Mimir, Keeper of the Well of Wisdom
Cybersecurity Mastery: Fundamentals to Defense Ops
https://www.udemy.com/course/cybersecurity-mastery-fundamentals-
to-defense-ops/
Year : 2026
Language : English
Level : All Levels
Category : IT & Software
Subcategory : Other IT & Software
Duration : 59h 27m
Lectures : 729
Rating : 1.0/5 (1 reviews)
Students : 777
INSTRUCTOR(S)
HEADLINE
Explore the full security stack from core concepts and
cryptography to SOC, SIEM, cloud, and incident response.
WHAT YOU'LL LEARN
* Understand the core principles of cybersecurity, including
threats, vulnerabilities, risk, attack surfaces, and
security
controls.
* Build a strong foundation in networking, Linux, Windows,
cryptography, identity, and access management.
* Configure and secure systems using firewalls, endpoint
protection, network segmentation, and Zero Trust principles.
* Understand how a modern Security Operations Center (SOC)
operates and how security alerts are investigated and
escalated.
* Work with SIEM concepts, centralized logging, event
correlation, dashboards, and security monitoring workflows.
* Analyze cyber threats using threat intelligence, indicators
of
compromise, and MITRE ATT&CK.
* Identify, prioritize, and remediate security vulnerabilities
using a structured vulnerability management process.
* Understand ethical hacking and penetration testing
methodologies within authorized and controlled environments.
* Perform reconnaissance, OSINT, network scanning,
enumeration,
and vulnerability validation in cybersecurity labs.
* Understand common web application vulnerabilities, including
the OWASP Top 10 and modern API security risks.
* Apply secure software development and DevSecOps practices
throughout the application development lifecycle.
* Protect sensitive information using data security,
encryption,
data loss prevention, masking, and access controls.
* Understand and implement fundamental security practices
across
AWS, Microsoft Azure, and Google Cloud.
* Secure containers, Kubernetes, cloud infrastructure, and
SaaS
environments.
* Respond to cybersecurity incidents using structured incident
response, containment, eradication, and recovery processes.
* Understand the fundamentals of digital forensics and malware
analysis.
* Perform threat hunting and detection engineering using
behavioral indicators and security telemetry.
* Understand how SOAR and security automation can improve SOC
efficiency and incident response.
* Apply cybersecurity concepts to governance, risk,
compliance,
privacy, business continuity, and disaster recovery.
* Understand emerging security challenges involving Generative
AI, LLM security, operational technology, IoT, and quantum
computing.
* Design a comprehensive cybersecurity strategy that connects
people, processes, technology, and business risk.
* Complete a final cybersecurity capstone project and build
practical work that can be added to a professional
portfolio.
REQUIREMENTS
* No previous cybersecurity experience is required. The course
begins with foundational concepts and progressively moves
into
advanced topics.
* Basic familiarity with using a computer and navigating the
internet is helpful.
* A Windows, macOS, or Linux computer is recommended for
completing hands-on activities.
* Learners should be comfortable installing software and
following step-by-step technical instructions.
* Basic knowledge of networking, programming, or IT can be
helpful but is not required.
* Some labs may use virtual machines, so a computer capable of
running virtualization software is recommended.
* An internet connection is recommended for downloading tools,
documentation, and lab resources.
* Learners interested in scripting will benefit from basic
exposure to Python, Bash, or PowerShell, but programming
experience is not required.
* A willingness to experiment, troubleshoot, and practice
cybersecurity concepts in controlled environments is more
important than prior technical knowledge.
* All ethical hacking and penetration testing activities
should
only be performed in authorized lab environments or systems
you have explicit permission to test.
WHO IS THIS COURSE FOR
* Complete beginners who want a structured pathway into
cybersecurity.
* Students and career changers interested in starting a career
in information security.
* Aspiring SOC Analysts who want to learn security monitoring,
SIEM, threat detection, and incident investigation.
* IT professionals who want to expand their knowledge of
cybersecurity and defensive security operations.
* System administrators and network administrators responsible
for securing enterprise infrastructure.
* Software developers who want to understand application
security, secure coding, API security, and DevSecOps.
* Aspiring ethical hackers and penetration testers who want to
understand offensive security methodologies in authorized
environments.
* Cloud engineers and architects interested in AWS, Azure,
Google Cloud, container, and Kubernetes security.
* Security analysts who want to strengthen their skills in
threat intelligence, MITRE ATT&CK, vulnerability management,
and threat hunting.
* Professionals interested in incident response, digital
forensics, malware analysis, and detection engineering.
* Cybersecurity professionals looking to broaden their
knowledge
beyond a single specialization.
* Risk, compliance, governance, and privacy professionals who
want a stronger understanding of technical cybersecurity.
* Technical leaders, architects, consultants, and managers who
need an end-to-end understanding of modern enterprise
security.
* Learners preparing for cybersecurity certifications who want
a
broad foundation before specializing.
* Professionals interested in emerging areas such as AI
security, Generative AI security, IoT security, OT security,
and quantum-safe cybersecurity.
* Anyone who wants to understand the complete cybersecurity
ecosystem?from fundamentals and ethical hacking to cloud
security, SOC operations, incident response, and enterprise
cyber defense.
DESCRIPTION
This course contains the use of artificial intelligence.
Cybersecurity Mastery: Fundamentals to Defense Ops is a
comprehensive 52-week learning program designed to take
students
from essential security concepts to advanced, job-ready
cybersecurity skills. Whether you are a complete beginner, an
IT
professional, a developer, a systems administrator, or someone
preparing for a cybersecurity career, this course provides a
structured roadmap across the modern security landscape. You
will begin with the foundations of cybersecurity, including
the
CIA triad, assets, threats, vulnerabilities, risk, computer
hardware, operating systems, networking, Linux, Windows,
command-line tools, and Python scripting. These core modules
help you understand how systems work before learning how to
protect them. The course then explores cryptography, secure
communications, public key infrastructure, identity and access
management, multifactor authentication, privileged access,
security architecture, defense in depth, and Zero Trust
security. You will learn how organizations secure users,
devices, applications, networks, and sensitive data using
practical security controls and modern architectural
principles.
