CompTIA Cybersecurity Analyst (CySA+) - Hurbad

157 Cashir

24 Saacadood

iTus & iiSheeg

Certificate*

CompTIA Cybersecurity Analyst (CySA+) waa koorso loogu tala galay inuu barto qofka doonaya inuu noqdo cybersecurity professional si ow u fuliyo shaqooyinka soo socda, sida kohortaga khatarada dhicikara iyo xadididooda (incident detection, prevention) iyo inuu la socon karo dhaqdhaqaaqa network iyo amnigiisa giisa guud. koorsadaan waxaad kubaranee 4 xirfadood si aad u sugto amniga. 1. Security Operations. 2. Vulnerability Management. 3. Incident Response and Management. 4. Reporting and Communication. Koorsadaan CompTIA CyCA+ hada baro oo noqo xirfadle Cybersecurity ku xeeldheer.

Course Content

Expand All

MODULE 01: COURSE INTRODUCTION 2 Cashir

Expand

Cutub Content

0% Complete 0/2 Steps

CompTIA CySA+ Course Introduction

CompTIA CySA+ Course Slides

MODULE 02: BUILDING THE CompTIA CySA+ LABS 9 Cashir

Expand

Cutub Content

0% Complete 0/9 Steps

Course Lab Topology

Download and Install VMware Workstation Pro 17

Installing Windows Server 2022

Server Administrative Tasks

HURBAD-DC – Install AD and DNS

Installing Windows Server 2022 Member Server

Installing Windows 11 OS

Installing Alma Linux OS

Installing Kali Linux OS

MODULE 03: EXPLAIN THE IMPORTANCE OF SYSTEM AND NETWORK ARCHITECTURE CONCEPTS IN SECURITY OPERATIONS 28 Cashir

Expand

Cutub Content

0% Complete 0/28 Steps

Operating System Concepts

iTUS – CIS Benchmarks

Windows Registry and File System

Configuration File Format Standards

System Processes

Hardware Architecture

Virtualization (Hypervisors) Concept

Application vs Containers vs Virtual Machines

Understanding Cloud Deployment Models

Explore Serverless Computing

Network segmentation

Software-Defined Networks (SDN)

Deperimeterization

Zero Trust Architecture (ZTA)

Secure Access Service Edge (SASE)

Multifactor Authentication (MFA)

Out-of-band and In-band Mechanisms

Authentication Mechanisms

Understand Federated Trust Methods

Explain Cloud Access Security Broker

Understand Data Loss Prevention Concepts

Explain Different Data Types

Understand the Role of Public Key Infrastructure (PKI)

Explain Logging Concepts

iTUS – Managing device drivers to remove unneeded devices

iTUS – Removing unneeded applications and services

iTUS – Harden a system by setting firewall rules

iTUS – Set file permissions on Linux

MODULE 04: GIVEN A SCENARIO, ANALYZE INDICATORS OF POTENTIALLY MALICIOUS ACTIVITY 19 Cashir

Expand

Cutub Content

0% Complete 0/19 Steps

Understand Traffic Spikes and DDoS

Explore Beaconing Intrusion IoCs

Review Rogue Devices and Discovery Scans

Understanding Disk and File System Use

Explore Protocol and Port Use Scenarios

Explore Memory and Processor Consumption

Understanding Disk and File System Use

Unauthorized Software Concepts

Explore Malicious Process Concepts

Understand Unauthorized Change Concepts

Data Exfiltration Methods

Using Analysis to Identify Malicious Activity

Unexpected Output or Outbound Communication

Service Interruption

Application Logs

Identifying Anomalous Activity

iTUS – Download and Install Wazuh

iTUS – Adding Agents to Wazuh

iTUS – Windows 10 – Security Events

MODULE 05: GIVEN A SCENARIO, USE APPROPRIATE TOOLS OR TECHNIQUES TO DETERMINE MALICIOUS ACTIVITY 16 Cashir

Expand

Cutub Content

0% Complete 0/16 Steps

iTUS – Performing Packet Capture using Wireshark

ITUS – Performing Packet Capture using TCPdump

Explore Endpoint Detection and Response (EDR)

iTUS – EDR on Windows using Wazuh

iTUS – Performing Analysis using Whois & String

iTUS – Performing Malware Analysis using AbuseIPDB

Sandboxing for Malware Analysis

Security Information and Event Management (SIEM)

Security Orchestration, Automation, and Response (SOAR)

Email Message Internet Header Analysis

Explore Email Server Security

Interpreting Suspicious Commands

Explore Abnormal Activity

Essential Shell Scripting Commands

Explore Bash Shell Variables and Loops

Explore Additional Scripting Tools

MODULE 06: COMPARE AND CONTRAST THREAT-INTELLIGENCE AND THREAT-HUNTING CONCEPTS 7 Cashir

Expand

Cutub Content

0% Complete 0/7 Steps

Threat Actor Types

Tactics, Techniques, and Procedures (TTP)

