Cybersecurity, learned like a practitioner.

24 learning paths · 398 modules live · every lesson written by someone who has shipped the control or run the engagement. Free to start.

24
Learning paths
398+
Live modules
0
You've completed
Free
Your tier
Browse the academy

Latest modules

Most recent practitioner playbooks across every track. Filter by topic, level, or search in the sidebar.

538 results · Page 41/54
Attacker Mindset — Cloud Advanced Members

Cloud Supply Chain — CI to Production

Codecov, CircleCI, SolarWinds patterns in cloud. OIDC federation, least-priv deploy roles, pinned artifacts.

Apr 22, 2026 90 min Open
Attacker Mindset — Cloud Intermediate Members

Public Data Stores — The Classic

Public S3, open GCS, anonymous Azure Blob. Continues in 2026 despite a decade of awareness.

Apr 22, 2026 75 min Open
Attacker Mindset — Cloud Advanced Members

Cloud Detection — Different Telemetry, Different Rules

CloudTrail, Activity Log, Audit Log. Identity-first detection. GuardDuty/Defender/SCC. Maturity model.

Apr 22, 2026 90 min Open
Attacker Mindset — Active Directory Advanced Members

AD ACL Abuse — Twenty Years of Accumulated Trust

GenericAll, GenericWrite, WriteDacl, AddMember, ForceChangePassword. Delegation sprawl = privilege escalation.

Apr 22, 2026 90 min Open
Attacker Mindset — Active Directory Intermediate Members

Group Policy Preferences — The Gift That Keeps Giving

cPassword in SYSVOL still found in 2026. MS14-025 didn't remove legacy files. Plus SYSVOL credential hunting.

Apr 22, 2026 75 min Open
Attacker Mindset — Active Directory Advanced Members

ADCS — ESC1 through ESC16

Active Directory Certificate Services attacks (Certified Pre-Owned). Template misconfigurations → domain compromise.

Apr 22, 2026 90 min Open
Attacker Mindset — Active Directory Advanced Members

Trusts — Legacy Merger Paths

Trust types, SIDHistory attacks, cross-forest paths. Mergers leave trust relationships with security debt.

Apr 22, 2026 90 min Open
Attacker Mindset — Active Directory Advanced Members

Kerberos Delegation Abuse

Unconstrained, constrained, RBCD. S4U2Self + S4U2Proxy, MachineAccountQuota, PetitPotam coercion.

Apr 22, 2026 90 min Open
Attacker Mindset — Active Directory Expert Members

Hybrid AD — On-Prem Meets Cloud

Entra Connect crown jewel, Golden SAML, Azure AD attacks, AZUREADSSOACC$ legacy, PRT theft.

Apr 22, 2026 120 min Open
Attacker Mindset — Active Directory Expert Members

AD Detection — What Good Looks Like

Event IDs, Sigma rules, Defender for Identity, Sentinel KQL queries. From generic SIEM to mature AD detection.

Apr 22, 2026 90 min Open
02 / Why learn here

Practitioners who've
shipped the controls.

Every module is written by someone who has built the defence or run the engagement. No repackaged tutorials, no generic theory.

Why learn here

01

Practitioner-written.

Each lesson is authored by someone who has shipped the control or run the engagement in production.

02

Quiz after every module.

20+ questions with explanations. 70%+ to mark complete. Unlimited retries.

03

Progress tracked.

Completions, scores and streaks saved automatically. Resume exactly where you left off.

04

India-priced.

Start free. ₹499/mo for intermediate. ₹4,999/yr for advanced. No hidden fees, ever.