Career Advice
Get practical guidance on career growth, job search, interviews, CV improvement, and the next steps in your professional path.
Programming
·Offline New
Cybersecurity Full Course
Why Join the “Cybersecurity Full Course”? If you want to gain in-demand knowledge aligned with international standards in the field of cybersecurity, this program is designed for...
What you'll gain
- ✓ Security fundamentals
- ✓ Basic network security
- ✓ System and endpoint security
- ✓ Operating system administration
✓ Free consultation · Certificate on completion · Practical learning · Certificate-ready · BDG since 2009
Duration
5 months
Format
Offline
Level
Intermediate
Starts
Mar 25, 2026
Certificate
On completion
The BDG ecosystem
More than a course
At BDG, learning continues beyond lessons. You get access to guidance, community, events, spaces, and resources that support your professional growth.
Personal Branding
Learn how to present your skills, build professional visibility, and create a stronger personal brand in your field.
Free Webinars & Seminars
Join free webinars, seminars, and open sessions every month to keep learning, meet experts, and discover new opportunities.
Big Community
Become part of a large professional community of students, graduates, trainers, and industry specialists.
Coworking Spaces
Use BDG spaces for learning, networking, teamwork, and focused work when you need the right environment to grow.
Library
Access useful books, materials, guides, and learning resources selected to support your development.
Who can you become?
Why Join the “Cybersecurity Full Course”?
If you want to gain in-demand knowledge aligned with international standards in the field of cybersecurity, this program is designed for you. During the course, you will learn:- The fundamental security principles of Windows, Linux, and Web systems
- Vulnerability identification and assessment
- Core security concepts of Active Directory and Cloud environments
- Key mechanisms and practical approaches to penetration testing
- Infrastructure log analysis and Root Cause Analysis
Get 5% Cashback
Pay with 
QR Code
Who is this course for
-
✓
Professionals Entering the Cybersecurity Field
The course is suitable for individuals who are interested in technology, have a foundational understanding of IT, and want to enter the cybersecurity field. Analytical thinking, the ability to make risk-based decisions, stress resilience, and a problem-solving mindset are essential qualities for success in this area.
-
✓
Entry-Level IT Professionals
IT professionals with knowledge of operating systems and networking who are considering cybersecurity as a future career path are also encouraged to join.
What you will learn
- ✓Security fundamentals
- ✓Basic network security
- ✓System and endpoint security
- ✓Operating system administration
- ✓Vulnerability management and penetration testing
- ✓Basic cryptography
Program
- Concepts: Distinguishing between Information Security and Cybersecurity.
- Security Architecture: Strategic overview of Defensive Technologies.
- Advanced Analytics: Different Types of Threat Sources in the Environment.
- The Foundation: The CIA Triad and its application in modern risk landscapes.
- Career Pathing: Specialization in Offensive, and Defensive operations.
- Malware Classifications: Differences between Viruses, Worms, Trojans, Spywares, and Ransomwares.
- Service Disruptions: DoS and DDoS attack vectors and mitigation strategies.
- Emerging Risks: Zero-day vulnerabilities and Supply Chain compromises.
- Persistent Threats: Advanced Persistent Threats (APT) and Insider Threat profiling.
- AI Security (AISec): Privacy violations, algorithmic bias, and adversarial machine learning risks.
- Social Engineering: Cognitive manipulation and Phishing methodologies.
- The Cyber Kill Chain: Analyzing the phases.
- MITRE ATT&CK®: Mapping Adversary Tactics, Techniques, and Common Knowledge.
- Tactical Analysis: Understanding the "How" and "Why" of adversary behavior.
- The AAA Framework: Authentication, Authorization, and Accounting.
- Access Control Models: RBAC, PBAC/ABAC, MAC, SSO, and Multi-Factor Authentication (MFA).
- Credential Management: Modern password security standards.
- Data Loss Prevention (DLP): Fundamentals of data discovery, monitoring, and exfiltration prevention
- Hypervisor Technology: Virtualization architecture.
- Container Security: Introduction to Docker and microservices isolation.
- Applied Environment: Kali Linux deployment and CLI proficiency.
- Permission Models: Access Controls and Linux file system security.
- System Hardening: Managing services, sudoers configuration, and privilege models.
- Audit & Logging: Analyzing Linux authentication logs and system telemetry.
- Escalation Taxonomy: Horizontal vs. Vertical movement.
- Exploitation Vectors: Misconfigured SUID/GUID binaries, Cron job exploitation, and PATH hijacking.
- File System Exploits: Insecure permissions and sensitive data discovery.
- The Windows Registry: Configuration management and persistence mechanisms.
- Process Analysis: Utilizing Task Manager and Process Explorer for forensic visibility.
- Execution Models: Distinguishing between User-mode and Kernel-mode processes.
- Vector Analysis: Unquoted service paths, insecure service permissions, and DLL hijacking.
- Credential Harvesting: Stored credentials, SAM database, and scheduled task exploitation.
- Defense Evolution: Comparative analysis of Signature-based AV vs. EDR/XDR.
- Heuristic Detection: Identifying anomalous behavior and post-exploitation activity.
- AD Infrastructure: Domain Controllers, Forests, Trees, and Organizational Units (OUs).
- Authentication Protocols: Differences between Kerberos and NTLM.
