Academy Pro
Medium and Hard Academy modules — Pro tier required
Module 6 · Forensic Timeline Reconstruction with Plaso
Why this module exists. An investigation has a hundred sources: event logs from five hosts, bash history, filesystem mtimes, audit logs, EDR…
AcademyModule 5 · Linux Forensics — Auditd, journalctl, Containers
Why this module exists. Linux IR responders often default to “tar up /var/log and call it done.” Modern Linux estates — especially…
AcademyModule 3 · Memory Forensics with Volatility 3
Why this module exists. Half the modern malware ecosystem never writes a payload to disk — it lives in memory, injected into…
AcademyModule 4 · Windows Event Log Forensics — The IR Reference
Why this module exists. The defender’s biggest leverage in any Windows IR is the event log. The attacker’s biggest leverage in the…
AcademyModule 2 · Disk Imaging — Forensically Sound Acquisition
Why this module exists. “We made a copy of the disk” is not the same as “we forensically imaged the disk.” The…
AcademySliver C2 Operator Guide — Implants, Transports, OPSEC, and the Detection Patterns Blue Teams Should Hunt
Sliver is the open-source post-Cobalt-Strike C2 framework — accessible to Indian red teams without licensing barriers, and the most-abused C2 after CS…
AcademyBurp Suite Pro 2026 — Five Production Bambdas and Three Custom BChecks (Paste-Ready)
Burp Bambdas (per-request JavaScript) and BChecks (YAML scanner checks) are the highest-leverage features in Burp Pro 2026. Five paste-ready Bambdas (sensitive data,…
AcademyLLM Jailbreaks 2026 — Universal Suffixes, Many-Shot, Crescendo, and What Constitutional AI Actually Stops
LLM jailbreak research in 2026: GCG universal suffixes, AutoDAN, many-shot context-poisoning, Crescendo multi-turn, multimodal vision attacks. Why alignment is structurally defence-in-depth, the…
AcademySecurity Audit Programme and Reporting
Three lines of defence, audit calendar, continuous control monitoring, working papers, common-control framework across ISO/SOC2/PCI/RBI/SEBI, audit-fatigue management.
AcademySecure Code Review at Scale
Per-PR vs feature-level vs deep-dive code reviews, OWASP Top 10 hunt patterns, Semgrep custom-rule programme, what humans find that tools miss, rollout…