A major part of the program focuses on Security Operations
Center training, logging, monitoring, SIEM, threat
intelligence,
MITRE ATT&CK, vulnerability management, endpoint security,
email
security, and network defense. You will learn how analysts
investigate alerts, correlate security events, identify
indicators of compromise, understand attacker behavior, and
strengthen detection capabilities. You will also study web
application security, the OWASP Top 10, API security, secure
software development, DevSecOps, CI/CD security, secrets
management, database security, and data loss prevention. These
modules are ideal for learners interested in application
security, software engineering, cloud development, or secure
digital transformation. The ethical hacking portion introduces
authorized penetration testing methodologies, reconnaissance,
OSINT, network scanning, enumeration, exploitation
fundamentals,
password security, privilege escalation, Active Directory
security, and professional reporting. All testing concepts are
taught within legal, ethical, and controlled lab environments.
Modern infrastructure is covered through detailed modules on
cloud security, AWS security, Microsoft Azure security, Google
Cloud security, SaaS security, container security, and
Kubernetes security. You will understand shared
responsibility,
cloud identity, network protection, secure storage, logging,
configuration monitoring, and multicloud risk management. The
final phase covers incident response, digital forensics,
malware
analysis, threat hunting, detection engineering, SOAR,
security
automation, governance, risk, compliance, privacy, business
continuity, disaster recovery, AI security, generative AI
risks,
operational technology, and emerging cyber threats. The
curriculum is organized into daily lessons, making complex
topics easier to follow and helping learners build consistent
momentum throughout the year. Rather than focusing on a single
certification or tool, the program connects technical defense,
offensive testing, cloud platforms, secure development,
operational response, and business risk. This balanced
approach
prepares students to understand both attacker techniques and
enterprise defense strategies. Throughout the course, you will
complete practical exercises, security reviews, investigation
activities, architecture assessments, and a final
cybersecurity
capstone project. By the end, you will be able to evaluate
security risks, design defensive controls, investigate
suspicious activity, support security operations, communicate
findings, and build a professional cybersecurity portfolio.
This
cybersecurity masterclass provides a complete pathway for
aspiring SOC analysts, security engineers, cloud security
professionals, penetration testers, incident responders,
governance specialists, and cybersecurity leaders seeking
practical, end-to-end knowledge of today?s security ecosystem.
COURSE CONTENT
Chapter 1: Week 1: Introduction to Cybersecurity
1. Day 1: What Cybersecurity Is and Why It Matters
2. School of AI Official Certificate
3. What Cybersecurity Is and Why It Matters Resources
4. Day 2: The Confidentiality, Integrity, and Availability
Triad
5. The Confidentiality, Integrity, and Availability Triad
Resources
6. Day 3: Assets, Threats, Vulnerabilities, and Risks
7. Assets, Threats, Vulnerabilities, and Risks Resources
8. Day 4: Common Cyberattacks and Security Breaches
9. Common Cyberattacks and Security Breaches Resources
10. Day 5: Cybersecurity Roles and Career Pathways
11. Cybersecurity Roles and Career Pathways Resources
12. Day 6: Legal, Ethical, and Professional Responsibilities
13. Legal, Ethical, and Professional Responsibilities
Resources
14. Day 7: Mapping the Modern Cybersecurity Landscape
15. Mapping the Modern Cybersecurity Landscape Resources
Chapter 2: Week 2: Computer Systems and Hardware Fundamentals
16. Day 1: How Computers Process and Store Information
17. How Computers Process and Store Information Resources
18. Day 2: CPUs, Memory, Storage, and Input Devices
19. CPUs, Memory, Storage, and Input Devices Resources
20. Day 3: Operating Systems and System Architecture
21. Operating Systems and System Architecture Resources
22. Day 4: Processes, Threads, Services, and Applications
23. Processes, Threads, Services, and Applications Resources
24. Day 5: File Systems and Data Storage Structures
25. File Systems and Data Storage Structures Resources
26. Day 6: BIOS, UEFI, Firmware, and Secure Boot
27. BIOS, UEFI, Firmware, and Secure Boot Resources
28. Day 7: Identifying Security Risks in Computer Systems
29. Identifying Security Risks in Computer Systems Resources
Chapter 3: Week 3: Networking Fundamentals
30. Day 1: How Computer Networks Work
31. How Computer Networks Work Resources
32. Day 2: Understanding the OSI Model
33. Understanding the OSI Model Resources
34. Day 3: Understanding the TCP/IP Model
35. Understanding the TCP/IP Model Resources
36. Day 4: IP Addresses, Subnets, and Network Classes
37. IP Addresses, Subnets, and Network Classes Resources
38. Day 5: MAC Addresses, ARP, and Local Communication
39. MAC Addresses, ARP, and Local Communication Resources
40. Day 6: Routers, Switches, Hubs, and Access Points
41. Routers, Switches, Hubs, and Access Points Resources
42. Day 7: Building and Mapping a Small Network
43. Building and Mapping a Small Network Resources
Chapter 4: Week 4: Network Protocols and Services
44. Day 1: TCP, UDP, and Network Ports
45. TCP, UDP, and Network Ports Resources
46. Day 2: DNS and Domain Name Resolution
47. DNS and Domain Name Resolution Resources
48. Day 3: DHCP and Automatic Network Configuration
49. DHCP and Automatic Network Configuration Resources
50. Day 4: HTTP, HTTPS, and Web Communication
51. HTTP, HTTPS, and Web Communication Resources
52. Day 5: FTP, SSH, SMTP, and Remote Services
53. FTP, SSH, SMTP, and Remote Services Resources
