47 lessons. 14 micro-projects. One breach unfolding in real time inside a Bengaluru fintech. Graduate with 63 incident reports, 174 ATT&CK technique mappings, and a portfolio a recruiter can actually read.
37
AI Practicums
Not a tutorial. Not a demo. A calibration exercise -- built into every arc. Because in 2026, the risk isn't that AI replaces the analyst. It's that the analyst trusts the AI without knowing where it fails.
Tools you'll use
Claude · Copilot for Security
Across
Every arc · 5 domains
Every chapter is set inside NoowaPay Technologies -- a Bengaluru fintech processing Rs 14 crore daily. From Day 0 you are inside their SOC as Operation Silent Phantom unfolds across 40 days. Each chapter is a chapter in the same breach. You don't just learn KQL -- you write the queries that catch the attacker before they reach the domain controller.
Your first shift inside the NoowaPay SOC. Learn Linux auth log forensics, build network visibility from packet captures, run your first alert triage queue, and analyse a live phishing email. Silent Phantom's foothold begins.
Silent Phantom moves laterally. Build threat intelligence profiles from open sources. Write your first YARA rules. Parse Windows EVTX logs for privilege escalation. Triage endpoint malware from behavioural telemetry.
Sentinel becomes your weapon. Write KQL hunting queries from scratch. Build scheduled analytics rules. Investigate Entra ID sign-in anomalies. Cross-reference Splunk and Sentinel for correlated detections.
Silent Phantom pivots to cloud. Trace the Lambda backdoor through AWS CloudTrail. Detect IAM privilege escalation. Follow the attacker's lateral movement across Azure. Build cloud-native detection rules for each finding.
AI as the attack surface. Detect AI-generated phishing at scale. Identify prompt injection in the NoowaPay LLM pipeline. Hunt UEBA bypass attempts. Analyse deepfake evidence and ML model poisoning indicators. The hardest arc, and the most case-driven.
72-hour capstone exercise. All 5 arc attack vectors reactivate simultaneously. Written audit trail required for every containment decision. Full MITRE ATT&CK mapping. Attribution report. Graded pass/fail.
20
Questions
30 min
Duration
70%
Pass threshold
Unlimited
Retakes
Soft gate -- if you pass, you can skip AISA and enrol directly in SA2. No penalty for not passing.
~52 hrs · 1–2 hrs/day
Async + live lab terminal
5 days · Instructor-led
Live cohort · On-site or virtual
13 weeks · Credit-mapped
Semester integration
Real breach scenarios. 20-25 minutes each. Based on actual 2024 incidents.
AI pre-triage flagged 10 alerts — one IOC is hallucinated. Find it before it enters the ticket.
Part of: Alert Triage and Ticketing
Based on a credential-stuffing campaign targeting a European financial institution, 2023
Part of: KQL for Security Analysis and SOC Threat Hunting
Based on the LAPSUS$ group lateral movement techniques, 2022
Part of: Detection Engineering — Write, Test, Tune
Backed by the CSA Bangalore Chapter CISO network. Shareable on LinkedIn. Recognised by hiring partners.
Ready for more? → AISE: CyBe Agentic AI SOC Engineer
AI SOC War Room -- First 72 Hours
The AI SOC War Room: First 72 Hours is the capstone for Path 2 graduates. Complete Path 1, advance to Path 2, and earn your place.
CyBe Global builds India's most industry-connected cybersecurity career platform — where every lab runs on real enterprise tooling and every credential is backed by practitioners, not just instructors.
Founded by the leadership of CSA Bangalore Chapter, CyBe Global was built to close the gap between classroom cybersecurity and what India's enterprise SOCs actually need. Our curriculum is designed with and reviewed by active CISOs. Our labs replicate real incidents — not textbook scenarios. Every graduate is connected directly to our hiring partner network.
Learn more about CyBe →
CSA Bangalore Chapter
Cloud Security Alliance
Our CISO faculty are drawn from the CSA Bangalore network -- practitioners who set security standards for India's enterprise sector.
From Wipro, Morgan Stanley, EY GDS, Bosch, Honeywell, TCS, Saviynt, and Volvo. These are the practitioners who set security standards for India's enterprise sector -- and the kinds of teams your graduates will be stepping into.

Abhinay Adiraju
Director – Information Security
Saviynt

Amod Suresh Puranik
Director – Head Data & AI Security
Virtusa Corp

Ashish Shrivastava
Director – Cyber Security
Honeywell

Ashwini Siddhi
Co-Founder & CEO
Securacy.AI
.jpg)
Babji VS
Strategic Advisor & Consultant – UAE & Middle East
Ahana Systems & Solutions

Dr. Abhilasha Rakesh Vyas
Director, Learning & Innovation
PureID

Dr Ram Kumar G
Cyber Security and Risk Leader
Volvo Group
Madhukeshwar Bhat
Academia Advisor
CSA Bangalore Chapter

Pooja Agrawalla
Co-Founder
CyBe Global / CSA Bangalore

Prabhu Pathak
Director
LogiCoy

R S Lakshminarayanan
GM & Regional CISO
Wipro Limited

Raveesh BS
Director
Aishan Technologies

Ravi Subbiah
Managing Partner
TCS Ltd

Rohit Sadgune
Senior Manager, Cyber Defence
Saviynt

Sai Lakshmi Sathyanarayana
Partner, Cyber Leader
EY GDS

Satyavathi Divadari
CEO & Founder
CyBe Global / CSA Bangalore
 (1).jpg)
Seema Khandelwal
Core Member
CSA Bangalore Chapter

Shobha Jagathpal
Managing Director
Morgan Stanley

Vishal Saraswat
Head, Research & Innovation, Cybersecurity
Bosch Software
Companies that hire directly from the CyBe Global talent pool -- no cold applications, no resume black holes.



On graduation, you get warm introductions to 3-5 hiring partners appropriate to your location and specialisation -- through the CSA Bangalore Chapter network, not a cold jobs board. Partners receive your public portfolio link alongside your certificate.