Search course topics

1. Guided course · Preview access

   Connect architecture, identity, and logging to security operations

   • CompTIA CySA+ · CS0-004 · V4
   • Objective 1.1 · Security Operations

   Concepts: Trust boundary · Endpoint telemetry · Network flow record · Segmentation verification

   Open lesson →Course details
2. Guided course · Preview access

   Investigate indicators of malicious activity across an environment

   • CompTIA CySA+ · CS0-004 · V4
   • Objective 1.2 · Security Operations

   Concepts: Password spraying · Credential stuffing · Brute-force authentication attack · Impossible-travel indicator

   Open lesson →Course details
3. Guided course · Preview access

   Use analysis tools to evaluate suspicious evidence

   • CompTIA CySA+ · CS0-004 · V4
   • Objective 1.3 · Security Operations

   Concepts: SIEM correlation · Clock skew · Event normalization · Correlation key

   Open lesson →Course details
4. Guided course · Preview access

   Develop evidence-based threat intelligence and hunting hypotheses

   • CompTIA CySA+ · CS0-004 · V4
   • Objective 1.4 · Security Operations

   Concepts: Threat indicator · Intelligence confidence · STIX · Indicator expiration

   Open lesson →Course details
5. Guided course · Preview access

   Improve operational workflows and bounded automation

   • CompTIA CySA+ · CS0-004 · V4
   • Objective 1.5 · Security Operations

   Concepts: Detection tuning · False positive · False negative · Behavioral baseline

   Open lesson →Course details
6. Guided course · Preview access

   Evaluate AI use, risks, and governance in security operations

   • CompTIA CySA+ · CS0-004 · V4
   • Objective 1.6 · Security Operations

   Concepts: AI grounding · AI hallucination · AI evaluation set · Human review of AI output

   Open lesson →Course details
7. Guided course · Preview access

   Select and scope an appropriate vulnerability scan

   • CompTIA CySA+ · CS0-004 · V4
   • Objective 2.1 · Vulnerability Management

   Concepts: Credentialed vulnerability scan · Uncredentialed vulnerability scan · Scan scope · Scan rate limit

   Open lesson →Course details
8. Guided course · Preview access

   Interpret and validate vulnerability assessment results

   • CompTIA CySA+ · CS0-004 · V4
   • Objective 2.2 · Vulnerability Management

   Concepts: Service banner · Security backport · Scan authentication failure · Scanner false positive

   Open lesson →Course details
9. Guided course · Preview access

   Prioritize, mitigate, and verify vulnerability remediation

   • CompTIA CySA+ · CS0-004 · V4
   • Objective 2.3 · Vulnerability Management

   Concepts: Known Exploited Vulnerabilities catalog · Asset criticality · Exposure context · Compensating control

   Open lesson →Course details
10. Guided course · Preview access

    Relate controls and risk decisions to vulnerability management

    • CompTIA CySA+ · CS0-004 · V4
    • Objective 2.4 · Vulnerability Management

    Concepts: Vulnerability-management cycle · Assessment coverage denominator · Remediation service-level target · Vulnerability exception

    Open lesson →Course details
11. Guided course · Preview access

    Apply attack frameworks to observed adversary behavior

    • CompTIA CySA+ · CS0-004 · V4
    • Objective 3.1 · Incident Response and Management

    Concepts: ATT&CK tactic · ATT&CK technique · Adversary procedure · ATT&CK detection strategy

    Open lesson →Course details
12. Guided course · Preview access

    Plan and coordinate the incident response process

    • CompTIA CySA+ · CS0-004 · V4
    • Objective 3.2 · Incident Response and Management

    Concepts: Incident triage · Incident declaration · Incident severity · Incident communication plan

    Open lesson →Course details

Topics and concept names from the seven current certification courses. IT basics and resource-only routes are available separately.