54. Day 6: ICMP, Ping, and Network Diagnostics
55. ICMP, Ping, and Network Diagnostics Resources
56. Day 7: Analyzing Common Network Protocols
57. Analyzing Common Network Protocols Resources
Chapter 5: Week 5: Linux Fundamentals for Cybersecurity
58. Day 1: Introduction to Linux Distributions
59. Introduction to Linux Distributions Resources
60. Day 2: Navigating the Linux File System
61. Navigating the Linux File System Resources
62. Day 3: Managing Files and Directories
63. Managing Files and Directories Resources
64. Day 4: Linux Users, Groups, and Permissions
65. Linux Users, Groups, and Permissions Resources
66. Day 5: Processes, Services, and Package Management
67. Processes, Services, and Package Management Resources
68. Day 6: Linux Networking and System Commands
69. Linux Networking and System Commands Resources
70. Day 7: Hardening a Basic Linux System
71. Hardening a Basic Linux System Resources
Chapter 6: Week 6: Windows Fundamentals for Cybersecurity
72. Day 1: Understanding Windows Architecture
73. Understanding Windows Architecture Resources
74. Day 2: Windows Files, Directories, and Permissions
75. Windows Files, Directories, and Permissions Resources
76. Day 3: Users, Groups, and Local Security Policies
77. Users, Groups, and Local Security Policies Resources
78. Day 4: Windows Services, Processes, and the Registry
79. Windows Services, Processes, and the Registry Resources
80. Day 5: Event Viewer and Windows Logging
81. Event Viewer and Windows Logging Resources
82. Day 6: Windows Defender and Built-In Security Tools
83. Windows Defender and Built-In Security Tools Resources
84. Day 7: Hardening a Windows Workstation
85. Hardening a Windows Workstation Resources
Chapter 7: Week 7: Command-Line and Scripting Fundamentals
86. Day 1: Working with the Linux Command Line
87. Working with the Linux Command Line Resources
88. Day 2: Bash Scripting Fundamentals
89. Bash Scripting Fundamentals Resources
90. Day 3: Windows Command Prompt Fundamentals
91. Windows Command Prompt Fundamentals Resources
92. Day 4: PowerShell Fundamentals
93. PowerShell Fundamentals Resources
94. Day 5: Python Fundamentals for Cybersecurity
95. Python Fundamentals for Cybersecurity Resources
96. Day 6: Automating Repetitive Security Tasks
97. Automating Repetitive Security Tasks Resources
98. Day 7: Building a Basic Security Automation Script
99. Building a Basic Security Automation Script Resources
Chapter 8: Week 8: Cybersecurity Lab Environment
100. Day 1: Planning a Safe Cybersecurity Lab
101. Planning a Safe Cybersecurity Lab Resources
102. Day 2: Virtual Machines and Virtualization Concepts
103. Virtual Machines and Virtualization Concepts Resources
104. Day 3: Installing VirtualBox or VMware
105. Installing VirtualBox or VMware Resources
106. Day 4: Installing Kali Linux
107. Installing Kali Linux Resources
108. Day 5: Configuring Windows and Linux Test Machines
109. Configuring Windows and Linux Test Machines Resources
110. Day 6: Setting Up Intentionally Vulnerable Systems
111. Setting Up Intentionally Vulnerable Systems Resources
112. Day 7: Isolating and Securing the Lab Network
113. Isolating and Securing the Lab Network Resources
Chapter 9: Week 9: Cryptography Fundamentals
114. Day 1: The Purpose of Cryptography
115. The Purpose of Cryptography Resources
116. Day 2: Symmetric Encryption
117. Symmetric Encryption Resources
118. Day 3: Asymmetric Encryption
119. Asymmetric Encryption Resources
120. Day 4: Hashing and Data Integrity
121. Hashing and Data Integrity Resources
122. Day 5: Digital Signatures and Certificates
123. Digital Signatures and Certificates Resources
124. Day 6: Public Key Infrastructure
125. Public Key Infrastructure Resources
126. Day 7: Selecting Cryptographic Controls
127. Selecting Cryptographic Controls Resources
Chapter 10: Week 10: Applied Cryptography and Secure
Communication
128. Day 1: Transport Layer Security and HTTPS
129. Transport Layer Security and HTTPS Resources
130. Day 2: Secure Shell and Encrypted Remote Access
131. Secure Shell and Encrypted Remote Access Resources
132. Day 3: Virtual Private Networks
133. Virtual Private Networks Resources
134. Day 4: Email Encryption and Secure Messaging
135. Email Encryption and Secure Messaging Resources
136. Day 5: Password Hashing and Salting
137. Password Hashing and Salting Resources
138. Day 6: Key Generation, Storage, and Rotation
139. Key Generation, Storage, and Rotation Resources
140. Day 7: Identifying Common Cryptographic Failures
141. Identifying Common Cryptographic Failures Resources
Chapter 11: Week 11: Identity and Access Management
142. Day 1: Identification, Authentication, and
Authorization
143. Identification, Authentication, and Authorization
Resources
144. Day 2: Password-Based Authentication
145. Password-Based Authentication Resources
146. Day 3: Multifactor Authentication
147. Multifactor Authentication Resources
148. Day 4: Role-Based and Attribute-Based Access Control
149. Role-Based and Attribute-Based Access Control Resources
150. Day 5: Single Sign-On and Federation
151. Single Sign-On and Federation Resources
152. Day 6: OAuth, OpenID Connect, and SAML
153. OAuth, OpenID Connect, and SAML Resources
154. Day 7: Designing an Identity and Access Strategy
155. Designing an Identity and Access Strategy Resources
Chapter 12: Week 12: Privileged Access and Account Security
156. Day 1: The Principle of Least Privilege
157. The Principle of Least Privilege Resources
158. Day 2: Privileged Accounts and Administrative Access
159. Privileged Accounts and Administrative Access Resources
160. Day 3: Service Accounts and Machine Identities
161. Service Accounts and Machine Identities Resources
162. Day 4: Privileged Access Management
163. Privileged Access Management Resources
164. Day 5: Account Provisioning and Deprovisioning
165. Account Provisioning and Deprovisioning Resources
