TechSkills Institute · Perth
Launch Your Cyber Security Career with Real-World Skills
Build practical, job-ready skills through face-to-face training, real-world security labs and industry-standard tools—guided by experienced professionals in Perth.
Target Roles:
SOC Analyst (Level 1/2) Security Operations Analyst MSP/MSSP Security Analyst
Explore the curriculum
New batch starts 5th October
Real SOC Experience ● Live analyst-style labs
Industry Tool Stack Sentinel · Defender · KQL
105 Hours Contact training
Hands-on Practical labs
Career Ready SOC pathway
Upcoming intake
Your pathway to a Cyber Security career
A structured 12-week face-to-face program combining practical training, guided homework sessions and industry-relevant security tools.
Face-to-face training in Perth
Perth batch schedule
Enrolment open
Location Perth Campus Face-to-face delivery
Batch starts 5th October Upcoming Perth intake
Class timing Monday–Tuesday
6:00 PM–9:00 PM Perth time
6:00 PM–9:00 PM Perth time
Homework session Friday
6:00 PM–9:00 PM Guided support session
6:00 PM–9:00 PM Guided support session
Course curriculum
Your complete 12-week learning journey
Develop practical Cyber Security capabilities through guided labs, industry tools and analyst-style investigations.
105 contact hours Practical training Career support
Week 01 Linux Fundamentals for Cyber Security Analysts
- Investigate Linux systems using command-line tools, file permissions and ownership.
- Identify suspicious users, processes, services and network connections.
- Search and correlate Linux logs during security-event triage.
- Access and administer remote Linux hosts.
Tools: Navigation, grep, processes, services, chmod/chown and
remote Linux access.
Week 02 Network Scanning & Vulnerability Assessment
- Discover hosts, ports, services and potential attack surfaces.
- Identify vulnerabilities using professional scanning tools.
- Validate findings, remove false positives and prioritise remediation.
Tools: Nmap, Nessus Essentials, OpenVAS/Greenbone and
Metasploitable.
Week 03 Network Traffic Analysis & PCAP Investigation
- Analyse packet captures and reconstruct suspicious network activity.
- Investigate live and historical traffic.
- Detect scanning, DNS abuse, command-and-control activity and data exfiltration.
Tools: Wireshark and tcpdump.
Week 04 Firewalls, IDS/IPS & Deception
- Configure firewall rules, NAT and network segmentation.
- Deploy an IDS/IPS and investigate real network alerts.
- Apply deception techniques to expose attacker activity.
Tools: pfSense, Suricata, Canarytokens and firewall log
analysis.
Week 05 Windows & Active Directory Security
- Understand Active Directory, Kerberos and NTLM attacks.
- Map identity attack paths and privileged accounts.
- Detect password spraying and suspicious authentication activity.
- Improve Windows attack visibility using Sysmon.
Tools: PingCastle, BloodHound, SharpHound, Sysmon and Windows
event logs.
Week 06 Cloud IAM, Email Security, Phishing & DLP
- Secure cloud identities using MFA, Conditional Access and least privilege.
- Investigate risky sign-ins and identity compromise.
- Analyse phishing, BEC and email authentication.
- Investigate data-exfiltration alerts using DLP.
Tools: Microsoft Entra ID, Defender for Office 365, Exchange
Online and Purview DLP.
Week 07 SOC Operations & SIEM Setup
- Understand SOC detection, triage, escalation and response workflows.
- Build a SIEM environment and onboard critical logs.
- Convert raw security events into actionable alerts.
- Manage an incident queue and analyst shift handover.
Tools: Microsoft Sentinel, data connectors and incident queues.
Week 08 KQL, Detection Rules & Incident Response
- Use KQL to investigate identity, endpoint and network events.
- Build analytics rules and tune noisy detections.
- Triage incidents and establish business impact.
- Produce clear investigation and escalation notes.
Tools: KQL, Microsoft Sentinel analytics rules and investigation
workflows.
Week 09 EDR/XDR & Endpoint Protection
- Investigate endpoint alerts using process trees and timelines.
- Correlate endpoint, identity and email signals.
- Contain compromised devices and perform remediation.
- Reduce attack surface using security controls.
Tools: Microsoft Defender for Endpoint, Defender XDR and ASR
rules.
Week 10 Threat Hunting, MITRE ATT&CK, Playbooks & SOAR
- Conduct hypothesis-driven threat-hunting investigations.
- Map attacker behaviour to MITRE ATT&CK.
- Convert successful hunts into repeatable detections.
- Automate enrichment and response actions using SOAR.
Tools: Defender XDR Advanced Hunting, Sentinel, MITRE ATT&CK
and Logic Apps.
Week 11 Compliance, Risk Assessment & Change Management
- Assess an organisation against the Essential Eight.
- Collect evidence and identify security-control gaps.
- Connect technical controls with compliance frameworks.
- Prioritise risks and apply change-control processes.
Tools: Essential Eight, NIST CSF, ISO 27001, ISM and risk
registers.
Week 12 Capstone SOC Simulation & Career Launch
- Respond to a realistic multi-stage Cyber Security attack.
- Detect, triage, investigate, contain and document the incident.
- Build an incident timeline and recommend remediation.
- Present and defend findings in a job-style scenario.
Tools: Microsoft Sentinel, Defender XDR, Entra ID, KQL and
MITRE ATT&CK.
