CS0-004 hands-on labs — CompTIA CySA+

The 169 CS0-004 labs

1. Additional Scanning Options1 h
2. Advanced Techniques for Malware Recovery1 h
3. Analysis and Recommendation Report1 h
4. Analyze and Classify Malware1 h
5. Analyze and Update a Company BCP/BIA/DRP/CIRP2 h
6. Analyze SQL Injection Attack1 h
7. Analyze Various Data Sources to Confirm Suspected Infection1 h
8. Applying Filters to TCPDump and Wireshark1 h
9. Assess Cybersecurity Templates and Benchmarks30 minGuided
10. Assessing Vulnerabilities Post Addressal1 h
11. Auditing Service Accounts and Setting Up Automated Log Collection2 h
12. BitCoin Mining Web Application on Corporate Network1 h
13. Block Incoming Traffic on Known Port1 h
14. Can You Capture and Analyze Network Traffic and Logging by Performing Management Tasks?45 minAdvanced
15. Can You Capture and Analyze Network Traffic?1 h 30 minExpert
16. Can You Discover Vulnerabilities Over a Network?45 minAdvanced
17. Can You Establish Secure Communications by Using SSH and Wireshark?45 minAdvanced
18. Can You Evaluate Account Security Threats?45 minAdvanced
19. Can You Examine Network Communications by Using Incident Response Tools?45 minAdvanced
20. Can You Implement a Host-Based Intrusion Detection System?1 hAdvanced
21. Can You Implement Intrusion Detection by Using Wazuh?1 hGuided
22. Can You Improve Network Security with SSH, HTTPS, and IPSec?45 minAdvanced
23. Can You Improve Security by Using Network Scanning, Sniffing, and GPOs?1 hAdvanced
24. Can You Manage Logs with Scripts, Perform File Restoration, and Perform Vulnerability Scans?45 minAdvanced
25. Can You Manage Network, Web, and Remote Access Security?45 minAdvanced
26. Can You Manage Threats by Using Source Code, Logs, and Security Templates?1 h 30 minAdvanced
27. Can You Perform File Restoration, Manage GPOs, and Perform OSINT?1 hExpert
28. Can You Perform Forensic Analysis Tasks to Display Files?45 minAdvanced
29. Can You Perform Network and Vulnerability Scanning?45 minAdvanced
30. Can You Reduce Threats by Using Nmap, SSH, Source Code Analysis, and Security Templates?2 hExpert
31. Can You Use GPOs and Security Templates as Part of IR?1 hAdvanced
32. Can You Use Snort and SSH?1 hExpert
33. Can You Use Snort, IPSec, Wireshark, Nikto, Nmap, and Wapiti to Identify Network Vulnerabilities?1 hExpert
34. Centralized Monitoring1 h
35. Check for Indicators of Other Attack Activity (Debug PE File)2 h
36. CIRP Creation and Disaster2 h
37. Collecting Logs and Verifying Syslog Aggregation2 h
38. Comprehensive Threat Response2 h
39. Conduct Log Analysis and Cross Examination for False Positives1 h
40. Conduct Root Cause Analysis for System Crashes1 h
41. Conduct Supplemental Monitoring1 h
42. Configure and Manage SSH to Establish Secure Connections30 minGuided
43. Configure Secure HTTP Services30 minGuided
44. Configuring VPN Services30 minGuided
45. Core Impact Web Application Penetration Testing1 h
46. Create Custom Snort Rules1 h
47. Creating Recommendations Based on Vulnerability Assessments1 h
48. Creating SIEM Reports with Splunk1 h
49. Cryptography: Steganography2 h
50. Cryptography: Using GPG for Encryption and Key Management1 h
51. Cyber Security Evaluation Tool (CSET)5 h
52. Data Backup to Prep for Recovery1 h
53. Data Recovery with Autopsy1 h
54. Disable User Account on Windows 101 h
55. Display Files by Performing Forensic Analysis Tasks30 minGuided
56. Dynamic Malware Analysis1 h
57. Entering Information into a CMDB1 h
58. Establish Secure Communications Between Systems by Using SSH for Remote Access30 minGuided
59. Evaluate and Customize Security Policy Templates30 minGuided
60. Evaluate Credential Security30 minGuided
61. Evaluate Network Logging30 minGuided
62. Evaluate the Output of Enumeration Tools30 minGuided
63. Event Log Collection with QRadar2 h
64. Event Logs with Autopsy1 h
65. Explore Network Traffic by Using Wireshark30 minGuided
66. Find Network System Vulnerabilities30 minGuided
67. Find Vulnerabilities45 minGuided
68. Firewall Setup and Configuration1 h
69. Gap Analysis of Firewall Rules2 h
70. Harden Network Security30 minGuided
71. Hash Verification1 h
72. Identify Whether High-Risk Systems Were Affected1 h
73. Identifying Malicious Network Connections1 h
74. Identifying System Vulnerabilities with OpenVAS2 h
75. IDS Setup and Configuration1 h
76. Implement a Host-Based Intrusion Detection System45 minGuided
77. Implement Intrusion Detection by Using Wazuh30 minGuided
78. Implement New Security Policies30 minGuided
79. Implement Single System Changes in Firewall1 h
80. Implement Snort to Evaluate Network Communications30 minGuided
81. Implementing Least-Privilege on Windows1 h