166. Day 6: Access Reviews and Identity Governance
167. Access Reviews and Identity Governance Resources
168. Day 7: Investigating Suspicious Account Activity
169. Investigating Suspicious Account Activity Resources
Chapter 13: Week 13: Security Architecture and Design
170. Day 1: Security by Design
171. Security by Design Resources
172. Day 2: Defense in Depth
173. Defense in Depth Resources
174. Day 3: Secure Network Architecture
175. Secure Network Architecture Resources
176. Day 4: Segmentation and Microsegmentation
177. Segmentation and Microsegmentation Resources
178. Day 5: Security Zones and Trust Boundaries
179. Security Zones and Trust Boundaries Resources
180. Day 6: Secure System Design Patterns
181. Secure System Design Patterns Resources
182. Day 7: Reviewing an Enterprise Security Architecture
183. Reviewing an Enterprise Security Architecture Resources
Chapter 14: Week 14: Zero Trust Architecture
184. Day 1: Understanding Zero Trust
185. Understanding Zero Trust Resources
186. Day 2: Verify Explicitly
187. Verify Explicitly Resources
188. Day 3: Use Least-Privilege Access
189. Use Least-Privilege Access Resources
190. Day 4: Assume Breach
191. Assume Breach Resources
192. Day 5: Identity-Centric Security
193. Identity-Centric Security Resources
194. Day 6: Device Posture and Continuous Verification
195. Device Posture and Continuous Verification Resources
196. Day 7: Creating a Zero Trust Adoption Roadmap
197. Creating a Zero Trust Adoption Roadmap Resources
Chapter 15: Week 15: Security Operations Center Fundamentals
198. Day 1: The Purpose of a Security Operations Center
199. The Purpose of a Security Operations Center Resources
200. Day 2: SOC Roles, Responsibilities, and Tiers
201. SOC Roles, Responsibilities, and Tiers Resources
202. Day 3: Security Monitoring and Alert Management
203. Security Monitoring and Alert Management Resources
204. Day 4: Incident Classification and Escalation
205. Incident Classification and Escalation Resources
206. Day 5: SOC Processes and Workflows
207. SOC Processes and Workflows Resources
208. Day 6: Security Metrics and Performance Indicators
209. Security Metrics and Performance Indicators Resources
210. Day 7: Designing a Basic SOC Operating Model
211. Designing a Basic SOC Operating Model Resources
Chapter 16: Week 16: Logging and Security Monitoring
212. Day 1: Why Security Logs Matter
213. Why Security Logs Matter Resources
214. Day 2: Windows and Linux System Logs
215. Windows and Linux System Logs Resources
216. Day 3: Application and Database Logs
217. Application and Database Logs Resources
218. Day 4: Firewall, Proxy, and Network Logs
219. Firewall, Proxy, and Network Logs Resources
220. Day 5: Cloud and Identity Provider Logs
221. Cloud and Identity Provider Logs Resources
222. Day 6: Log Collection, Storage, and Retention
223. Log Collection, Storage, and Retention Resources
224. Day 7: Building a Centralized Logging Strategy
225. Building a Centralized Logging Strategy Resources
Chapter 17: Week 17: Security Information and Event Management
226. Day 1: Introduction to SIEM Platforms
227. Introduction to SIEM Platforms Resources
228. Day 2: Connecting Data Sources to a SIEM
229. Connecting Data Sources to a SIEM Resources
230. Day 3: Parsing, Normalizing, and Enriching Events
231. Parsing, Normalizing, and Enriching Events Resources
232. Day 4: Building Searches and Queries
233. Building Searches and Queries Resources
234. Day 5: Creating Alerts and Correlation Rules
235. Creating Alerts and Correlation Rules Resources
236. Day 6: Building Security Dashboards
237. Building Security Dashboards Resources
238. Day 7: Investigating an Incident with SIEM Data
239. Investigating an Incident with SIEM Data Resources
Chapter 18: Week 18: Threat Intelligence
240. Day 1: What Cyber Threat Intelligence Is
241. What Cyber Threat Intelligence Is Resources
242. Day 2: Strategic, Operational, Tactical, and Technical
Intelligence
243. Strategic, Operational, Tactical, and Technical
Intelligence Resources
244. Day 3: Indicators of Compromise
245. Indicators of Compromise Resources
246. Day 4: Threat Actors, Motivations, and Capabilities
247. Threat Actors, Motivations, and Capabilities Resources
248. Day 5: Threat Intelligence Sources and Feeds
249. Threat Intelligence Sources and Feeds Resources
250. Day 6: The Intelligence Lifecycle
251. The Intelligence Lifecycle Resources
252. Day 7: Producing a Threat Intelligence Brief
253. Producing a Threat Intelligence Brief Resources
Chapter 19: Week 19: MITRE ATT&CK and Adversary Behavior
254. Day 1: Introduction to MITRE ATT&CK
255. Introduction to MITRE ATT&CK Resources
256. Day 2: Understanding Tactics and Techniques
257. Understanding Tactics and Techniques Resources
258. Day 3: Initial Access and Execution
259. Initial Access and Execution Resources
260. Day 4: Persistence and Privilege Escalation
261. Persistence and Privilege Escalation Resources
262. Day 5: Credential Access and Discovery
263. Credential Access and Discovery Resources
264. Day 6: Lateral Movement and Exfiltration
265. Lateral Movement and Exfiltration Resources
266. Day 7: Mapping Security Controls to ATT&CK
267. Mapping Security Controls to ATT&CK Resources
Chapter 20: Week 20: Vulnerability Management
268. Day 1: Understanding Vulnerabilities and Exposures
269. Understanding Vulnerabilities and Exposures Resources
270. Day 2: CVEs, CWEs, and Vulnerability Databases
271. CVEs, CWEs, and Vulnerability Databases Resources
272. Day 3: Vulnerability Discovery and Scanning
273. Vulnerability Discovery and Scanning Resources
274. Day 4: Risk-Based Vulnerability Prioritization
275. Risk-Based Vulnerability Prioritization Resources
276. Day 5: Patch Management and Remediation
277. Patch Management and Remediation Resources
278. Day 6: Vulnerability Exceptions and Risk Acceptance
279. Vulnerability Exceptions and Risk Acceptance Resources
