Complete Guide to Cybersecurity: A Practical Approach

14h 21mBeginner2024-10-16

Authors

Pearson

Omar Santos

Course details

Looking to jumpstart your journey as a cybersecurity professional? This course was designed for you. Join instructor and cybersecurity expert Omar Santos as he takes you on a deep dive into the fundamentals of cybersecurity with practical demos and real-world examples that allow you to test out your new skills as you go. There’s never been a better time to pursue a career in cybersecurity, so why not get started today? A great fit for anyone looking to learn more about industry prospects, this course equips you with the core concepts and technical skills required to start working toward becoming a cybersecurity professional.

Skills covered

Security TestingIncident ResponseCybersecurityOne-Off

Concepts

0. Introduction

01 - Practical cybersecurity fundamentals - Introduction

Lesson 1 - Security Principles

02 - Module 1 - Cybersecurity fundamentals introduction
03 - Learning objectives
04 - Understanding the security concepts of information assurance
05 - Understanding the risk management process
06 - Understanding security controls
07 - Understanding governance processes
08 - Building your cybersecurity lab

Lesson 2 - Business Continuity (BC), Disaster Recovery (DR), and Incident Response Concepts

09 - Learning objectives
10 - Understanding business continuity (BC)
11 - Understanding disaster recovery (DR)
12 - Understanding incident response

Lesson 3 - Access Control Concepts

13 - Learning objectives
14 - Understanding physical access controls
15 - Exploring the principle of least privilege
16 - Understanding the concept of segregation of duties
17 - Introducing discretionary access control (DAC)
18 - Understanding mandatory access control (MAC)
19 - Understanding role-based access control (RBAC)

Lesson 4 - Network Security

20 - Learning objectives
21 - Understanding computer networking
22 - Understanding network threats and attacks
23 - Understanding network security infrastructure
24 - Introducing network segmentation
25 - Introducing cloud security

Lesson 5 - Security Operations

26 - Learning objectives
27 - Understanding data security
28 - Understanding hashing
29 - Understanding system hardening
30 - Understanding best practice security policies
31 - Understanding security awareness training

Lesson 6 - Software Defined Networking and Infrastructure as Code

32 - Learning objectives
33 - Software defined networking security
34 - Understanding the threats against SDN solutions
35 - Introducing network programmability
36 - Introducing SD-WAN and modern architectures
37 - Surveying the OWASP Top 10

Lesson 7 - Cryptography

38 - Learning objectives
39 - Introducing cryptography and cryptanalysis
40 - Understanding encryption protocols
41 - Describing hashing algorithms
42 - Introducing public key infrastructure (PKI)
43 - Introducing certificate authorities (CAs) and certificate enrollment
44 - Surveying SSL and TLS implementations
45 - Surveying IPsec implementations and modern VPN implementations

Lesson 8 - AAA, Identity Management, Network Visibility, and Segmentation

46 - Learning objectives
47 - Introducing AAA and identity management
48 - Implementing zero trust and multifactor authentication
49 - Understanding identity management in the cloud
50 - Surveying single-sign on (SSO) implementations

Lesson 9 - Incident Response Fundamentals

51 - Module 2 - Incident response, digital forensics, and threat hunting introduction
52 - Learning objectives
53 - Exploring how to get started in incident response
54 - Understanding the incident response process
55 - Defining playbooks and run book automation (RBA)
56 - Understanding cyber threat intelligence (CTI)
57 - Understanding data normalization
58 - Deconstructing universal data formats and 5-tuple correlation
59 - Understanding security monitoring fundamentals
60 - Surveying security monitoring tools

Lesson 10 - Threat Hunting Fundamentals

61 - Learning objectives
62 - Introducing the threat hunting process
63 - MITRE s adversarial tactics, techniques, and common knowledge (ATT&CK )
64 - Understanding automated adversarial emulation

Lesson 11 - Digital Forensics

65 - Learning objectives
66 - Introducing digital forensics
67 - Introducing reverse engineering
68 - Understanding evidence preservation and chain of custody
69 - Collecting evidence from endpoints and servers
70 - Collecting evidence from mobile and IoT devices
71 - Exploring memory analysis with Volatility