Open-Source Intelligence (OSINT)

ProprietaryClosed-Source Intelligence Sources

Threat Intelligence Sharing

Understand Threat-Hunting Concepts

Decoy Methods and Concepts

MODULE 07: EXPLAIN THE IMPORTANCE OF EFFICIENCY AND PROCESS IMPROVEMENT IN SECURITY OPERATIONS 4 Cashir

Expand

Cutub Content

0% Complete 0/4 Steps

Maximizing Security Operations Through Automation

Identifying Tasks Suitable for Automation

Streamlining Operations

Explore Customization Features

MODULE 08: IMPLEMENT VULNERABILITY SCANNING METHODS AND CONCEPT 11 Cashir

Expand

Cutub Content

0% Complete 0/11 Steps

What is vulnerability management?

Vulnerability Scanning

Credentialed and Noncredentialed

Agents and Agentless

Active vs. Passive and Criticality Ranking

Understand Vulnerability Analysis Methods

Explain Device Hardening Options

CIS, and DOD’s STIGs Frameworks

iTUS – Performing Asset Discovery

Explore Special Considerations for Scanning

Explain Different Types of Industrial Computer Systems

MODULE 09: ANALYZE OUTPUT FROM VULNERABILITY ASSESSMENT TOOLS 17 Cashir

Expand

Cutub Content

0% Complete 0/17 Steps

Explore OpenVAS and Qualys Scanners

iTUS – Install Tenable Nessus

iTUS – Vulnerabilities Scan using Nessus

Review Nmap Discovery Scan Options

Measuring Social Engineering Vulnerabilities

iTUS – Social Engineering Toolkit (SET)

Explore Additional Assessment Tools

iTUS – Metasploit framework (MSF)

iTUS – Recon-ng

iTUS – Maltego

Understand URL Obfuscation Techniques

Analyzing Web Vulnerabilities

iTUS – Burp Suite

Review Application Debuggers

Cloud Infrastructure Assessment Tools

iTUS – Angry IP Scanner

MODULE 10: ANALYZE DATA TO PRIORITIZE VULNERABILITIES 4 Cashir

Expand

Cutub Content

0% Complete 0/4 Steps

Explore Common Vulnerability Scoring System (CVSS)

Explore Vulnerability Validation Concepts

Explore CVSS Scoring Considerations

CVSS Score Calculations

MODULE 11: RECOMMEND CONTROLS TO MITIGATE ATTACKS AND SOFTWARE VULNERABILITIES 14 Cashir

Expand

Cutub Content

0% Complete 0/14 Steps

Overflow Attack Types and Vulnerabilities

SQL Injection and XML Attacks and Vulnerabilities

Directory Traversal

Cross-Site Scripting (XSS)

File Inclusion Attack

Cookies and Sessions

Cross-Site Request Forgery (XSRF)/(CSRF

Server-Side Request Forgery (SSRF)

Broken Access Control

Application Attack Mitigation Checklists

iTUS – Installing DVWA on Kali Linux

iTUS – Performing Directory Traversal and Command Injection

iTUS – Performing SQLi

MODULE 12: EXPLAIN CONCEPTS RELATED TO VULNERABILITY RESPONSE, HANDLING, AND MANAGEMENT 7 Cashir

Expand

Cutub Content

0% Complete 0/7 Steps

Security Control Functional Types

Reducing the Attack Surface

Explain Risk Management Principles

Explore Threat Modeling

Explore Secure Software Development Practices

Authentication Attack Types and Best Practices

Understand Secure Coding Best Practices

MODULE 13: EXPLAIN CONCEPTS RELATED TO ATTACK METHODOLOGY FRAMEWORKS 6 Cashir

Expand

Cutub Content

0% Complete 0/6 Steps

Explore Kill Chain Concepts

Explore MITRE ATT&CK Framework

Understand the Diamond Model of Intrusion Analysis

OSSTMM and OWASP Testing Guides

Understand Incident Response Procedures

Understand Containment and Recovery Concepts

MODULE 14: EXPLAIN THE PREPARATION AND POST-INCIDENT ACTIVITY PHASES OF THE INCIDENT MANAGEMENT LIFE CYCLE 3 Cashir

Expand

Cutub Content

0% Complete 0/3 Steps

Understand Incident Response Planning Processes

Incident Response Process

Common Incident Response Plan Components

MODULE 15: EXPLAIN CONCEPTS RELATED TO ATTACK METHODOLOGY FRAMEWORKS 10 Cashir

Expand

Cutub Content

0% Complete 0/10 Steps

Explore Vulnerability Management Reporting

Explain Vulnerability Report Best Practices

Risk Score and Priority

Explore Vulnerability Management Reporting

Explain Vulnerability Report Best Practices

Risk Score and Priority

Compliance Reports

Understand Key Performance Indicators (KPI)

Explore Stakeholder Communication

About Instructor

Abdirizak Hersi

72 Courses