Month 11 – Programming & Automation for Cybersecurity

 

Month 11 – Programming & Automation for Cybersecurity

Note: This module teaches students how to use programming to automate security tasks, analyze data, and build simple cybersecurity tools. The emphasis is on defensive automation.

TopicWhat I Will DiscussToolWhat We Use the Tool ForPracticalTheory AssessmentPractical Assessment
Introduction to Programming for CybersecurityWhy cybersecurity professionals learn programming, programming languages, automation, scripting basics.Visual Studio CodeTo write, edit, and test scripts and programs.Install VS Code and write your first Python program.Explain why programming is important in cybersecurity.Write and run a Python program that prints a message.
Python BasicsVariables, data types, operators, input/output, comments.Python 3To create automation scripts and security tools.Write programs using variables, calculations, and user input.Explain Python variables and data types.Develop a simple interactive Python program.
Control StatementsIf statements, loops, logical operators, decision making.Python 3To control program flow and automate repetitive tasks.Create a program that validates user input.Explain how loops and conditions work.Write a program using if, for, and while.
Functions & ModulesFunctions, parameters, return values, importing modules.Python 3To organize and reuse code efficiently.Create reusable functions and import built-in modules.Explain the purpose of functions.Build a calculator using functions.
Working with FilesReading, writing, appending, handling text files, CSV basics.Python 3To automate file processing and log analysis.Read from and write to text and CSV files.Explain file operations in Python.Create a program that reads a log file and summarizes entries.
Regular Expressions (Regex)Pattern matching, searching, validation, extracting data.Python (re module)To search and analyze text such as logs or reports.Extract email addresses and IP addresses from sample text.Explain what regular expressions are.Build a script that extracts specific patterns from a log file.
Automating System TasksFile management, backups, folder creation, scheduling concepts.Python (os, shutil)To automate common administrative tasks.Write a script to organize files into folders by file type.Explain the benefits of automation.Successfully automate file organization.
Working with APIsWhat APIs are, JSON, HTTP requests, authentication concepts.Python (requests)To retrieve data from web services and security platforms.Retrieve publicly available data from a practice API.Explain what an API is and how it works.Write a script that retrieves and displays API data.
Basic Log AnalysisLog formats, filtering, searching, summarizing events.PythonTo automate log analysis and reporting.Analyze a sample log file and count failed login attempts.Explain why log analysis is important.Produce a summary report from a log file.
Writing Simple Security UtilitiesPlanning, testing, documentation, error handling.Python & Visual Studio CodeTo build simple defensive cybersecurity tools.Create a password strength checker or file integrity checker.Explain the development process of a security utility.Demonstrate your completed utility and explain how it works.

End-of-Month Project

Project Title

Build a Cybersecurity Automation Tool

Objectives

Students will design and develop one of the following:

  • Password Strength Checker

  • File Integrity Checker

  • Log Analyzer

  • Backup Automation Tool

  • File Organizer

  • System Information Collector

Tools

  • Python 3

  • Visual Studio Code

  • Git

  • GitHub

  • Microsoft Word

Real-Life Projects

Project 1 – Automated Backup Script

Develop a Python program that:

  • Creates a backup folder.

  • Copies selected files.

  • Adds today's date to the backup folder name.

  • Records backup activity in a log file.

Project 2 – Security Log Analyzer

Develop a Python program that:

  • Reads a log file.

  • Counts failed login attempts.

  • Identifies repeated login failures.

  • Generates a summary report.

End-of-Month Assessment

Theory Assessment (30%)

  • 20 Multiple Choice Questions

  • 10 Short Answer Questions

  • Python programming concepts

  • Automation scenarios

Practical Assessment (40%)

Students must:

  • Install Python and Visual Studio Code.

  • Write Python programs using variables, loops, and functions.

  • Read and write text files.

  • Use regular expressions.

  • Consume data from a practice API.

  • Analyze a sample log file.

  • Build and demonstrate a simple cybersecurity utility.

Project Assessment (20%)

Students will be assessed on:

  • Code quality

  • Functionality

  • Error handling

  • Documentation

  • Demonstration of the tool

Class Participation (10%)

  • Attendance

  • Lab participation

  • Homework

  • Code reviews

  • Group discussions

  • Project presentation

Comments

Post a Comment

Popular posts from this blog

Nobigdeal Academy Cybersecurity Diploma Programme (12 Months)

Image
Cybersecurity Diploma Programme (12 Months) This programme is divided into four professional learning tracks. Each track lasts three months and builds on the knowledge and skills gained in the previous level. Students begin with the fundamentals of cybersecurity and gradually progress to advanced topics such as cloud security, security operations, digital forensics, and automation. Level 1: Cyber Defender (Foundation) Duration: 3 Months The Cyber Defender track is the foundation of the programme. It is designed for beginners who want to understand how computers, networks, and cybersecurity work. Students will learn how to recognize cyber threats, protect devices, and apply basic security measures to personal and business environments. During this level, students will study: Cybersecurity & Computer Fundamentals Networking Fundamentals Cyber Threats & Security Awareness Students will gain practical skills in: Computer security fundamentals Windows and Linux basics Networking ...
Read more

Month 8 – Security Operations Center (SOC) & Incident Response (Blue Team)

  Month 8 – Security Operations Center (SOC) & Incident Response (Blue Team) Note: This month focuses on defending systems , detecting suspicious activity, and responding to cybersecurity incidents. Topic What I Will Discuss Tool What We Use the Tool For Practical Theory Assessment Practical Assessment Introduction to SOC (Security Operations Center) What a SOC is, SOC roles, Tier 1–3 analysts, how a SOC operates. Microsoft Sentinel (Lab) To monitor and investigate security events from different systems. Explore the Microsoft Sentinel dashboard and identify security alerts. Define a SOC and explain its functions. Navigate the SIEM dashboard and identify security alerts. Security Monitoring Continuous monitoring, logs, alerts, detection methods. Splunk To monitor systems and identify suspicious activities. Import sample logs into Splunk and search for events. Explain why continuous monitoring is important. Search and identify suspicious events in logs. Log Analysis Types of log...
Read more