280. Day 7: Designing a Vulnerability Management Program
281. Designing a Vulnerability Management Program Resources
Chapter 21: Week 21: Network Security Controls
282. Day 1: Firewalls and Access Control Lists
283. Firewalls and Access Control Lists Resources
284. Day 2: Intrusion Detection and Prevention Systems
285. Intrusion Detection and Prevention Systems Resources
286. Day 3: Network Access Control
287. Network Access Control Resources
288. Day 4: Proxy Servers and Secure Web Gateways
289. Proxy Servers and Secure Web Gateways Resources
290. Day 5: Network Segmentation and Isolation
291. Network Segmentation and Isolation Resources
292. Day 6: Secure Remote Access
293. Secure Remote Access Resources
294. Day 7: Designing a Layered Network Defense
295. Designing a Layered Network Defense Resources
Chapter 22: Week 22: Endpoint Security
296. Day 1: Endpoint Security Fundamentals
297. Endpoint Security Fundamentals Resources
298. Day 2: Antivirus and Antimalware Technologies
299. Antivirus and Antimalware Technologies Resources
300. Day 3: Endpoint Detection and Response
301. Endpoint Detection and Response Resources
302. Day 4: Host-Based Firewalls and Application Control
303. Host-Based Firewalls and Application Control Resources
304. Day 5: Device Encryption and Data Protection
305. Device Encryption and Data Protection Resources
306. Day 6: Endpoint Hardening and Configuration Baselines
307. Endpoint Hardening and Configuration Baselines
Resources
308. Day 7: Investigating an Endpoint Security Alert
309. Investigating an Endpoint Security Alert Resources
Chapter 23: Week 23: Email and Collaboration Security
310. Day 1: How Email Systems Work
311. How Email Systems Work Resources
312. Day 2: Phishing, Spoofing, and Business Email
Compromise
313. Phishing, Spoofing, and Business Email Compromise
Resources
314. Day 3: Email Authentication with SPF
315. Email Authentication with SPF Resources
316. Day 4: Email Authentication with DKIM and DMARC
317. Email Authentication with DKIM and DMARC Resources
318. Day 5: Malicious Attachments and Links
319. Malicious Attachments and Links Resources
320. Day 6: Collaboration Platform Security
321. Collaboration Platform Security Resources
322. Day 7: Designing an Email Security Program
323. Designing an Email Security Program Resources
Chapter 24: Week 24: Web Technology Fundamentals
324. Day 1: How Websites and Web Applications Work
325. How Websites and Web Applications Work Resources
326. Day 2: Clients, Servers, and Browsers
327. Clients, Servers, and Browsers Resources
328. Day 3: HTTP Requests and Responses
329. HTTP Requests and Responses Resources
330. Day 4: Cookies, Sessions, and Tokens
331. Cookies, Sessions, and Tokens Resources
332. Day 5: Front-End and Back-End Technologies
333. Front-End and Back-End Technologies Resources
334. Day 6: Web Servers, Proxies, and Content Delivery
Networks
335. Web Servers, Proxies, and Content Delivery Networks
Resources
336. Day 7: Mapping a Web Application Architecture
337. Mapping a Web Application Architecture Resources
Chapter 25: Week 25: Web Application Security
338. Day 1: Introduction to the OWASP Top 10
339. Introduction to the OWASP Top 10 Resources
340. Day 2: Broken Access Control
341. Broken Access Control Resources
342. Day 3: Injection Vulnerabilities
343. Injection Vulnerabilities Resources
344. Day 4: Authentication and Session Weaknesses
345. Authentication and Session Weaknesses Resources
346. Day 5: Security Misconfiguration
347. Security Misconfiguration Resources
348. Day 6: Vulnerable and Outdated Components
349. Vulnerable and Outdated Components Resources
350. Day 7: Performing a Safe Web Security Review
351. Performing a Safe Web Security Review Resources
Chapter 26: Week 26: Advanced Web Vulnerabilities
352. Day 1: Cross-Site Scripting
353. Cross-Site Scripting Resources
354. Day 2: Cross-Site Request Forgery
355. Cross-Site Request Forgery Resources
356. Day 3: Server-Side Request Forgery
357. Server-Side Request Forgery Resources
358. Day 4: Path Traversal and File Inclusion
359. Path Traversal and File Inclusion Resources
360. Day 5: Insecure File Uploads
361. Insecure File Uploads Resources
362. Day 6: Business Logic Vulnerabilities
363. Business Logic Vulnerabilities Resources
364. Day 7: Documenting Web Security Findings
365. Documenting Web Security Findings Resources
Chapter 27: Week 27: API Security
366. Day 1: REST, SOAP, and GraphQL APIs
367. REST, SOAP, and GraphQL APIs Resources
368. Day 2: API Authentication and Authorization
369. API Authentication and Authorization Resources
370. Day 3: Broken Object-Level Authorization
371. Broken Object-Level Authorization Resources
372. Day 4: Excessive Data Exposure
373. Excessive Data Exposure Resources
374. Day 5: API Rate Limiting and Resource Consumption
375. API Rate Limiting and Resource Consumption Resources
376. Day 6: API Gateways and Security Controls
377. API Gateways and Security Controls Resources
378. Day 7: Testing and Securing an API
379. Testing and Securing an API Resources
Chapter 28: Week 28: Secure Software Development
380. Day 1: The Secure Software Development Lifecycle
381. The Secure Software Development Lifecycle Resources
382. Day 2: Security Requirements and User Stories
383. Security Requirements and User Stories Resources
384. Day 3: Threat Modeling Applications
385. Threat Modeling Applications Resources
386. Day 4: Secure Coding Standards
387. Secure Coding Standards Resources
388. Day 5: Code Reviews and Peer Reviews
389. Code Reviews and Peer Reviews Resources
390. Day 6: Static and Dynamic Application Testing
391. Static and Dynamic Application Testing Resources
392. Day 7: Building Security into Software Delivery
393. Building Security into Software Delivery Resources
Chapter 29: Week 29: DevSecOps and Application Security
Automation
394. Day 1: Introduction to DevSecOps
