Cyber and forensics curriculum
Two tracks, one program: offensive security and digital forensics.
The cyber track runs reconnaissance and enumeration, web attacks, exploitation, Active Directory attack paths, privilege escalation, and purple teaming — offense taught with defensive accountability. The forensics track runs chain of custody and imaging, operating-system artifacts, unified timelines, memory, malware and mobile analysis, and reporting written to hold up under scrutiny. Both begin with a shared foundation, and AI-assisted triage sits inside the forensics workflow rather than replacing it. It is being prepared for delivery as the cybersecurity and digital forensics initiative in Jordan, with Darb.Tech.
At a glance
Two tracks, three delivery shapes.
The tracks share a foundation and a design approach, so each stays credible to its own learners, employers, and institutional partners while the work behind it carries over.
- Two tracks
- Cybersecurity, and digital forensics and incident response. Both open with a shared foundation in operating systems, networking, ethics, and evidence-safe habits.
- Reference frameworks
- Security+, CySA+, SecurityX, and MITRE ATT&CK are used to calibrate the build. They are not learner credentials and the program does not award them.
- Delivery shapes
- A six-month intensive, a two-year applied degree pathway, or a workshop series from one hour to one week.
- In preparation
- The cybersecurity and digital forensics initiative in Jordan, with Darb.Tech, centered on Amman. The curriculum is not specific to a market.
Tracks
What each track teaches.
Learners share a foundation, then split. The tracks meet again for joint red-team and blue-team work.
Track one
Cybersecurity
Reconnaissance and enumeration, web attacks and the OWASP Top 10, exploitation and automation, password attacks and social engineering, Active Directory attack paths, privilege escalation, command-and-control and operational security, then purple teaming and detection-aware offense.
Track two
Digital forensics and incident response
Chain of custody, imaging and hash validation, operating-system artifacts across Windows, Linux and macOS, unified timelines and rapid triage, memory forensics, malware analysis, mobile and cloud artifacts, parser development and provenance, then defensible reporting and incident-response playbooks.
Formats
The same pathway, scoped three ways.
Which shape a partner takes depends on who the learners are and how much time the system can give them.
Six months
Applied intensive
For working engineers and technical professionals who need to upskill on a shorter timeline than an academic program allows.
Two years
Applied degree pathway
For learners entering post-secondary study after secondary school, where progression and support matter as much as pace.
One hour to one week
Workshop series
For employer briefings, technical primers, and institutional starting points that can later feed a deeper pathway.
How it compounds
How technical pathways become a wider talent system.
LevelUp helps shape curriculum, delivery, and ecosystem strategy so these pathways create value beyond learner completion.
Phase 01
Run the pathway as an intensive
AI.SPIRE proved the model through applied projects, hybrid delivery, and visible technical output. The cyber defense and AI security pathway follows the same shape.
Phase 02
Adapt the architecture for degree delivery
Extend the pathway into a two-year applied format when partners need more scaffolding, academic progression, and student support.
Phase 03
Offer workshops where short-format capability is enough
Employer briefings, technical primers, and institutional starting points that can later feed into the deeper pathways.
Phase 04
Support ventures and corporate adoption
Turn capstones into company ideas, employer solutions, internal AI adoption work, and stronger regional innovation capacity.
Related
Where this sits in the rest of the work.
Insight
The Darb.Tech case study
How the work was scoped, and what delivering one pathway teaches about the next.
Capability area
Build talent systems
Technical pathways are a visible example of connecting education to the wider economic system.
Curriculum
The technical course catalog
The longer pathways for job-ready, portfolio-ready technical talent that these programs are assembled from.
Next step
Shape the next pathway.
Employers and institutions helping define the cyber and forensics tracks influence what they teach and who they are built for.