Advanced cybersecurity: defend, detect and respond like a professional: free course
Go beyond the basics, legally and defensively. The attack lifecycle and MITRE ATT&CK, cryptography in depth, identity and authentication, secure web development (OWASP), network defence and zero trust, security monitoring with SIEM and a SOC, incident response and forensics, vulnerability management, ethical penetration testing with permission, cloud and mobile security, governance, risk and compliance, and certifications and careers. Includes runnable Python labs.
Start lesson 1 Open the interactive course Printable course notes
Lessons
- 1 Start here: the advanced path, security careers, and the law and ethics you must follow
- 2 How attacks happen: threat actors, the attack lifecycle and MITRE ATT&CK
- 3 Cryptography in depth: hashing, salting, symmetric and public-key encryption, TLS and certificates
- 4 Identity and authentication: MFA, passkeys, OAuth and OpenID Connect, sessions and access control
- 5 Secure web development: the OWASP Top 10, injection, XSS, secure coding and testing your own apps
- 6 Network defence: firewalls, segmentation, IDS/IPS, VPNs, zero trust and detecting brute-force attacks
- 7 Security monitoring: logs, SIEM, the SOC, alert triage and writing detection rules
- 8 Incident response and digital forensics: the IR lifecycle, playbooks, evidence, timelines and reporting in Kenya
- 9 Vulnerability management: CVEs, CVSS scores, scanning, prioritising and patching
- 10 Ethical penetration testing: permission, scope, methodology, legal practice labs, bug bounties and report writing
- 11 Cloud and mobile security: shared responsibility, cloud misconfigurations, IAM policies and securing mobile apps
- 12 Governance, risk and compliance (GRC): risk registers, policies, ISO 27001, NIST CSF 2.0 and Kenyan law
- 13 Cybersecurity careers: certifications, a home-lab portfolio, CTFs, CVs, interviews and avoiding course scams