CompTIA CySA+ (CS0-004)

Learn

• CourseCovered in TOTAL: CompTIA CySA+ Cybersecurity Analyst (CS0-004)↗ (opens in a new tab)opens on courses.stationx.net — Chapters 5–7: attack frameworks, indicators of attack and threat intelligence 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  19 sections · 72 lectures

  1. Training Overview 2
  2. Introduction 3
  3. Chapter 1 - Security Operations System Fundamentals 4
  4. Chapter 2 - Security Operations Infrastructure Types 3
  5. Chapter 3 - Security Operations Network Architecture, Access & Data 3
  6. Chapter 4 - Security Operations AI & Automation 7
  7. Chapter 5 - Attack Methodology Frameworks 2
  8. Chapter 6 - Indicators of Attack (IoA) 6
  9. Chapter 7 - Threat Intelligence 6
  10. Chapter 8 - Security Operations Tools Detection & Investigation 5
  11. Chapter 9 - Security Operations Tools Vulnerability Assessment 7
  12. Chapter 10 - Vulnerability Scanning Methods 5
  13. Chapter 11 - Vulnerability Assessment & Prioritization 3
  14. Chapter 12 - Application Security & Attack Mitigation 2
  15. Chapter 13 - Vulnerability Response Controls & Risk Management 3
  16. Chapter 14 - Vulnerability Response Remediation & Reporting 4
  17. Chapter 15 - Evidence & Data Protection 2
  18. Chapter 16 - Incident Response 4
  19. Audio Version of the Course 1

Practise

• LabsThreat Intelligence & Defense — 18 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analyze Various Data Sources to Confirm Suspected Infection⏱Duration: 1 h
  • Assessing Vulnerabilities Post Addressal⏱Duration: 1 h
  • BitCoin Mining Web Application on Corporate Network⏱Duration: 1 h
  • Check for Indicators of Other Attack Activity (Debug PE File)⏱Duration: 2 h
  • Cyber Security Evaluation Tool (CSET)⏱Duration: 5 h
  • Entering Information into a CMDB⏱Duration: 1 h
  • Event Logs with Autopsy⏱Duration: 1 h
  • Internet History⏱Duration: 1 h
  • MITRE - Defend⏱Duration: 1 h
  • Nexpose: Red Team Exploitation⏱Duration: 1 h
  • Overview of Kibana⏱Duration: 1 h
  • Performing an Initial Attack Analysis⏱Duration: 1 h
  • Preparing Target Media⏱Duration: 1 h
  • Recover from Illegal Bitcoin Mining Incident⏱Duration: 1 h
  • Recover from Web-Based Flashpack Incident⏱Duration: 1 h
  • Report Writing for Presentation to Management⏱Duration: 1 h
  • Respond to and Validate Alerts from Antivirus Software⏱Duration: 1 h
  • WMI Event Persistence⏱Duration: 2 h
• LabsNetwork Intrusion Detection — 8 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Comprehensive Threat Response⏱Duration: 2 h
  • Conduct Supplemental Monitoring⏱Duration: 1 h
  • Create Custom Snort Rules⏱Duration: 1 h
  • MITRE - Attack⏱Duration: 1 h
  • Monitoring for False Positives⏱Duration: 1 h
  • Monitoring Network Traffic⏱Duration: 1 h
  • Monitoring Network Traffic for Potential IOA/IOC⏱Duration: 1 h
  • SNORT Configuration and Operation Lab⏱Duration: 1 h
• Infra LabsSecurity Threat Intelligence — 11 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
  • Perform Network ScanningLevel: Guided⏱Duration: 1 h 15 min
  • Use SSH for Remote AccessLevel: Guided⏱Duration: 30 min
  • Use Wireshark Filters to Explore Captured Network TrafficLevel: Guided⏱Duration: 30 min
  • Perform Application Source Code VerificationLevel: Guided⏱Duration: 45 min
  • Perform Log AnalysisLevel: Guided⏱Duration: 30 min
  • Find VulnerabilitiesLevel: Guided⏱Duration: 45 min
  • Assess Cybersecurity Templates and BenchmarksLevel: Guided⏱Duration: 30 min
  • Can You Discover Vulnerabilities Over a Network?Level: Advanced⏱Duration: 45 min
  • Can You Establish Secure Communications by Using SSH and Wireshark?Level: Advanced⏱Duration: 45 min
  • Can You Manage Threats by Using Source Code, Logs, and Security Templates?Level: Advanced⏱Duration: 1 h 30 min
  • Can You Reduce Threats by Using Nmap, SSH, Source Code Analysis, and Security Templates?Level: Expert⏱Duration: 2 h

