Cyber Security and Cyber Defense

• Command and Control (C2)
• C2 infrastructure and communication channels
• Beaconing, covert traffic, and evasion methods
• C2 disruption and detection strategies

• Message Analysis
• Phishing detection
• Email header and attachment forensics
• Advanced social engineering artifacts
• Identifier Analysis
• Hash analysis and Indicator of Compromise (IoC) enrichment
• Threat intelligence mapping
• YARA (Yet Another Ridiculous Acronym) & Sigma rule usage

• Credential Hardening
• Multi-Factor Authentication (MFA) & Privileged Access Management (PAM) solutions
• Credential rotation and vaults
• Zero-Trust identity management
• Evict and Restore
• Post-incident eradication methods
• Secure recovery practices
• Resilience and system hardening

• Cloud Security
• Shared responsibility and misconfigurations
• Container and Kubernetes risks
• Threat detection in cloud-native setups
• IoT Security
• Internet of Things (IoT) device vulnerabilities
• Firmware security and secure updates
• Case studies of IoT compromises

Resource Development

• Adversarial infrastructure building
• Exploit/tooling kits
• Red vs. Blue team strategy

Execution

• Delivery and payload execution methods
• Fileless attacks and scripting techniques

Defense Evasion

• Obfuscation and encryption tricks
• Use of Living Off the Land Binaries (LOLBins)
• Evasion in hybrid cloud setups

File Analysis

• Static and dynamic file analysis
• Sandbox usage & behavior profiling

Process Analysis

• Monitoring runtime behavior
• Suspicious chains and anomalies

User Behavior Analysis

• Baseline profiling with Machine Learning (ML)
• Insider threat identification

Honeypots

• Low vs. high interaction deployment
• Attack capture and profiling

Platform Monitoring

• Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), and Operational Technology (OT) monitoring practices

Digital Forensics

• Disk, memory, and network forensics
• Incident evidence collection and chain of custody

Android Malware Analysis

• Android Package Kit (APK) reverse engineering
• Mobile-specific threats and detection tools

Adversarial Machine Learning (ML)

• Model evasion & poisoning attacks
• Defense through robust ML

Artificial Intelligence (AI) in Cybersecurity

• AI-driven detection and automation
• Generative AI (GenAI) in threat intelligence and malware analysis
• Limitations and ethical issues

• Introduction to Side Channels
• Difference of Means (DoM) and Correlation Power Analysis (CPA)
• Test Vector Leakage Assessment (TVLA) and Normalized Inter - Class Variance (NICV)

• Differential Fault Attacks (DFA)
• Differential Fault Intensity Analysis (DFIA)
• Statistical Ineffective Fault Attacks (SIFA)
• Practical power and fault attacks on real devices

• Cache Attacks 
• Spectre and Meltdown
• Timing attacks on Network-on-Chip (NoC)

• Introduction to PUFs
• Quality metrics for PUFs
• Machine Learning Attacks on PUFs

• Introduction to Hardware Trojans
• Hardware Trojans on cryptographic circuits
• Hardware Trojans on Machine Learning accelerators

• Introduction to Quantum Computing
• Superposition and Entanglement
• Basic Quantum Gates
• Deutsch-Josza Algorithm
• Introduction to Post-Quantum Cryptography - CRYSTALS-Kyber

• Definitions of PIR
• Information Theoretic PIR
• Computational PIR
• Applications of PIR

• Definitions of MPC
• Garbled Circuits
• Secret Shares
• MPC on Secret Shares
• Applications of MPC

• Distributed Oblivious Memory Access (DORAM)
• DORAMs as a special case of MPC
• Computationally Efficient DORAMs
• Communication Efficient DORAMs

• Mimikatz - Credential dumping and password harvesting
•  Wireshark - Traffic and C2 detection

• YARA & Sigma - Identifier and IoC analysis 
• Splunk / ELK (Elasticsearch, Logstash, Kibana) Stack - Log and message analysis

• Cuckoo Sandbox - File and malware dynamic analysis
• IDA Pro / Ghidra - Reverse engineering 
• Procmon (Process Monitor), Sysmon (System Monitor) - Process behavior analysis

• Cowrie / Dionaea - Honeypot frameworks
• Volatility - Memory forensics 
• Autopsy / Forensic Toolkit (FTK) - Disk and file forensics

• APKTool / JADX - Android APK reverse engineering 
• Mobile Security Framework (MobSF) - Mobile threat analysis