CySA+: Hands-on Approach & Practice Tests All-in-One Course

Set up a Windows 11 enterprise VM in bridged mode with 4–8 GB RAM and 100 GB disk, enable EFI, join a domain, verify internet access, and take clean-state snapshot.

Demonstrates the triple A framework: authentication, authorization, and accounting, through hands-on lab activities with Linux logins, directory permissions, and audit logs, plus a practical MFA setup.

Demonstrates practical encryption lab techniques by hashing files to verify integrity, encrypting with OpenSSL AES-256-CBC, and generating and deploying self-signed PKI certificates for data at rest and in transit.

Detect command and control beacons using Rita, an open source network analytics tool, by converting a pcap to Zeek logs and examining beacon scores for C2 activity.

Explore social engineering attacks and obfuscated links, including phishing and tailgating, and learn defenses such as awareness training, multi-factor authentication, and detection via baselining with behavior analytics.

Identify threat actors and map their tactics, techniques, and procedures to defend networks, exploring APTs, hacktivists, organized crime, nation state actors, insiders, script kiddies, and supply chain risks.

Explore how threat intelligence sharing strengthens incident response, vulnerability management, risk management, security engineering, and monitoring through shared indicators of compromise from Isacs, Cisa, and Traffic Light Protocol standards.

Integrate security tools through APIs, webhooks, and plugins to create a unified, automated workflow that speeds detections and reduces analyst workload.

Install Openvas in a docker container on Ubuntu, mounting data and configuring health checks. Access the web GUI via port 9443 to support vulnerability management.

discover all network hosts with openvas lab, create a new target for an IP range, run a scan, review the hosts report, and compare automated results with nmap.

This lab demonstrates the difference between static and continuous scanning by running a one-time credentialed Windows scan and then converting it into a weekly scheduled scan.

Run a vulnerability scan with Nessus on a critical hvac control system, mitigate identified flaws, and configure a Splunk dashboard to detect and monitor suspicious activity for Steel Mountain facility.

Explore Nessus Essentials in a docker-based tools lab, register for a free activation code, run scans against your network, compare results with OpenVAS, and review vulnerability findings.

Learn to validate alerts in Splunk by classifying events as true/false positives and negatives, and quantify detection with precision, recall, and F1 for data-driven incident response.

Explore exploitability and weaponization, mapping how vulnerabilities become attacks through attack vectors and proof-of-concepts, and how attackers package, deliver, and operate exploits in the wild.

Analyze vulnerability scenarios to assess exploitability and weaponization risk, then recommend detection, containment, and remediation actions through a walkthrough lab with real-world scenarios.