395. Introduction to DevSecOps Resources
396. Day 2: Securing Source Code Repositories
397. Securing Source Code Repositories Resources
398. Day 3: Software Composition Analysis
399. Software Composition Analysis Resources
400. Day 4: Secrets Detection and Management
401. Secrets Detection and Management Resources
402. Day 5: Security Testing in CI/CD Pipelines
403. Security Testing in CI/CD Pipelines Resources
404. Day 6: Infrastructure as Code Security
405. Infrastructure as Code Security Resources
406. Day 7: Building a DevSecOps Pipeline
407. Building a DevSecOps Pipeline Resources
Chapter 30: Week 30: Data and Database Security
408. Day 1: Data Classification and Handling
409. Data Classification and Handling Resources
410. Day 2: Data at Rest, in Transit, and in Use
411. Data at Rest, in Transit, and in Use Resources
412. Day 3: Database Authentication and Authorization
413. Database Authentication and Authorization Resources
414. Day 4: Database Activity Monitoring
415. Database Activity Monitoring Resources
416. Day 5: Data Loss Prevention
417. Data Loss Prevention Resources
418. Day 6: Tokenization, Masking, and Anonymization
419. Tokenization, Masking, and Anonymization Resources
420. Day 7: Designing a Data Protection Strategy
421. Designing a Data Protection Strategy Resources
Chapter 31: Week 31: Ethical Hacking Methodology
422. Day 1: Ethical Hacking and Penetration Testing
423. Ethical Hacking and Penetration Testing Resources
424. Day 2: Scope and Rules of Engagement
425. Scope and Rules of Engagement Resources
426. Day 3: The Penetration Testing Lifecycle
427. The Penetration Testing Lifecycle Resources
428. Day 4: Black-Box, Gray-Box, and White-Box Testing
429. Black-Box, Gray-Box, and White-Box Testing Resources
430. Day 5: Legal Authorization and Evidence Handling
431. Legal Authorization and Evidence Handling Resources
432. Day 6: Risk Management During Security Testing
433. Risk Management During Security Testing Resources
434. Day 7: Planning an Authorized Penetration Test
435. Planning an Authorized Penetration Test Resources
Chapter 32: Week 32: Reconnaissance and Open-Source
Intelligence
436. Day 1: Passive and Active Reconnaissance
437. Passive and Active Reconnaissance Resources
438. Day 2: Search Engine Research Techniques
439. Search Engine Research Techniques Resources
440. Day 3: Domain and DNS Information Gathering
441. Domain and DNS Information Gathering Resources
442. Day 4: Public Infrastructure Discovery
443. Public Infrastructure Discovery Resources
444. Day 5: Social Media and Employee Exposure
445. Social Media and Employee Exposure Resources
446. Day 6: Metadata and Public Document Analysis
447. Metadata and Public Document Analysis Resources
448. Day 7: Building an Authorized Target Profile
449. Building an Authorized Target Profile Resources
Chapter 33: Week 33: Network Scanning and Enumeration
450. Day 1: Host Discovery Techniques
451. Host Discovery Techniques Resources
452. Day 2: Port Scanning Fundamentals
453. Port Scanning Fundamentals Resources
454. Day 3: Service and Version Detection
455. Service and Version Detection Resources
456. Day 4: Operating System Fingerprinting
457. Operating System Fingerprinting Resources
458. Day 5: Enumerating Common Network Services
459. Enumerating Common Network Services Resources
460. Day 6: Distinguishing Findings from False Positives
461. Distinguishing Findings from False Positives Resources
462. Day 7: Creating a Network Enumeration Report
463. Creating a Network Enumeration Report Resources
Chapter 34: Week 34: Exploitation Fundamentals
464. Day 1: Understanding Exploits and Payloads
465. Understanding Exploits and Payloads Resources
466. Day 2: Exploit Preconditions and Dependencies
467. Exploit Preconditions and Dependencies Resources
468. Day 3: Safely Validating Vulnerabilities
469. Safely Validating Vulnerabilities Resources
470. Day 4: Introduction to Exploitation Frameworks
471. Introduction to Exploitation Frameworks Resources
472. Day 5: Managing Test Sessions in a Lab
473. Managing Test Sessions in a Lab Resources
474. Day 6: Preventing Damage During Testing
475. Preventing Damage During Testing Resources
476. Day 7: Documenting Exploitability and Impact
477. Documenting Exploitability and Impact Resources
Chapter 35: Week 35: Password and Authentication Security
478. Day 1: Password Storage and Authentication Workflows
479. Password Storage and Authentication Workflows Resources
480. Day 2: Password Policies and Common Weaknesses
481. Password Policies and Common Weaknesses Resources
482. Day 3: Online and Offline Password Attacks
483. Online and Offline Password Attacks Resources
484. Day 4: Credential Stuffing and Password Spraying
485. Credential Stuffing and Password Spraying Resources
486. Day 5: Password Cracking in an Authorized Lab
487. Password Cracking in an Authorized Lab Resources
488. Day 6: Passwordless Authentication
489. Passwordless Authentication Resources
490. Day 7: Strengthening Enterprise Authentication
491. Strengthening Enterprise Authentication Resources
Chapter 36: Week 36: Privilege Escalation and Post-
Exploitation
492. Day 1: Understanding Privilege Escalation
493. Understanding Privilege Escalation Resources
494. Day 2: Linux Privilege Escalation Concepts
495. Linux Privilege Escalation Concepts Resources
496. Day 3: Windows Privilege Escalation Concepts
497. Windows Privilege Escalation Concepts Resources
498. Day 4: Misconfigurations and Excessive Permissions
499. Misconfigurations and Excessive Permissions Resources
500. Day 5: Credential Exposure After Initial Access
501. Credential Exposure After Initial Access Resources
502. Day 6: Evidence Collection and Testing Boundaries
503. Evidence Collection and Testing Boundaries Resources
504. Day 7: Remediating Privilege Escalation Paths
505. Remediating Privilege Escalation Paths Resources
Chapter 37: Week 37: Active Directory Security
