- Teacher: Admin User
CelebIsland Campus
Skip available courses
Available courses
A short, standalone course in the CelebIsland Security Academy consisting of a single real practical exercise: designing an AI usage policy for a SOC team, graded with a real rubric. Built per the client's AI-Native master expansion directive (section 110, item 3). Given its own course rather than attached to GRC or Security Engineering, specifically so it does not alter either of those courses' already-verified, single-grade-item (exam-based) grade computation.
A short, standalone course in the CelebIsland Security Academy — not a full specialization track — covering the security discipline of AI itself: prompt injection (direct and indirect), data leakage through AI assistants, model and supply-chain risk, and secure integration patterns. Built per the client's AI-Native master expansion directive (section 110, item 2). Closes with a case study grounded directly in CelebIsland's own real, deployed Module 52 AI-assist feature, read from its actual source. Companion to the AI Fundamentals course, whose vocabulary (hallucination, non-determinism, human-in-the-loop) this course assumes.
A short, standalone course in the CelebIsland Security Academy — not a full specialization track — covering what AI and large language models actually are, how to use them responsibly, and their real limits: hallucination, non-determinism, and the mandatory role of human validation. Built per the client's AI-Native master expansion directive (section 110, item 1). No prerequisite; this course establishes the working vocabulary (hallucination, non-determinism, human-in-the-loop) the companion AI Security course builds directly on.
The thirteenth and final CelebIsland Security Academy specialization track — the capstone discipline of actually engineering the secure platforms every other track depends on. Security engineering as a discipline, secure-by-design architecture principles (fail-safe defaults, complete mediation, least privilege, single enforcement point), multi-tenancy and isolation architecture, building a real single authorization enforcement point, tamper-evident audit logging architecture, secrets and key management engineering, defense in depth as a real engineering pattern, secure data/schema design, reusable risk-engine architecture, resilience engineering (kill switches, safe failure modes), the engineering discipline of honest non-fabricated scope, and how these concepts map onto CelebIsland's own real XSEC RBAC, tenant isolation, and audit hash-chain architecture. Builds directly on the Common Cybersecurity Foundation and all twelve prior specialization tracks.
The twelfth CelebIsland Security Academy specialization track: Governance, Risk, and Compliance as a full, evidence-based program. GRC as a real program (not paperwork), security governance (policy hierarchy, RACI, governance committees), enterprise risk management (risk registers, appetite/tolerance, qualitative/quantitative assessment), compliance frameworks in depth (NIST CSF 2.0, ISO 27001, SOC 2, PCI DSS), regulatory compliance and data protection, control design, the compliance-measurement honesty problem (never fabricate a score), audits (internal/external/continuous), third-party and vendor risk management, GRC technology and automation, building a GRC program and reporting to the board, and how these concepts map onto CelebIsland's own real XSEC Compliance and Framework Mapping system. Builds directly on the Common Cybersecurity Foundation and all eleven prior specialization tracks.
The eleventh CelebIsland Security Academy specialization track: finding, prioritizing, and driving remediation of vulnerabilities across an entire environment continuously. The vulnerability management lifecycle, scanning and discovery, asset inventory as the program foundation, risk-based prioritization (CVSS, EPSS, known-exploited status), deduplication and multi-source data, remediation workflows and SLAs, the exception and accepted-risk process, program metrics and reporting, patch management in practice, vulnerability management in cloud/container environments, POA&M and compliance-driven tracking, and how these concepts map onto CelebIsland's own real XSEC Vulnerability Management system. Builds directly on the Common Cybersecurity Foundation, Security Analyst / SOC, Threat Hunter, Detection Engineer, Penetration Tester, Application Security, Cloud Security, IAM / Identity Security, Network Security, Incident Response, and DFIR courses.
