assessment
Overview: Penetration test of an IoT device ecosystem including firmware analysis, wireless communication testing, and backend API review.
Specialization Track: IoT Security / Embedded Security
Deliverables: IoT device vulnerability report, firmware analysis logs, wireless attack demonstration, network architecture security recommendations.
Skill Development: Builds expertise in IoT device security, wireless protocol security (Wi-Fi, BLE), firmware vulnerabilities, and embedded system penetration testing.

9️.Ransomware Simulation and Incident Response Drill
Overview: Simulate a ransomware attack in an enterprise IT environment and document a full incident response lifecycle.
Specialization Track: Incident Response / Blue Team
Deliverables: Timeline of attack, indicators of compromise (IOCs), containment and eradication plan, post-incident analysis report.
Skill Development: Strengthens capabilities in malware analysis, IR playbooks, containment strategies, forensics, and executive post-incident reporting.

10.Privacy Impact Assessment (PIA) and Compliance Readiness Audit (DPDPA/GDPR Focus)
Overview: Perform a simulated PIA on a sample enterprise environment to assess data flows, PII protection measures, and compliance readiness.
Specialization Track: Data Privacy / Compliance / GRC
Deliverables: PIA report, data inventory map, risk register, privacy policy improvement recommendations, compliance gap analysis.
Skill Development: Builds capability in privacy frameworks (DPDPA 2023, GDPR), data protection audits, policy review, and advisory skills for privacy compliance programs.