Lesson 12 - Introduction to Security Penetration Testing and Bug Hunting

72 - Module 3 - Ethical hacking, penetration testing, and bug hunting introduction
73 - Learning objectives
74 - How to start a career in ethical hacking
75 - Understanding the difference between traditional pen testing, bug bounties, and red team assessments
76 - Exploring bug bounty programs
77 - Understanding the ethical hacking and bug hunting methodology
78 - Planning and scoping a penetration testing assessment

Lesson 13 - Passive Reconnaissance and OSINT

79 - Learning objectives
80 - Understanding information gathering and vulnerability identification
81 - Introducing open source intelligence (OSINT) techniques
82 - Performing DNS-based passive recon
83 - Identifying cloud vs. self-hosted assets
84 - Introducing Shodan, Maltego, AMass, Recon-NG, and other recon tools
85 - Surveying password dumps, file metadata, and public source-code repositories
86 - Introduction to Google hacking and search engine reconnaissance

Lesson 14 - Active Reconnaissance, Enumeration, and Scanning

87 - Learning objectives
88 - Introduction to host and service enumeration
89 - Mastering Nmap
90 - Performing website and web application reconnaissance
91 - Discovering cloud assets
92 - Crafting packets with Scapy to perform reconnaissance

Lesson 15 - Exploiting Systems and Applications

93 - Learning objectives
94 - Performing on-path attacks
95 - Exploring the OWASP Top 10 risks in web applications
96 - Exploiting cross-site scripting (XSS) and cross-site request forgery (CSRF) vulnerabilities
97 - Understanding server-side request forgery (SSRF) vulnerabilities
98 - Hacking databases
99 - Exploiting wireless vulnerabilities
100 - Exploiting buffer overflows and creating payloads

Lesson 16 - Post Exploitation Techniques and Reporting

101 - Learning objectives
102 - Avoiding detection and evading security tools
103 - Introduction to lateral movement and exfiltration
104 - Exploring command and control (C2) techniques
105 - Understanding living-off-the-land and fileless malware
106 - Best practices when creating pen testing and bug bounty reports
107 - Understanding post-engagement cleanup

Lesson 17 - Cloud Security Concepts

108 - Module 4 - Cloud, DevOps, and IoT security introduction
109 - Learning objectives
110 - Introducing the different cloud deployment and service models
111 - Surveying patch management in the cloud
112 - Performing security assessments in cloud environments
113 - Exploring cloud logging and monitoring methodologies

Lesson 18 - DevSecOps

114 - Learning objectives
115 - Introducing DevSecOps
116 - Securing code, applications, and building DevSecOps pipelines

Lesson 19 - IoT Security

117 - Learning objectives
118 - Introducing IoT concepts
119 - Surveying IoT hacking methodologies and IoT hacking tools
120 - Introducing OT, ICS, and SCADA concepts and attacks

Lesson 20 - Introduction to AI Security

121 - Module 5 - AI security, ethics, and privacy - Balancing innovation with protection introduction
122 - Learning objectives
123 - Surveying the AI landscape and use cases
124 - Exploring LLMs, ChatGPT, Co-pilot and more
125 - Understanding the importance of AI security
126 - Exploring the OWASP Top 10 for LLMs

Lesson 21 - A Deep Dive into the Different Types of AI Threats

127 - Learning objectives
128 - Exploring data poisoning attacks
129 - Understanding model inversion attacks
130 - Discussing membership inference attacks
131 - Explaining the model theft attack
132 - Introducing MITRE s ATLAS

Lesson 22 - Principles of Secure AI Development

133 - Learning objectives
134 - Exploring the secure AI development lifecycle
135 - Understanding privacy-preserving AI techniques
136 - Understanding robustness and resilience in AI models
137 - Surveying AI security best practices
138 - Exploring AI security tools and frameworks
139 - Understanding the legal landscape and potential new regulations
140 - Investigating ethical implications of artificial intelligence

Summary

141 - Practical cybersecurity fundamentals - Summary