- Attack Vectors: Common AD misconfigurations (AS-REP Roasting, Kerberoasting).
- Email Infrastructure: Secure messaging protocols and the psychology of Phishing.
- Authentication Standards: Implementation of SPF, DKIM, and DMARC.
- Defense-in-Depth: Implementing layered security controls (Administrative, Technical, Physical).
- Control Taxonomy: Preventive, Detective, and Corrective controls.
- Zero Trust Architecture (ZTA): Moving from perimeter defense to "Never Trust, Always Verify."
- Reconnaissance: Identifying exposed ports, services, and vulnerabilities.
- Vulnerability Mapping: Assessing the risk of legacy protocols and open services.
- MITM Architectures: ARP Spoofing, DNS Poisoning, and Session Hijacking.
- Protocol Weaknesses: Exploitability of unencrypted network traffic.
- Perimeter Defense: Next-Gen Firewalls (NGFW), DDOS protection, and other perimeter security solutions.
- Intrusion Management: IDS vs. IPS deployment strategies.
- Segmentation: Network isolation, VLANs, and Micro-segmentation.
- Protocol Analysis: Deep Packet Inspection (DPI) using Wireshark.
- Traffic Forensics: Identifying malicious patterns within PCAP data.
- Wireless Protocols: WPA2/WPA3 security models and vulnerabilities.
- RF Threats: Rogue Access Points, Evil Twins, and de-authentication attacks
- Foundations: Symmetric vs. Asymmetric encryption.
- Data Integrity: Hashing algorithms and Digital Signatures.
- PKI & Web Security: SSL/TLS handshake and HTTPS implementation.
- Attack Methodologies: Brute force, Dictionary, and Known-Plaintext attacks.
- Enterprise Encryption: Full Disk Encryption and Secrets Management.
- Standards: OWASP, CVSS (Scoring), and CVE (Naming) conventions.
- Pentest Lifecycle: Exploration of pentest’s lifecycle.
- Governance: Rules of Engagement (RoE) and Legal Compliance.
- HTTP/S Lifecycle: Request/Response anatomy, headers, and session management.
- The Trust Model: Distinguishing between Client-side and Server-side security.
- In-depth Analysis: Union-based, Error-based, and Blind SQL Injections.
- Impact Assessment: Bypassing authentication and database exfiltration.
- Execution Models: Reflected, Stored, and DOM-based XSS.
- Mitigation: Input sanitization and context-aware output encoding.
- Remediation: Implementation of secure coding practices and input validation.
- Offensive Simulation: Utilizing reverse shells and the Metasploit Framework.
- Exploitation: Session Fixation, Hijacking, and Privilege Escalation.
- Exploitation: Bypassing MIME-type validation and Remote Code Execution (RCE) usage.
- Modern Interfaces: API security, Token-based authentication (JWT), and BOLA (Broken Object Level Authorization).
● Documentation: Technical writing for vulnerability findings and executive remediation summaries.
- Architectures: Data ingestion, Log normalization, and Correlation Rules.
- Monitoring: Continuous visibility and SOC use-case development.
- Rule Development: Signatures vs. Behavioral Indicators (IoC vs. IoB).
- Optimization: Tuning alerts and managing False Positives.
● General frameworks Framework: Explanation of IR lifecycle.
● Strategic Intelligence: TTP (Tactics, Techniques, Procedures) profiling and Adversary tracking.
- Evidence Handling: Chain of Custody and Data Integrity.
- Artifact Analysis: Disk, Memory, and Log forensics.
- Methodology: Hypothesis-driven hunting vs. IoC-based searching
- Shared Responsibility Model: Securing IaaS, PaaS, and SaaS environments.
- Cloud IAM: Managing identities in different types of platforms.
Post-Exploitation: C2 frameworks, Pivoting, and Remote Control techniques
- Full-scale Penetration Test concluding with a Professional Pentest Report.
● Full-scale Detection and Response CTF
- Theoretical and Practical certification assessment
Course details
🗓
Schedule
Wednesday - 19:30 - 22:00
Saturday - 11:00 - 13:30
💳
Payment
Monthly
🧭
Internship
Included
🎓
Certificate
On completion
40 lessons
Your trainer
Narek Papyan
Head of Cybersecurity Department
Narek’s key professional achievement lies not only in his technical successes but also in building a strong and thoughtful team. As a mentor, he emphasizes daily challenges and the...
Frequently asked questions
Each course is labelled beginner, intermediate or advanced. If you are unsure, book a free consultation and we will help you choose.
Flexible payment options are available for most programs. Contact us to discuss the right plan for you.
Certificates
Certificates you can receive
Depending on the course format and results, students can receive one of BDG's certificate types.
- ✓ Verified BDG certificate
- ✓ QR / signature-ready format
- ✓ Armenian & English certificate design
Co-branded
Participation
For students who actively participate in the course learning process.
For active participationCompletion
For students who complete the course requirements and finish the program.
For successful completionExcellence
For students who complete the course with outstanding results and strong performance.
With distinctionHR Drone
A co-branded certificate for selected HR and partner-certified programs.
Co-brandedProgramming
Ready to start Cybersecurity Full Course?
Book a free consultation and reserve your place in the next cohort.
69,000 ֏
5 months · Starts — Mar 25, 2026
Keep exploring
Related courses
New
