Penetration testing training
With a hands-on laboratory; the full chain from reconnaissance to reporting.
ONGSEC Academy
Cyber Security Training
Technical specialist programmes from penetration testing to digital forensics, from SOC analysis to secure coding.
Programme content
Courses under this heading
Every course is adapted in duration and depth to the organisation’s current level.
Cyber threat intelligence (CTI)
The intelligence cycle, source evaluation, IoC lifecycle and reporting.
Malware detection and analysis
Static and dynamic analysis, sandbox usage, behavioural signature extraction.
Digital forensics
Evidence collection, imaging, chain of custody, disk and memory analysis, reporting.
Network security and cryptography
Protocol security, encryption, key management, TLS and PKI.
SOC analyst training and SIEM usage
Alert triage, correlation rule writing, incident lifecycle management.
Incident response and crisis management
Containment, eradication, recovery; crisis communication and tabletop drills.
CSIRT establishment and training
Team structure, role definitions, procedures and playbook library.
Secure software development
Threat modelling, secure coding, integration into the SAST/DAST pipeline.
Sample syllabus
A four-stage flow
The flow below is an example; modules are removed or added to suit the organisation.
Foundation
- Testing methodologies: OWASP, PTES, OSSTMM
- Scoping and rules of engagement
- Legal framework and authorisation
- Reporting standard
Practice
- Passive and active reconnaissance
- Service and version detection
- Vulnerability scanning and validation
- False positive elimination
Practice
- Web and network exploitation
- Lateral movement scenarios
- Active Directory attack paths
- Persistence and cleanup
Closing
- Writing the executive summary
- Technical finding format
- Risk rating (CVSS)
- Remediation roadmap
Who it is for
- Security teams · system administrators · software developers
Delivery format
- Classroom
In Ankara or at your location - Online
Live, with laboratory access - On-site
Through your own environment
Request a quote
We will propose duration and content based on headcount and current level.
Get in touchGet started
Let us talk about your project.
The first meeting is a discovery session, not a sales pitch. You are also welcome to evaluate our capability directly through a short pilot or proof of concept (PoC) in your own environment.