CompTIA® CySA+ (CS0-002) Complete Course

Welcome to the Course

Download the Study Guide

100% Pass Guarantee

Intro to LAB

Discovering the Lab Environment

Identify Security Control Types (Introduction)

Cybersecurity Roles and Responsibilities

Security Operations Center (SOC)

Security Control Categories

Selecting Security Controls

Quiz: Identify Security Control Types

Threat Intelligence Sharing (Introduction)

Security and Threat Intelligence

Intelligence Cycle

Intelligence Sources

Information Sharing and Analysis Centers (ISACS)

Threat Intelligence Sharing

Quiz: Threat Intelligence

Classifying Threats (Introduction)

Threat Classification

Threat Actors

Malware

Threat Research

Attack Frameworks

Indicator Management

Quiz: Classifying Threat

Threat Hunting (Introduction)

Threat Modeling

Threat Hunting

Open-source Intelligence

Google Hacking

Profiling Techniques

Harvesting Techniques

Quiz: Threat Hunting

Network Forensics (Introduction)

Network Forensic Tools

tcpdump

Wireshark

Flow Analysis

IP and DNS Analysis

URL Analysis

Conduct Packet Analysis

Labs: Analyzing Output from Network Security Monitoring Tools

Quiz: Network Forensics

Appliance Monitoring (Introduction)

Firewall Logs

Firewall Configurations

Proxy Logs

Web Application Firewall Logs

IDS and IPS Configuration

IDS and IPS Logs

Port Security Configuration

NAC Configuration

Analysis of Security Appliances

Labs: Analyzing Output from Security Applicance Logs

Quiz: Application Monitoring

Endpoint Monitoring (Introduction)

Endpoint Analysis

Sandboxing

Reverse Engineering

Malware Exploitation

Behavior Analysis

Malware Analysis (demo)

EDR Configuration

Blacklisting and Whitelisting

Labs: Analyzing Output from Endpoint Security Monitoring Tools

Quiz: Endpoint Monitoring

Email Monitoring (Introduction)

Email IOCs

Email Header Analysis

Email Content Analysis

Email Server Security

SMTP Log Analysis

Email Message Security

Analyzing Email Headers

Labs: Analyzing Email Headers

Quiz: Email Monitoring

Configuring Your SIEM (Introduction)

SIEM

Security Data Collection

Data Normalization

Event Log

Syslog

Configuring a SIEM Agent

Labs: Configuring SIEM Agents and Collectors

Quiz: Configuring Your SIEM

Analyzing Your SIEM (Introduction)

SIEM Dashboards

Analysis and Detection

Trend Analysis

Rule and Query Writing

Searching and Piping Commands

Scripting Tools

Analyzing, Filtering, and Searching Logs

Labs: Analyzing, Filtering, and Searching Event Log and syslog Output

Quiz: Analyzing Your SIEM

Digital Forensics (Introduction)

Digital Forensic Analysts

Forensics Procedures

Work Product Retention

Data Acquisition

Forensics Tools

Memory Acquisition

Disk Image Acquisition

Hashing

Timeline Generation

Carving

Chain of Custody

Collecting and Validating Evidence

Labs: Collecting and Validating Digital Evidence

Quiz: Digital Forensics

Analyzing Network IOCs (Introduction)

Analyzing Network IOCs

Traffic Spikes

Beaconing

Irregular P2P Communications

Rogue Devices

Scans and Sweeps

Nonstandard Port Usage

TCP Ports

UDP Ports

Data Exfiltration

Covert Channels

Analysis of Network IOCs

Labs: Analyzing Network-related IoCs

Quiz: Analyzing Network IOCs

Analyzing Host-related IOCs (Introduction)

Host-related IOCs

Malicious Processes

Memory Forensics

Consumption

Disk and File System

Unauthorized Privilege

Unauthorized Software

Unauthorized Change/Hardware

Persistence

Labs: Analyzing Host and Application IoCs

Quiz: Analyzing Host-related IOCs

Analyzing Application-related IOCs

Application-related IOCs

Anomalous Activity

Service Interruptions

Application Logs

New Accounts

Virtualization Forensics

Mobile Forensics

Quiz: Analyzing Application-related IOCs

Analyzing Lateral Movement and Pivoting IOCs

Lateral Movement and Pivoting

Pass the Hash

Golden Ticket

Lateral Movement

Pivoting

Quiz: Analyzing Lateral Movement and Pivoting IOCs

Incident Response Preparation (Introduction)

Incident Response Phases

Documenting Procedures

Data Criticality

Communication Plan

Reporting Requirements

Response Coordination

Training and Testing

Quiz: Incident Response Preparation

Detection and Containment (Introduction)

OODA Loop

Defensive Capabilities

Detection and Analysis

Impact Analysis

Incident Classification

Containment

Quiz: Detection and Containment

Eradication, Recovery, and Post-incident Actions (Introduction)

Eradication

Eradication Actions

Recovery

Recovery Actions

Post-Incident Activities

Lessons Learned

Labs: Observing IoCs during a Security Incident

Quiz: Eradication, Recovery, and Post-incident Actions

Risk Mitigation (Introduction)