Learn

• CourseCovered in TOTAL: CompTIA CySA+ Cybersecurity Analyst (CS0-004)↗ (opens in a new tab)opens on courses.stationx.net — Chapters 1–4 and 8: security operations fundamentals, automation, and detection and investigation tools 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  19 sections · 72 lectures

  1. Training Overview 2
  2. Introduction 3
  3. Chapter 1 - Security Operations System Fundamentals 4
  4. Chapter 2 - Security Operations Infrastructure Types 3
  5. Chapter 3 - Security Operations Network Architecture, Access & Data 3
  6. Chapter 4 - Security Operations AI & Automation 7
  7. Chapter 5 - Attack Methodology Frameworks 2
  8. Chapter 6 - Indicators of Attack (IoA) 6
  9. Chapter 7 - Threat Intelligence 6
  10. Chapter 8 - Security Operations Tools Detection & Investigation 5
  11. Chapter 9 - Security Operations Tools Vulnerability Assessment 7
  12. Chapter 10 - Vulnerability Scanning Methods 5
  13. Chapter 11 - Vulnerability Assessment & Prioritization 3
  14. Chapter 12 - Application Security & Attack Mitigation 2
  15. Chapter 13 - Vulnerability Response Controls & Risk Management 3
  16. Chapter 14 - Vulnerability Response Remediation & Reporting 4
  17. Chapter 15 - Evidence & Data Protection 2
  18. Chapter 16 - Incident Response 4
  19. Audio Version of the Course 1

Practise

• Infra LabsCySA+: Cyber Security Analyst — 11 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
  • Utilize Network Analysis ToolsLevel: Guided⏱Duration: 30 min
  • Use Security Monitoring ToolsLevel: Guided⏱Duration: 45 min
  • Perform Email Header AnalysisLevel: Guided⏱Duration: 30 min
  • Evaluate Network LoggingLevel: Guided⏱Duration: 30 min
  • Display Files by Performing Forensic Analysis TasksLevel: Guided⏱Duration: 30 min
  • Evaluate the Output of Enumeration ToolsLevel: Guided⏱Duration: 30 min
  • Evaluate Credential SecurityLevel: Guided⏱Duration: 30 min
  • Can You Capture and Analyze Network Traffic and Logging by Performing Management Tasks?Level: Advanced⏱Duration: 45 min
  • Can You Evaluate Account Security Threats?Level: Advanced⏱Duration: 45 min
  • Can You Perform Forensic Analysis Tasks to Display Files?Level: Advanced⏱Duration: 45 min
  • Can You Capture and Analyze Network Traffic?Level: Expert⏱Duration: 1 h 30 min
• LabsQRadar SIEM — 9 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Event Log Collection with QRadar⏱Duration: 2 h
  • QRADAR - Auditing Service Accounts and Generating SIEM Reports⏱Duration: 2 h
  • QRadar - Centralized Monitoring⏱Duration: 1 h
  • QRADAR - Collecting Logs and Verifying Syslog Aggregation with pfSense⏱Duration: 2 h
  • QRadar - IDS Setup and Configuration⏱Duration: 1 h
  • QRadar - Log Correlation & Analysis to Identify Potential IOC⏱Duration: 1 h
  • QRadar - Log Correlation & Analysis to Identify Potential IOC with Custom Log Types⏱Duration: 3 h
  • QRADAR - Setting Up SYSLOG Forwarding From a Windows System⏱Duration: 2 h
  • QRadar - Snort Signatures, IDS Tuning, and Blocking⏱Duration: 1 h

