• Explain the Importance of Security Controls and Security Intelligence
• Utilize Threat Data and Intelligence
• Analyze Security Monitoring Data
• Collect and Query Security Monitoring Data
• Utilize Digital Forensics and Indicator Analysis Techniques
• Apply Incident Response Procedures
• Apply Risk Mitigation and Security Frameworks
• Perform Vulnerability Management
• Apply Security Solutions for Infrastructure Management
• Understand Data Privacy and Protection
• Apply Security Solutions for Software Assurance
• Apply Security Solutions for Cloud and Automation

• IT Security Analyst
• Security Operations Center (SOC) Analyst
• Vulnerability Analyst
• Cybersecurity Specialist
• Threat Intelligence Analyst
• Security Engineer
• Individuals preparing for the CompTIA CySA+ - Cybersecurity Analyst+ (CS0-003) certification exam

Lessons:

• Understanding Vulnerability Response, Handling, and Management
• Exploring Threat Intelligence and Threat Hunting Concepts
• Explaining Important System and Network Architecture Concepts
• Understanding Process Improvement in Security Operations
• Implementing Vulnerability Scanning Methods
• Performing Vulnerability Analysis
• Communicating Vulnerability Information
• Explaining Incident Response Activities
• Demonstrating Incident Response Communication
• Applying Tools to Identify Malicious Activity
• Analyzing Potentially Malicious Activity
• Understanding Application Vulnerability Assessment
• Exploring Scripting Tools and Analysis Concepts
• Understanding Application Security and Attack Mitigation Best Practices
• Mapping Course Content to CompTIA CySA+ (CS0-003)

Hands-on Labs:

• Exploring the Lab Environment
• Configuring Controls
• Reviewing IoC and Threat Intelligence Sources
• Performing Threat Hunting
• Configuring Centralized Logging
• Performing System Hardening
• Assess Time Synch Errors
• Configuring Automation
• Performing Asset Discovery
• Performing Vulnerability Scanning
• Performing Passive Scanning
• Establishing Context Awareness
• Analyzing Vulnerability Reports
• Detecting Legacy Systems
• Performing Post-Incident Forensic Analysis
• Performing IoC Detection and Analysis
• Performing Playbook Incident Response
• Collecting Forensic Evidence
• Performing Root Cause Analysis
• Using Network Sniffers
• Researching DNS and IP Reputation
• Using File Analysis Techniques
• Analyzing Potentially Malicious Files
• Using Nontraditional Vulnerability Scanning Tools
• Performing Web Vulnerability Scanning
• Exploiting Weak Cryptography
• Performing and Detecting Directory Traversal and Command Injection
• Performing and Detecting Privilege Escalation
• Performing and Detecting XSS
• Performing and Detecting LFI/RFI
• Performing and Detecting SQLi
• Performing and Detecting CSRF
• Detecting and Exploiting Security Misconfiguration