• Entry to mid-level IT professionals aiming for cybersecurity roles
• Security Operations Center (SOC) analysts
• Threat hunters and incident responders
• IT professionals seeking to prepare for the CompTIA CySA+ certification
• Anyone interested in advancing their skills in cyber defense and threat detection

• Basic knowledge of networking and cybersecurity concepts
• Experience with Windows and Linux operating systems
• Familiarity with IT fundamentals (e.g., CompTIA A+, Network+) recommended but not mandatory
• Some understanding of security tools and protocols helpful

• Threat intelligence gathering and analysis
• Vulnerability management and response
• Security architecture design and implementation
• Network and host-based security monitoring
• Incident detection, response, and recovery
• Use of SIEM and SOAR tools for automation and event correlation
• Hands-on experience with industry tools like Nmap, Wireshark, Metasploit, and Splunk
• Cybersecurity best practices, frameworks, and compliance requirements
  

• Vulnerability Response & Management

- Risk management and attack surface analysis
- Patch management and host protections
- Security controls and configuration management

• Threat Intelligence & Hunting

- OSINT and adversary tactics
- Threat actor identification
- Indicators of compromise (IoCs) analysis

• Security Architecture & Tools

- Network design and hardening

- Identity & Access Management (IAM)

- Data Loss Prevention (DLP), Public Key Infrastructure (PKI)

• Vulnerability Assessment
  - Scanning and enumeration techniques

- Vulnerability lifecycle management

• Network Security

- Intrusion Detection/Prevention Systems (IDS/IPS)
- Wireless and cloud security
- Denial-of-Service (DoS) attack mitigation

• Host-Based Attacks & Defenses

- Malware analysis
- Endpoint security and privilege escalation
- Secure coding basics and social engineering

• Security Operations & Automation
  - SIEM/SOAR operations
  - Endpoint Detection and Response (EDR)

- Anomaly detection and workflow automation

• Incident Response & Recovery
  - Incident lifecycle management
  - Digital forensics and evidence handling
  - Disaster recovery and business continuity planning