Risk Identification Process

Conducting an Assessment

Risk Calculation

Business Impact Analysis

Risk Prioritization

Communicating Risk

Training and Exercises

Quiz: Risk Mitigation

Frameworks, Policies, and Procedures (Introduction)

Enterprise Security Architecture

Prescriptive Frameworks

Risk-based Frameworks

Audits and Assessments

Continuous Monitoring

Quiz: Frameworks, Policies, and Procedures

Enumeration Tools (Introduction)

Enumeration Tools

Nmap Discovery Scans

Nmap Port Scans

Nmap Port States

Nmap Fingerprinting Scans

Using Nmap

Hping

Labs: Analyzing Output from Topology and Host Enumeration Tools

Responder

Wireless Assessment Tools

Hashcat

Testing Credential Security

Labs: Testing Credential Security

Quiz: Enumeration Tools

Vulnerability Scanning (Introduction)

Identifying Vulnerabilities

Scanning Workflow

Scope Considerations

Scanner Types

Scanning Parameters

Scheduling and Constraints

Vulnerability Feeds

Scan Sensitivity

Scanning Risks

Conducting Scans

Labs: Configuring Vulnerability Scanning and Analyzing Outputs

Quiz: Vulnerability Scanning

Analyzing Output from Vulnerability Scanners (Introduction)

Scan Reports

Common Identifiers

CVSS

Vulnerability Reports

Nessus

OpenVAS and Qualys

Assessing Scan Outputs

Labs: Assessing Vulnerability Scan Outputs

Quiz: Analyzing Output from Vulnerability Scanners

Mitigating Vulnerabilities (Introduction)

Remediation and Mitigation

Configuration Baselines

Hardening and Patching

Remediation Issues

Quiz: Mitigating Vulnerabilities

Identity and Access Management Solutions (Introduction)

Identity and Access Management

Password Policies

SSO and MFA

Certificate Management

Federation

Privilege Management

IAM Auditing

Conduct and Use Policies

Account and Permissions Audits

Labs: Performing Account and Permissions Audits

Quiz: Identity and Access Management Solutions

Network Architecture and Segmentation (Introduction)

Asset and Change Management

Network Architecture

Segmentation

Jumpbox

Virtualization

Virtualized Infrastructure

Honeypots

Configuring Network Segmentation

Labs: Configuring Network Segmentation and Security

Quiz: Network Architecture and Segmentation

Hardware Assurance Best Practices (Introduction)

Supply Chain Assessment

Root of Trust

Trusted Firmware

Secure Processing

Quiz: Hardware Assurance Best Practices

Specialized Technology (Introduction)

Mobile Vulnerabilities

IoT Vulnerabilities

Embedded System Vulnerabilities

ICS & SCADA Vulnerabilities

Mitigating Vulnerabilities

Premise System Vulnerabilities

Vehicular Vulnerabilities

Quiz: Specialized Technology

Non-technical Data and Privacy Controls (Introduction)

Data Classification

Data Types

Legal Requirements

Data Policies

Data Retention

Data Ownership

Data Sharing

Quiz: Non-technical Data and Privacy Controls

Technical Data and Privacy Controls (Introduction)

Access Controls

File System Permissions

Encryption

Data Loss Prevention

DLP Discovery and Classification

Deidentification Controls

DRM and Watermarking

Analyzing Share Permissions

Labs: Configuring and Analyzing Share Permissions

Quiz: Technical Data and Privacy Controls

Mitigate Software Vulnerabilities and Attacks (Introduction)

SDLC Integration

Execution and Escalation

Overflow Attacks

Race Conditions

Improper Error Handling

Design Vulnerabilities

Platform Best Practices

Quiz: Mitigate Software Vulnerabilities and Attacks

Mitigate Web Application Vulnerabilities and Attacks (Introduction)

Directory Traversal

Cross-site Scripting

SQL Injection

XML Vulnerabilities

Secure Coding

Authentication Attacks

Session Hijacking

Sensitive Data Exposure

Clickjacking

Web Application Vulnerabilities

Labs: Assessing the Impact of Web Application Vulnerabilities

Quiz: Mitigate Web Application Vulnerabilities and Attacks

Analyzing Application Assessments (Introduction)

Software Assessments

Reverse Engineering

Dynamic Analysis

Web Application Scanners

Burp Suite

OWASP ZAP

Analyzing Web Applications

Labs: Analyzing Output from Web Application Assessment Tools

Quiz: Analyzing Application Assessments

Cloud and Automation (Introduction)

Cloud Models

Service Models

Cloud-based Infrastructure

CASB

Labs: Analyzing Output from Cloud Infrastructure Assessment Tools

Quiz: Cloud and Automation

Service-Oriented Architecture (Introduction)

SOA and Microservices

SOAP

SAML

REST

API

Scripting

Workflow Orchestration

FAAS and Serverless

Quiz: Service-Oriented Architecture

Cloud Infrastructure Assessments (Introduction)

Cloud Threats

Cloud Tools

Cloud Forensics

Quiz: Cloud Infrastructure Assessments

Automation Concepts and Technologies (Introduction)

CI/CD

DevSecOps

IAC

Machine Learning

Data Enrichment

SOAR

Quiz: Automation Concepts and Technologies

Conclusion (What to Do Next…)

BONUS: What's Come Next?

Practice Exam