The tenth CelebIsland Security Academy specialization track: digital forensics and incident response at full evidentiary rigor. The DFIR discipline and order of volatility, chain of custody and evidence handling in depth, forensic imaging and acquisition, memory forensics, disk and file system forensics, timeline analysis and entity-relationship correlation, network forensics, log forensics at scale, malware analysis fundamentals, cloud and virtualized environment forensics, anti-forensics and detecting evidence tampering, and how these concepts map onto CelebIsland's own real XSEC Investigation Workspace and entity graph. Builds directly on the Common Cybersecurity Foundation, Security Analyst / SOC, Threat Hunter, Detection Engineer, Penetration Tester, Application Security, Cloud Security, IAM / Identity Security, Network Security, and Incident Response courses.
The ninth CelebIsland Security Academy specialization track: building and running a real incident response program. The IR program (policy, classification, resourcing), team structure and roles (Incident Commander and beyond), IR planning and playbooks (automation, trust floors, kill switches, dry runs), detection and triage at incident scale, containment strategies in depth, eradication and recovery in depth, crisis communication, legal/regulatory/breach notification, tabletop exercises and program testing, dedicated playbooks for ransomware and for BEC/insider incidents, and how these concepts map onto CelebIsland's own real XSEC playbook engine and incident communications system. Builds directly on the Common Cybersecurity Foundation, Security Analyst / SOC, Threat Hunter, Detection Engineer, Penetration Tester, Application Security, Cloud Security, IAM / Identity Security, and Network Security courses.
The eighth CelebIsland Security Academy specialization track: securing the network layer in depth. Network security architecture and design principles, firewalls and network access control, segmentation and microsegmentation, intrusion detection and prevention, VPN and secure remote access (including ZTNA), network traffic analysis and packet inspection, DNS security, wireless network security, network device hardening, DDoS defense and network resilience, network incident response and containment, and how these concepts map onto CelebIsland's own real XSEC endpoint containment system. Builds directly on the Common Cybersecurity Foundation, Security Analyst / SOC, Threat Hunter, Detection Engineer, Penetration Tester, Application Security, Cloud Security, and IAM / Identity Security courses.
The seventh CelebIsland Security Academy specialization track: identity as the primary modern security control point. Identity lifecycle management (joiner-mover-leaver, SCIM), authentication engineering (MFA methods ranked, passwordless, adaptive authentication), authorization models in depth (RBAC/ABAC, entitlement management, separation of duties), Privileged Access/Identity Management (PAM/PIM, vaulting, the 4-flag risk pattern), federation and SSO (SAML/OAuth/OIDC, real identity providers), identity risk scoring and behavioral analytics, detecting identity attacks (the defensive side of Kerberoasting/pass-the-hash/spraying), non-human and machine identity security, Identity Governance and Administration, identity in Zero Trust architecture, and how these concepts map onto CelebIsland's own real XSEC Identity Security Center. Builds directly on the Common Cybersecurity Foundation, Security Analyst / SOC, Threat Hunter, Detection Engineer, Penetration Tester, Application Security, and Cloud Security courses.
The sixth CelebIsland Security Academy specialization track: securing cloud environments at depth. The shared responsibility model in practice, cloud IAM (overprivileged access, privilege escalation chains, stale credentials), storage and data security, cloud network security, logging and visibility (including disabled logging as its own risk category), cloud secrets management, Cloud Security Posture Management and the real eight-category misconfiguration taxonomy (including shadow resources), container/Kubernetes/serverless security, Infrastructure as Code security, cloud incident response and forensics, multi-cloud governance and compliance, and how these concepts map onto CelebIsland's own real XSEC Cloud Security Center. Builds directly on the Common Cybersecurity Foundation, Security Analyst / SOC, Threat Hunter, Detection Engineer, Penetration Tester, and Application Security courses.