82. Installing Patches and Testing Software2 h
83. Internet History1 h
84. Introduction to Squert1 h
85. Linux Users and Groups1 h
86. Log Analysis1 h
87. Log Correlation1 h
88. Log Event Reports1 h
89. Manage Incidents by Using Incident Response Tools30 minGuided
90. Manual Vulnerability Assessment1 h
91. Manually Creating a Baseline with MD5Deep1 h
92. Microsoft Baseline Security Analyzer1 h
93. MITRE - Attack1 h
94. MITRE - Defend1 h
95. Monitoring and Verifying Management Systems1 h
96. Monitoring for False Positives1 h
97. Monitoring Network Traffic1 h
98. Monitoring Network Traffic for Potential IOA/IOC1 h
99. Network Discovery2 h
100. Network Segmentation (FW/DMZ/WAN/LAN)1 h
101. Network Topology Generation2 h
102. Nexpose: Red Team Exploitation1 h
103. Open and Close Ports on Windows 71 h
104. Open Source Password Cracking1 h
105. Overview of Kibana1 h
106. Parse Files Out of Network Traffic1 h
107. Penetration Tester Challenge3 h
108. Perform Application Source Code Verification45 minGuided
109. Perform Backup Options to Allow for Lost File Restoration30 minGuided
110. Perform Email Header Analysis30 minGuided
111. Perform Log Analysis30 minGuided
112. Perform Log Analysis and Task Automation30 minGuided
113. Perform Network Scanning1 h 15 minGuided
114. Perform Network Scanning and Reconnaissance30 minGuided
115. Perform Network Scanning to Find Vulnerabilities30 minGuided
116. Perform Open Source Intelligence (OSINT) Gathering Operations30 minGuided
117. Perform Web Server Vulnerability Scans45 minGuided
118. Performing an Initial Attack Analysis1 h
119. Phishing1 h
120. Preliminary Scanning1 h
121. Preparing Target Media1 h
122. Protect Against Beaconing1 h
123. QRADAR - Auditing Service Accounts and Generating SIEM Reports2 h
124. QRadar - Centralized Monitoring1 h
125. QRADAR - Collecting Logs and Verifying Syslog Aggregation with pfSense2 h
126. QRadar - IDS Setup and Configuration1 h
127. QRadar - Log Correlation & Analysis to Identify Potential IOC1 h
128. QRadar - Log Correlation & Analysis to Identify Potential IOC with Custom Log Types3 h
129. QRADAR - Setting Up SYSLOG Forwarding From a Windows System2 h
130. QRadar - Snort Signatures, IDS Tuning, and Blocking1 h
131. Recover from Illegal Bitcoin Mining Incident1 h
132. Recover from Incident2 h
133. Recover from SQL Injection Attack1 h
134. Recover from Web-Based Flashpack Incident1 h
135. Report Writing for Presentation to Management1 h
136. Respond to and Validate Alerts from Antivirus Software1 h
137. Searching for Indicators of Compromise1 h
138. Setting up Filters and Queries in Kibana1 h
139. Setting Up SYSLOG Forwarding From a Windows System1 h
140. Setting Up Zones in a Firewall1 h
141. SNORT Configuration and Operation Lab1 h
142. Threat Designation1 h
143. Use Greenbone Security Manager to Identify Vulnerabilities30 minGuided
144. Use hping for Enumeration30 minGuided
145. Use Nmap for Enumeration30 minGuided
146. Use Reconnaissance Tools to Perform Network Scanning30 minGuided
147. Use Responder for Enumeration30 minGuided
148. Use Security Monitoring Tools45 minGuided
149. Use SSH for Remote Access30 minGuided
150. Use the Arachni Web Application Scanner30 minGuided
151. Use the Nikto Web Application Scanner30 minGuided
152. Use Web Application Scanners45 minAdvanced
153. Use Wireshark Filters to Explore Captured Network Traffic30 minGuided
154. Using Snort and Wireshark to Analyze Traffic1 h
155. Using the Burp Suite Web Application Scanner30 minGuided
156. Using the OWASP Zed Attack Proxy Web Application Scanner45 minGuided
157. Utilize Network Analysis Tools30 minGuided
158. Validate Indications of Compromise: Analysis of PE File1 h
159. Vulnerability Analysis/Protection3 h
160. Vulnerability Proof of Concept and Remediation1 h
161. Vulnerability Scanner Set-up and Configuration1 h
162. Vulnerability Scanner Set-up and Configuration with OpenVAS1 h
163. Vulnerability Scanning with GVM2 h
164. WebApp Attack PCAP Analysis1 h
165. Whitelist Comparison1 h
166. Windows Event Log Manipulation via Windows Event Viewer1 h
167. Windows System Hardening with Group Policy & Active Directory2 h
168. Windows System Hardening with PowerShell2 h
169. WMI Event Persistence2 h

Roadmaps for CS0-004

• CompTIA CySA+ (CS0-004) — certification roadmap: courses, labs and practice tests in order
• SOC Analyst — career roadmap; follows the CompTIA CySA+ (CS0-004) roadmap
• Threat Hunter — career roadmap; follows the CompTIA CySA+ (CS0-004) roadmap
• Digital Forensics Analyst — career roadmap; follows the CompTIA CySA+ (CS0-004) roadmap
• Threat Intelligence Analyst — career roadmap; follows the CompTIA CySA+ (CS0-004) roadmap