Cybersecurity Foundations
in the AI Era
One day. Three modules. Three hands-on micro projects. Go from zero to reading real attack logs and mapping threats to MITRE ATT&CK — all free, all browser-based.
Everything a defender needs to get started
Each module is two hours of hands-on work in a real Linux terminal. No slides. No videos. You type commands, you see real output.
Networking for Security
You are staring at a firewall log: 47 blocked connection attempts from a single internal IP. In this module you will investigate NoowaPay's Day 3 incident using real CLI commands — identify the scanning host, extract the attacker's IP, count ports probed, and classify the activity using MITRE ATT&CK. The same workflow a Tier 1 analyst runs during a live incident.
Micro Project
Port Scan Triage
Identify and triage a live port scan against NoowaPay Technologies. Read real firewall logs and write your first triage report.
Attack Taxonomy: Knowing the Enemy
Defenders who cannot name what they are seeing cannot contain it. You will build your threat vocabulary from the ground up — 14 MITRE ATT&CK tactics, threat actor profiling, malware family signatures, and the social engineering TA-Phantom used against NoowaPay. AI has accelerated every category: AI-written phishing bypasses grammar checks, AI-optimised malware evades signatures. The vocabulary is the same. The threat has changed.
Micro Project
Attack Surface Mapping
Map a target organisation from open sources — DNS records, public IPs, exposed services. The same first step every attacker takes.
Thinking Like a Defender
Every SOC decision rests on three frameworks: the CIA triad that defines what we protect, the risk vocabulary that tells us how exposed we are, and the NIST IR lifecycle that structures our response. You will apply each to the NoowaPay incident in real time. AI has raised attack volume and lowered the attacker skill floor. These frameworks are how you stay clear-headed when everything is moving fast.
Micro Project
Build Your Cybersecurity Career Plan
Create a personalised 90-day plan to break into cybersecurity with the skills you just built.
Three badges. Three portfolio pieces.
Each micro project is 25 minutes of focused work based on a real scenario. Complete it, earn the badge.
Port Scan Triage
Identify and triage a live port scan against a fintech company. Read real network logs and write your first triage report.
Attack Surface Mapping
Map a target organisation from open sources — DNS records, public IPs, exposed services. The same first step every attacker takes.
Career Plan
Build a personalised 90-day plan to break into cybersecurity. Certifications worth pursuing, skills to build, contacts to make.
Six hours. One complete foundation.
Welcome & Setup
Lab pod provisioned. Terminal open. You are ready.
Module 1 — Networking for Security
Firewall log investigation. Port scan identification. MITRE ATT&CK mapping.
Micro Project 1 — Port Scan Triage
Investigate a live port scan against NoowaPay. Earn First Responder badge.
Break
Module 2 — Attack Taxonomy: Knowing the Enemy
MITRE ATT&CK 14 tactics. Threat actor profiling. AI-era threat patterns.
Micro Project 2 — Attack Surface Mapping
Map a target from open sources. Earn Surface Mapper badge.
Lunch
Module 3 — Thinking Like a Defender
CIA triad. Risk vocabulary. NIST IR lifecycle applied to a live breach.
Micro Project 3 — Career Plan
Build your 90-day entry plan. Earn Path Finder badge.
Wrap-up & Next Steps
What comes after Foundations. Choose your path — SOC, GRC, VAPT, or cloud security.
The Enterprise Tool Stack
Master the exact tools enterprise SOC teams use globally -- inside real lab environments.
Detection & SIEM
Cloud Security
Endpoint & Forensics
Threat Intelligence
Scripting & Automation
AI & Adversarial AI
New
Learn to use AI as a co-analyst, investigate prompt injection and deepfake attacks, and understand how adversarial AI tools like WormGPT are weaponised against enterprise targets.
Anyone curious about cybersecurity
College students
CS, IT, or any STEM background. Build your portfolio before you graduate.
Career switchers
IT support, networking, sysadmin — your existing skills are more transferable than you think.
Managers and non-technical leaders
Understand what your security team defends against. Speak their language in board meetings.
Continue with the full free course
Cybersecurity Foundations has 6 lessons and 3 micro projects — this workshop covers 3 of them. Continue at your own pace for free.
Start today. Free.
Create an account in 30 seconds. No credit card. No prerequisites. The lab is ready when you are.
Create Free Account →