506. Day 1: Active Directory Architecture
507. Active Directory Architecture Resources
508. Day 2: Domains, Forests, Users, and Groups
509. Domains, Forests, Users, and Groups Resources
510. Day 3: Kerberos and NTLM Authentication
511. Kerberos and NTLM Authentication Resources
512. Day 4: Group Policy and Administrative Controls
513. Group Policy and Administrative Controls Resources
514. Day 5: Active Directory Misconfigurations
515. Active Directory Misconfigurations Resources
516. Day 6: Detecting Suspicious Domain Activity
517. Detecting Suspicious Domain Activity Resources
518. Day 7: Hardening an Active Directory Environment
519. Hardening an Active Directory Environment Resources
Chapter 38: Week 38: Wireless, Mobile, and IoT Security
520. Day 1: Wireless Networking Fundamentals
521. Wireless Networking Fundamentals Resources
522. Day 2: Wi-Fi Encryption and Authentication
523. Wi-Fi Encryption and Authentication Resources
524. Day 3: Wireless Threats and Misconfigurations
525. Wireless Threats and Misconfigurations Resources
526. Day 4: Mobile Device Security
527. Mobile Device Security Resources
528. Day 5: Mobile Application Security
529. Mobile Application Security Resources
530. Day 6: Internet of Things Security
531. Internet of Things Security Resources
532. Day 7: Securing Connected Devices and Networks
533. Securing Connected Devices and Networks Resources
Chapter 39: Week 39: Cloud Security Fundamentals
534. Day 1: Cloud Computing and Service Models
535. Cloud Computing and Service Models Resources
536. Day 2: The Cloud Shared Responsibility Model
537. The Cloud Shared Responsibility Model Resources
538. Day 3: Cloud Identity and Access Management
539. Cloud Identity and Access Management Resources
540. Day 4: Cloud Network Security
541. Cloud Network Security Resources
542. Day 5: Cloud Storage and Data Protection
543. Cloud Storage and Data Protection Resources
544. Day 6: Cloud Logging and Monitoring
545. Cloud Logging and Monitoring Resources
546. Day 7: Evaluating a Cloud Security Architecture
547. Evaluating a Cloud Security Architecture Resources
Chapter 40: Week 40: AWS Security
548. Day 1: AWS Accounts, Organizations, and IAM
549. AWS Accounts, Organizations, and IAM Resources
550. Day 2: Securing Amazon S3 Storage
551. Securing Amazon S3 Storage Resources
552. Day 3: Amazon VPC Network Security
553. Amazon VPC Network Security Resources
554. Day 4: CloudTrail, CloudWatch, and GuardDuty
555. CloudTrail, CloudWatch, and GuardDuty Resources
556. Day 5: AWS Key Management and Secrets
557. AWS Key Management and Secrets Resources
558. Day 6: AWS Security Hub and Configuration Monitoring
559. AWS Security Hub and Configuration Monitoring Resources
560. Day 7: Hardening an AWS Environment
561. Hardening an AWS Environment Resources
Chapter 41: Week 41: Microsoft Azure Security
562. Day 1: Microsoft Entra ID Fundamentals
563. Microsoft Entra ID Fundamentals Resources
564. Day 2: Azure Role-Based Access Control
565. Azure Role-Based Access Control Resources
566. Day 3: Azure Network Security Groups
567. Azure Network Security Groups Resources
568. Day 4: Microsoft Defender for Cloud
569. Microsoft Defender for Cloud Resources
570. Day 5: Azure Monitor and Microsoft Sentinel
571. Azure Monitor and Microsoft Sentinel Resources
572. Day 6: Azure Key Vault and Data Protection
573. Azure Key Vault and Data Protection Resources
574. Day 7: Hardening an Azure Environment
575. Hardening an Azure Environment Resources
Chapter 42: Week 42: Google Cloud and SaaS Security
576. Day 1: Google Cloud Identity and Access Management
577. Google Cloud Identity and Access Management Resources
578. Day 2: Google Cloud Network Security
579. Google Cloud Network Security Resources
580. Day 3: Cloud Storage and Data Protection
581. Cloud Storage and Data Protection Resources
582. Day 4: Google Cloud Logging and Monitoring
583. Google Cloud Logging and Monitoring Resources
584. Day 5: Securing Software-as-a-Service Applications
585. Securing Software-as-a-Service Applications Resources
586. Day 6: Cloud Access Security Brokers
587. Cloud Access Security Brokers Resources
588. Day 7: Managing Security Across Multiple Clouds
589. Managing Security Across Multiple Clouds Resources
Chapter 43: Week 43: Container and Kubernetes Security
590. Day 1: Containers and Container Architecture
591. Containers and Container Architecture Resources
592. Day 2: Container Images and Registry Security
593. Container Images and Registry Security Resources
594. Day 3: Container Runtime Security
595. Container Runtime Security Resources
596. Day 4: Kubernetes Architecture and Components
597. Kubernetes Architecture and Components Resources
598. Day 5: Kubernetes Identity and Access Controls
599. Kubernetes Identity and Access Controls Resources
600. Day 6: Kubernetes Network and Secrets Security
601. Kubernetes Network and Secrets Security Resources
602. Day 7: Hardening a Containerized Environment
603. Hardening a Containerized Environment Resources
Chapter 44: Week 44: Incident Response
604. Day 1: The Incident Response Lifecycle
605. The Incident Response Lifecycle Resources
606. Day 2: Preparation and Incident Response Planning
607. Preparation and Incident Response Planning Resources
608. Day 3: Detection and Initial Analysis
609. Detection and Initial Analysis Resources
610. Day 4: Containment Strategies
611. Containment Strategies Resources
612. Day 5: Eradication and Recovery
613. Eradication and Recovery Resources
614. Day 6: Post-Incident Reviews
615. Post-Incident Reviews Resources
616. Day 7: Conducting an Incident Response Exercise
617. Conducting an Incident Response Exercise Resources
Chapter 45: Week 45: Digital Forensics
618. Day 1: Digital Forensics Principles
619. Digital Forensics Principles Resources
620. Day 2: Evidence Preservation and Chain of Custody
621. Evidence Preservation and Chain of Custody Resources