The fifth CelebIsland Security Academy specialization track: building security into software, not testing for its absence afterward. The secure SDLC and shift-left, threat modeling (STRIDE, abuse cases), secure coding for injection prevention and for authentication/session/authorization, SAST/DAST/SCA automated testing, API security engineering, software supply chain security, container and cloud-native security, applied cryptography pitfalls, security code review, building an AppSec program (champions, training, metrics), and how these concepts map onto CelebIsland's own real XSEC secrets and integrations layer. Builds directly on the Common Cybersecurity Foundation, Security Analyst / SOC, Threat Hunter, Detection Engineer, and Penetration Tester courses.
The fourth CelebIsland Security Academy specialization track, and the first in its offensive security line: the pentester's role and Rules of Engagement, the real testing methodology (PTES/OSSTMM-style phases, black/white/gray box styles), reconnaissance and OSINT, scanning and enumeration, exploitation fundamentals, web application testing (OWASP Top 10 hands-on), post-exploitation and privilege escalation, Active Directory and network testing (Kerberoasting, pass-the-hash), password and credential attacks, CVSS-based reporting, legal/ethical/professional standards, and an honest look at where this track connects to CelebIsland's own real XSEC platform. Builds directly on the Common Cybersecurity Foundation, Security Analyst / SOC, Threat Hunter, and Detection Engineer courses.
The third CelebIsland Security Academy specialization track: building and operating the detection content a SOC and hunting program both depend on. Detection requirements and use-case design, data engineering for detection, signature/correlation logic, behavioral and anomaly-based detection, the 5-stage detection lifecycle, testing via Atomic Red Team and purple teaming, signal-to-noise tuning, detection-as-code and version control, ATT&CK coverage mapping, program metrics, and how these concepts map onto CelebIsland's own real XSEC Detection Engineering Workspace. Builds directly on the Common Cybersecurity Foundation, Security Analyst / SOC, and Threat Hunter courses.
The second CelebIsland Security Academy specialization track: proactive, hypothesis-driven threat hunting. The Hunting Maturity Model, building strong hypotheses, data sources and coverage, stacking/frequency analysis, living-off-the-land techniques and LOLBins, hunting across the ATT&CK lifecycle, structured hunting methodologies (the Sqrrl loop, TaHiTI, PEAK), hunting in cloud/identity environments, operationalizing findings into detections, hunt documentation, program metrics, and how these concepts map onto CelebIsland's own real XSEC Threat Hunting Workspace. Builds directly on the Common Cybersecurity Foundation and Security Analyst / SOC courses.
The first CelebIsland Security Academy specialization track: the daily reality of working as a SOC analyst — triage, log analysis, SIEM use, the incident lifecycle in practice, MITRE ATT&CK in daily work, common attack patterns a Tier 1 analyst sees, escalation criteria, case documentation standards, an intro to threat hunting, and how these concepts map onto CelebIsland's own real XSEC security operations platform. Builds directly on the Common Cybersecurity Foundation course.
The shared foundation for every CelebIsland Security Academy specialization track: security principles & the CIA triad, networking fundamentals, authentication & authorization, logs/telemetry/SIEM/EDR/XDR, vulnerabilities (CVE/CWE/CVSS), threat intelligence, incident response, MITRE ATT&CK, cloud security, application & API security, cryptography, GRC, and Zero Trust. Concludes with a graded, certification-style final exam.
Little Explorers -- Celeb Island Cyber Academy -- Celeb Island Cyber Academy.
Junior Defenders -- Celeb Island Cyber Academy -- Celeb Island Cyber Academy.
Cyber Scouts -- Celeb Island Cyber Academy -- Celeb Island Cyber Academy.
Red and Blue Cadets -- Celeb Island Cyber Academy -- Celeb Island Cyber Academy.
Pro Track -- Celeb Island Cyber Academy -- Celeb Island Cyber Academy.
App and Game Lab -- Celeb Island Creator Studio -- Celeb Island Cyber Academy.
AI Film Studio -- Celeb Island Creator Studio -- Celeb Island Cyber Academy.
Prompt Lab -- Celeb Island Creator Studio -- Celeb Island Cyber Academy.