SOC100-2

SUMMARY

This module provides an overview of the cybersecurity sector, exploring its evolution, current landscape, and future directions. Topics include the CIA Triad, Defense in Depth strategies, Identity and Access Management (IAM), Zero Trust principles, and cyber hygiene practices.

You'll also examine various threat actors, including nation-state adversaries, and understand the threat vectors they exploit.

LECTURES

• Contexts of Security
• Security Controls
• CIA Triad and Defense in Depth
• IAM Zero Trust and Cyber Hygiene
• Cyber Threats and Nation State Threat Actors
• Threat Actors Continued
• Threat Vectors
• Module Quiz

SUMMARY

Delve into the principles of GRC, focusing on how organizations manage cyber risks and ensure compliance with legal and regulatory standards. The module covers asset, configuration, patch, and vulnerability management, along with practical labs on cyber risk assessments and system hardening using CIS Benchmarks.

A culminating challenge involves completing a comprehensive risk assessment for a hypothetical company.

LECTURES

• Cyber Risk
• Governance
• Risk
• Compliance
• Asset Management
• Configuration Management
• Patch Management
• Vulnerability Management
• Vulnerability Scanning
• Vulnerability Triage

LABS

• Lab: Cyber Risk & Maturity Assessments
• Lab: Windows Server Hardening with CIS Benchmarks
• Challenge: Complete Goodcorp's Risk Assessment

SUMMARY

Explore the fundamentals of cryptography, including hashing, encoding, and encryption techniques. Through hands-on labs, you'll practice implementing ciphers, symmetric and asymmetric encryption, and digital signatures.

The module emphasizes practical applications, such as using tools like CyberChef, and includes a challenge to encrypt a message for the community.

LECTURES

• What is Cryptography?
• Hashing, Encoding, Symmetric & Asymmetric Encryption

LABS

• Lab: Hashing and Encoding
• Lab: Ciphers and Symmetric Encryption
• Lab: Asymmetric Encryption
• Lab: Digital Signatures & Certificates Resume
• Lab: Cooking with the Cyberchef
• Challenge: Encrypt a Message to the Community!

SUMMARY

Develop the skills necessary for effective technical communication in cybersecurity. The module covers the essentials of technical writing, structuring reports, and conveying complex technical findings to diverse audiences.

Labs provide practice in drafting reports, with challenges focused on documenting technical findings and malware analyses comprehensively.

LECTURES

• Technical Writing 101
• Reporting in Cybersecurity
• Communicating Technical Findings
• Common Mistakes Made

LABS

• Lab: Your First Report
• Lab: Your Second Report
• Challenge: Writing up a Technical Finding
• Challenge: Malware Analysis Report

SUMMARY

Gain expertise in analyzing Windows processes, threads, and memory management. Labs focus on using tools like Process Explorer, understanding multi-threaded applications, and navigating the Windows Registry.

You'll study malware persistence mechanisms and conduct process and network analyses to identify and mitigate malicious activities. Challenges involve investigating compromised hosts to apply your skills in real-world scenarios.

LECTURES

• Processes, Threads, and Virtual Memory
• Birth and Lifecycle of a Process
• EXEs, DLLs, and Threads
• Registry Structure
• Windows Architectures and Key Components
• Operating System Security Measures

LABS

• Lab: Task Manager vs Process Explorer
• Lab: Multi-threaded Applications
• Lab: Windows Registry
• Lab: Windows Security
• Lab: Malware Persistence Analysis: The Autorunner
• Lab: Malware Process Analysis: Process Me If You Can
• Lab: Malware Network Analysis: Nettin But Time
• Challenge: Compromised Host 1
• Challenge: Compromised Host 2
• Challenge: Compromised Host 3

SUMMARY

This module addresses the intricacies of email systems and the security challenges they present. You'll learn about SMTP protocols, email header analysis, and various types of phishing attacks. Labs provide experience in inspecting URLs, understanding authentication headers like SPF, DKIM, and DMARC, and conducting comprehensive email analyses.

Challenges test your ability to analyze and respond to email security incidents.

LECTURES

• Phishing by the Numbers
• SMTP Transfer Systems in Action
• Crash Course in SMTP
• SMTP & Email Security
• Email Header Analysis
• Types of Phishing
• Phishing Containment and Response

LABS

• Lab: Headers: From, Reply-To, and Originating-From
• Lab: URL Inspection
• Lab: Authentication Headers: SPF, DKIM, & DMARC
• Lab: Email Analysis in Practice
• Lab: PowerShell Refresher
• Lab: Becoming the Master Chef
• Challenge: Email Security Analysis 1
• Challenge: Email Security Analysis 2
• Challenge: Email Security Analysis 3

SUMMARY

Learn to collect and analyze logs from Windows and Linux systems using SIEM tools. The module introduces the ELK stack and teaches you to craft queries for effective data analysis.

Labs include investigating security events, utilizing intrusion detection tools like YARA, and conducting comprehensive log analyses to detect malicious activities.

LECTURES

• Logs and Sources
• SIEM and SOAR

LABS

• Lab: Windows Event Logs
• Lab: Linux Logs
• Lab: Intro to ELK and Queries
• Lab: ELK Investigation
• Lab: Intrusion Detection with YARA
• Challenge: Malicious Log Activity 1
• Challenge: Malicious Log Activity 2
• Challenge: All Seeing Yara

SUMMARY

Understand the role of CTI in cybersecurity operations. Topics cover the CTI lifecycle, types and sources of intelligence, and frameworks like the MITRE ATT&CK.

Through labs, you'll analyze industry breach reports, assess threat actor tactics, techniques, and procedures (TTPs), and apply models such as the Cyber Kill Chain and the Diamond Model to real-world scenarios.

LECTURES

• Cyber Threat Intelligence (CTI)
• CTI Types and Sources
• CTI Lifecycle and MITRE ATT&CK

LABS

• Lab: Industry Breach Reports with Verizon DBIR
• Lab: Threat Actor Report Analysis
• Lab: Threat Actor TTPs with MITRE ATT&CK
• Lab: Cyber Kill Chain, Pyramid of Pain, Diamond Model
• Challenge: Intelligence on Indicators of Compromise

SUMMARY

Build upon your existing home lab by integrating malware analysis capabilities. You'll learn about neutered and defanged malware, set up log shipping, and configure the ELK stack for monitoring. Labs involve testing lab functionality and simulating attacks to practice detection and analysis. Mandatory challenges require you to hunt for malware and produce detailed analysis reports, reinforcing your practical skills.

LECTURES

• Upgrading a Home Lab
• What is a Malware Lab?
• Neutered and Defanged Malware

LABS

• Lab: Log Shipping
• Lab: Setting up ELK
• Lab: Testing Functionality
• Lab: Attacking Your Home Lab
• Mandatory Challenge: Hunt!
• Mandatory Challenge: Post a Malware Analysis Report