Delivery: Online
Estimated Length: 20 seat hours
Price: $380
Add to My Account Create New Account
Cybersecurity is no longer just about preventing attacks. Organizations must also detect suspicious activity, determine what is happening, and respond before a threat causes serious damage. The CompTIA Cybersecurity Analyst (CySA+) course builds practical skills to protect systems, networks, applications, and data against evolving cybersecurity threats.
CySA+ focuses on the knowledge and skills cybersecurity analysts and other defensive security professionals need. The course explores security operations, vulnerability management, threat detection and analysis, incident response, and reporting and communication. Students examine how analysts use security tools, logs, and other system and network data, threat intelligence, and established processes to identify vulnerabilities, investigate suspicious activity, prioritize risks, respond to incidents, and recommend security improvements.
These analytical and operational skills support work in a Security Operations Center (SOC) or other cybersecurity team, where analysts use evidence and professional judgment to assess threats and help protect critical systems and information. Though not required, a background in or understanding of CompTIA A+, Network+, and Security+ may be helpful..
Completion Time:
The estimated completion time for this course is 20 hours. The maximum allotted time is four months from enrollment.
Benefits:
- use this course to help prepare for CompTIA CySA+ certification exam
- receive an industry-recognized NCTI certificate of graduation
Outline:
Chapter 1: Security Operations: System Fundamentals
Logging, basic terms and concepts, and file formats
Chapter 2: Security Operations: Infrastructure Types
Critical infrastructure and types of systems
Chapter 3: Security Operations: Network Architecture, Access & Data
IAM and data protection
Chapter 4: Security Operations: AI & Automation
AI governance, AI risk, AI use, and automation: integration and scripting, and response standardization
Chapters 5 and 6: Attack Methodology Frameworks
Attack frameworks, IoA: net, IAM, hosts, cloud and applications, and email and social engineering
Chapter 7: Threat Intelligence
Threat actors, TTPs, intel sources, intel metrics, and cyber threat intelligence
Chapter 8: Security Operations Tools: Detection & Investigation
SIEM and tools: packet analysis, file & malware analysis, and data analysis & investigation
Chapter 9: Security Operations Tools: Vulnerability Assessment
Tools: assessment tools, network scanning, web app scanning, vulnerability scanning, attack simulations, and cloud & virtualized assessments
Chapter 10: Vulnerability Scanning Methods
Vulnerability scanning types, vulnerability scanning considerations, governance frameworks, and vulnerability scanning response
Chapters 11 and 12: Vulnerability Assessment & Application Security
Vulnerability scoring, vulnerability management, and application security
Chapters 13 and 14: Vulnerability Response
Controls, risk, managing third-party risk, remediation difficulties, and metrics
Chapters 15 and 16: Evidence, Data Protection & Incident Response
Evidence, incident response, incident response management, and incident reporting