Skip to main content
back to List back
on this page

Human Attack Surface: Simulating, Detecting, and Defending Identity & AI-Driven Threats

live online
price $1,400
Adeel
Intermediate / Advanced
2 Days
Defense
Tue 24 Nov - Wed 25 Nov
price $1,400
Register


Online, Available in English and Arabic

Overview

The human layer is the most exploited attack surface in modern enterprises, now amplified by AI-driven phishing, credential abuse, and data leakage.

This hands-on training enables participants to simulate real-world user-targeted attacks, analyse identity compromise scenarios, and implement detection and response mechanisms. The course also introduces emerging risks such as prompt injection and shadow AI usage, providing practical techniques to defend against them. 

Day 1 covers attack techniques including phishing, credential theft, session hijacking, and insider threats. Participants simulate attacks to understand how adversaries exploit users.

Day 2 focuses on detection and defenses, including identity protection, behavioural monitoring, Zero Trust principles, and AI-related threats such as prompt injection and data leakage.

The course is lab-driven and based on realistic enterprise scenarios.

Topics:

  • Exploiting the Human Attack Surface
  • Modern phishing (including AI-generated phishing campaigns) 
  • Credential harvesting and session hijacking 
  • Insider threats and privilege misuse 
  • Social engineering attack patterns 
  • Identity attack techniques 
  • Lab 1: Phishing simulation and payload analysis
  • Lab 2: Credential capture and session replay scenario
  • Detection, Response & AI Risk
  • Identity protection and Zero Trust fundamentals 
  • Behavioural monitoring and anomaly detection 
  • Incident response for compromised users 
  • AI-driven risks: Prompt injection, Data leakage via LLMs, Shadow AI usage 
  • Lab 3: Detect compromised identity scenario
  • Lab 4: AI misuse simulation and mitigation

Target audience and prerequisites

Security analysts, IT teams, SOC teams, and technical staff. Basic understanding of cybersecurity concepts recommended.

By the end of this course, the participant will be able to: 

  • Simulate phishing, credential theft, and social engineering attacks
  • Analyse identity compromise and session hijacking scenarios
  • Implement detection techniques for user-based attacks
  • Apply Zero Trust and identity-based security controls
  • Identify and mitigate risks from AI misuse including prompt injection and data leakage