622. Day 3: Disk and File System Forensics
623. Disk and File System Forensics Resources
624. Day 4: Memory Forensics
625. Memory Forensics Resources
626. Day 5: Network Forensics
627. Network Forensics Resources
628. Day 6: Timeline and Log Analysis
629. Timeline and Log Analysis Resources
630. Day 7: Preparing a Digital Forensics Report
631. Preparing a Digital Forensics Report Resources
Chapter 46: Week 46: Malware Analysis
632. Day 1: Understanding Malware Categories
633. Understanding Malware Categories Resources
634. Day 2: Malware Delivery and Execution
635. Malware Delivery and Execution Resources
636. Day 3: Safe Malware Analysis Environments
637. Safe Malware Analysis Environments Resources
638. Day 4: Static Malware Analysis
639. Static Malware Analysis Resources
640. Day 5: Dynamic Malware Analysis
641. Dynamic Malware Analysis Resources
642. Day 6: Behavioral Indicators and Detection
643. Behavioral Indicators and Detection Resources
644. Day 7: Producing a Malware Analysis Summary
645. Producing a Malware Analysis Summary Resources
Chapter 47: Week 47: Threat Hunting and Detection Engineering
646. Day 1: Threat Hunting Fundamentals
647. Threat Hunting Fundamentals Resources
648. Day 2: Developing Hunting Hypotheses
649. Developing Hunting Hypotheses Resources
650. Day 3: Hunting with Endpoint and Network Data
651. Hunting with Endpoint and Network Data Resources
652. Day 4: Identifying Behavioral Indicators
653. Identifying Behavioral Indicators Resources
654. Day 5: Writing Detection Rules
655. Writing Detection Rules Resources
656. Day 6: Testing and Tuning Detections
657. Testing and Tuning Detections Resources
658. Day 7: Conducting a Threat Hunting Investigation
659. Conducting a Threat Hunting Investigation Resources
Chapter 48: Week 48: Security Automation and SOAR
660. Day 1: Security Automation Fundamentals
661. Security Automation Fundamentals Resources
662. Day 2: Security Orchestration and Automated Response
663. Security Orchestration and Automated Response Resources
664. Day 3: Designing Security Playbooks
665. Designing Security Playbooks Resources
666. Day 4: Automating Alert Enrichment
667. Automating Alert Enrichment Resources
668. Day 5: Automating Phishing Investigations
669. Automating Phishing Investigations Resources
670. Day 6: Integrating SIEM, EDR, and Threat Intelligence
671. Integrating SIEM, EDR, and Threat Intelligence
Resources
672. Day 7: Building a Security Automation Workflow
673. Building a Security Automation Workflow Resources
Chapter 49: Week 49: Governance, Risk, and Compliance
674. Day 1: Cybersecurity Governance Fundamentals
675. Cybersecurity Governance Fundamentals Resources
676. Day 2: Enterprise Risk Management
677. Enterprise Risk Management Resources
678. Day 3: Security Policies, Standards, and Procedures
679. Security Policies, Standards, and Procedures Resources
680. Day 4: Security Control Frameworks
681. Security Control Frameworks Resources
682. Day 5: Compliance Assessments and Evidence
683. Compliance Assessments and Evidence Resources
684. Day 6: Third-Party and Supply Chain Risk
685. Third-Party and Supply Chain Risk Resources
686. Day 7: Building a Cybersecurity Governance Program
687. Building a Cybersecurity Governance Program Resources
Chapter 50: Week 50: Privacy, Resilience, and Business
Continuity
688. Day 1: Privacy Principles and Personal Data Protection
689. Privacy Principles and Personal Data Protection
Resources
690. Day 2: Privacy by Design
691. Privacy by Design Resources
692. Day 3: Data Retention and Secure Destruction
693. Data Retention and Secure Destruction Resources
694. Day 4: Business Impact Analysis
695. Business Impact Analysis Resources
696. Day 5: Business Continuity Planning
697. Business Continuity Planning Resources
698. Day 6: Disaster Recovery and Backup Security
699. Disaster Recovery and Backup Security Resources
700. Day 7: Conducting a Cyber Resilience Exercise
701. Conducting a Cyber Resilience Exercise Resources
Chapter 51: Week 51: AI, Operational Technology, and Emerging
Security
702. Day 1: Artificial Intelligence in Cybersecurity
703. Artificial Intelligence in Cybersecurity Resources
704. Day 2: Securing Generative AI and Large Language Models
705. Securing Generative AI and Large Language Models
Resources
706. Day 3: Prompt Injection and AI Application Risks
707. Prompt Injection and AI Application Risks Resources
708. Day 4: Adversarial Machine Learning
709. Adversarial Machine Learning Resources
710. Day 5: Operational Technology and Industrial Control
Systems
711. Operational Technology and Industrial Control Systems
Resources
712. Day 6: Quantum Computing and Cryptographic Readiness
713. Quantum Computing and Cryptographic Readiness Resources
714. Day 7: Evaluating Emerging Cybersecurity Threats
715. Evaluating Emerging Cybersecurity Threats Resources
Chapter 52: Week 52: Cybersecurity Capstone and Career
Readiness
716. Day 1: Defining the Capstone Organization and Scope
717. Defining the Capstone Organization and Scope Resources
718. Day 2: Conducting an Asset and Risk Assessment
719. Conducting an Asset and Risk Assessment Resources
720. Day 3: Performing Vulnerability and Security Control
Reviews
721. Performing Vulnerability and Security Control Reviews
Resources
722. Day 4: Investigating a Simulated Security Incident
723. Investigating a Simulated Security Incident Resources
724. Day 5: Designing a Security Improvement Roadmap
725. Designing a Security Improvement Roadmap Resources
726. Day 6: Writing the Executive and Technical Reports
727. Writing the Executive and Technical Reports Resources
728. Day 7: Presenting the Capstone and Building a
Cybersecurity Portfolio
729. Presenting the Capstone and Building a Cybersecurity
Portfolio Resources
DATES
Published : 2026-08-12
Last Updated : 2026-09-18
If you fear the truth, dont come to my well.