Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
CompTIA CySA+ (CS0-002)
Rating: 4.6 out of 5(11 ratings)
60 students

CompTIA CySA+ (CS0-002)

Exam Preparatory course
Created byStone River eLearning
Last updated 4/2023
English

What you'll learn

  • Analyze and interpret data to identify cybersecurity threats and vulnerabilities.
  • Implement various tools and techniques to prevent cybersecurity incidents from occurring.
  • Respond to cybersecurity incidents and implement improvements to prevent future incidents.
  • Monitor security operations and conduct threat hunting activities.
  • Ensure compliance with regulations and assess security risks.
  • Understand and apply security frameworks and principles.
  • Develop and implement security policies and procedures.
  • Communicate effectively with stakeholders about cybersecurity issues.

Course content

5 sections • 83 lectures • 25h 6m total length

  • Overview5:20
  • Intelligence Sources15:44

    Learn open source intelligence (osint) to map your threat surface using websites, job listings, and LinkedIn; use harvester and showdown to gather emails, subdomains, and technologies.

  • Indicator Management18:33
  • Confidence Levels8:17

    Explore confidence levels and standardized threat language to improve threat modeling and risk assessment. Learn the admiralty scale, information reliability, and estimative language for clear, interoperable communication.

  • Threat Classification18:54
  • Threat Actors18:16
  • Intelligence Cycle17:01
  • Commodity Malware13:02

    Define commodity malware as off-the-shelf, widely available malicious software used for opportunistic, untargeted attacks, contrasted with advanced, targeted malware used by APT groups.

  • Information Sharing and Analysis Centers18:58
  • Attack Frameworks18:51
  • Threat Research19:17
  • Threat Modeling Methodologies18:01
  • Threat Intelligence Sharing, Supported Functions12:27
  • Vulnerability Identification and Validation20:00

    Identify and validate vulnerabilities by assessing asset criticality, performing active and passive scans, enumerating services and versions, and validating findings to prioritize risk.

  • Vulnerability Remediation and Mitigation21:14
  • Vulnerability Scanning Parameters and Criteria19:37
  • Inhibitors to Remediation18:48
  • Web App Scanners21:25
  • Infrastructure Vulnerability Scanners19:38
  • Software Assessment Tools and Techniques18:16
  • Vulnerability Enumeration17:36
  • Wireless Assessment Tools22:31
  • Cloud Infrastructure Assessment Tools16:58

    Explore open source tools for assessing cloud security and security posture, including ScoutSuite, Prowler, and Pacu, to audit multi-cloud and AWS configurations, report findings, and spot misconfigurations.

  • Mobile Technology Threats18:11
  • Premises and Vehicle Systems Threats17:29

    Learn threats to building automation and vehicle systems, including PLC vulnerabilities, buffer overflows, hardcoded credentials and cryptographic keys, web-based interfaces, and CAN bus risks via OBD-II ports and wireless access.

  • Controller System Threats16:35

    Explore controller systems, including ICS/SCADA, PLCs, MODBUS, HMIs, and DCS, and their security threats. Examine web app risks like injection and DoS, Stuxnet-style attacks, with TLS as a mitigation.

  • IoT and Embedded System Threats18:32

    Explore IoT and embedded systems threats, including embedded operating systems, real-time OS, and FPGA risks. Learn how CVEs, remote access, and supply-chain attacks compromise devices and how to mitigate.

  • CVSS Metrics19:45

    Explore CVSS metrics from base through temporal and environmental metrics, and learn how access vector, complexity, privileges, user interaction, scope, and confidentiality, integrity, availability drive severity for prioritization.

  • Cloud Deployment Model Threats18:17

    Explore threats across cloud deployment models—public, private, hybrid, and community—including multi-tenancy, encryption, and compliance. Learn how identity authentication, authorization, and accounting, redundancy, and defined roles help secure these environments.

  • Cloud Service Model Threats16:37
  • Other Cloud Service Threats21:37
  • Mitigate Specific Attack Types31:35
  • Mitigate Vulnerability Types24:58

    Explore vulnerability types such as improper error handling, insecure direct object references, SQL injection, and race conditions, and learn mitigations through secure coding, authentication controls, and patching.

Requirements

  • While there are no formal prerequisites for the CompTIA Cybersecurity Analyst (CySA+) (CS0-002) certification exam, CompTIA recommends that candidates have at least 3-4 years of experience in information technology or cybersecurity, as well as CompTIA Security+ or equivalent knowledge.

Description

This course is designed for cybersecurity professionals who want to further their knowledge and skills in detecting and preventing cybersecurity threats.

In this course, you will learn how to perform data analysis and interpret the results to identify and respond to cybersecurity threats. You will also learn how to use various tools and techniques to prevent cybersecurity incidents from occurring.

The course covers the following topics:

1. Threat and Vulnerability Management: This topic covers the identification and mitigation of vulnerabilities and threats, including assessing risk and conducting vulnerability scans.

2. Software and Systems Security: This topic covers the security of software and systems, including secure coding practices, software security testing, and secure network protocols.

3. Security Operations and Monitoring: This topic covers security operations and monitoring, including incident response, threat hunting, and security information and event management (SIEM).

4. Incident Response: This topic covers the steps involved in responding to security incidents, including identifying and containing the incident, analyzing and remediating the impact, and implementing improvements to prevent future incidents.

5. Compliance and Assessment: This topic covers compliance and assessment, including regulatory compliance, risk management, and security audits.

Whether you are new to the cybersecurity field or an experienced professional looking to enhance your skills, this course will provide you with the knowledge and skills you need to succeed. So, let's get started!

"This course qualifies for CompTIA continuing education units (CEUs)."

Available CEUs* for this Course Series : 25

By completing this course series, you can earn up to 25 CEUs.

(*CEUs are entirely dependent on the organization you are applying)

Who this course is for:

  • Cybersecurity analysts who want to advance their careers and obtain the CySA+ certification.
  • IT professionals who want to specialize in cybersecurity and develop skills in threat detection and response.
  • Security operations center (SOC) analysts who want to learn advanced techniques for monitoring and responding to security incidents.
  • Security consultants who want to advise clients on cybersecurity risks and implement security solutions.
  • Network and system administrators who want to improve their understanding of cybersecurity threats and implement security measures.

Report abuse