Learn

• CourseCovered in TOTAL: CompTIA CySA+ Cybersecurity Analyst (CS0-004)↗ (opens in a new tab)opens on courses.stationx.net — Chapters 9–13: assessment tools, scanning, prioritisation and response controls 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  19 sections · 72 lectures

  1. Training Overview 2
  2. Introduction 3
  3. Chapter 1 - Security Operations System Fundamentals 4
  4. Chapter 2 - Security Operations Infrastructure Types 3
  5. Chapter 3 - Security Operations Network Architecture, Access & Data 3
  6. Chapter 4 - Security Operations AI & Automation 7
  7. Chapter 5 - Attack Methodology Frameworks 2
  8. Chapter 6 - Indicators of Attack (IoA) 6
  9. Chapter 7 - Threat Intelligence 6
  10. Chapter 8 - Security Operations Tools Detection & Investigation 5
  11. Chapter 9 - Security Operations Tools Vulnerability Assessment 7
  12. Chapter 10 - Vulnerability Scanning Methods 5
  13. Chapter 11 - Vulnerability Assessment & Prioritization 3
  14. Chapter 12 - Application Security & Attack Mitigation 2
  15. Chapter 13 - Vulnerability Response Controls & Risk Management 3
  16. Chapter 14 - Vulnerability Response Remediation & Reporting 4
  17. Chapter 15 - Evidence & Data Protection 2
  18. Chapter 16 - Incident Response 4
  19. Audio Version of the Course 1

Practise

• Infra LabsIntroduction to Vulnerability Analyst — 10 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
  • Perform Network Scanning and ReconnaissanceLevel: Guided⏱Duration: 30 min
  • Implement Intrusion Detection by Using WazuhLevel: Guided⏱Duration: 30 min
  • Configure and Manage SSH to Establish Secure ConnectionsLevel: Guided⏱Duration: 30 min
  • Manage Incidents by Using Incident Response ToolsLevel: Guided⏱Duration: 30 min
  • Configure Secure HTTP ServicesLevel: Guided⏱Duration: 30 min
  • Configuring VPN ServicesLevel: Guided⏱Duration: 30 min
  • Can You Improve Security by Using Network Scanning, Sniffing, and GPOs?Level: Advanced⏱Duration: 1 h
  • Can You Implement Intrusion Detection by Using Wazuh?Level: Guided⏱Duration: 1 h
  • Can You Improve Network Security with SSH, HTTPS, and IPSec?Level: Advanced⏱Duration: 45 min
  • Can You Use Snort and SSH?Level: Expert⏱Duration: 1 h
• LabsVulnerability Assessment Analyst — 31 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analyze and Update a Company BCP/BIA/DRP/CIRP⏱Duration: 2 h
  • Analyze SQL Injection Attack⏱Duration: 1 h
  • Auditing Service Accounts and Setting Up Automated Log Collection⏱Duration: 2 h
  • Centralized Monitoring⏱Duration: 1 h
  • Comprehensive Threat Response⏱Duration: 2 h
  • Conduct Log Analysis and Cross Examination for False Positives⏱Duration: 1 h
  • Core Impact Web Application Penetration Testing⏱Duration: 1 h
  • Creating Recommendations Based on Vulnerability Assessments⏱Duration: 1 h
  • Data Backup to Prep for Recovery⏱Duration: 1 h
  • Firewall Setup and Configuration⏱Duration: 1 h
  • Gap Analysis of Firewall Rules⏱Duration: 2 h
  • Identify Whether High-Risk Systems Were Affected⏱Duration: 1 h
  • Identifying System Vulnerabilities with OpenVAS⏱Duration: 2 h
  • Implementing Least-Privilege on Windows⏱Duration: 1 h
  • Manual Vulnerability Assessment⏱Duration: 1 h
  • Manually Creating a Baseline with MD5Deep⏱Duration: 1 h
  • Monitoring and Verifying Management Systems⏱Duration: 1 h
  • Network Discovery⏱Duration: 2 h
  • Network Segmentation (FW/DMZ/WAN/LAN)⏱Duration: 1 h
  • Open Source Password Cracking⏱Duration: 1 h
  • Penetration Tester Challenge⏱Duration: 3 h
  • Performing an Initial Attack Analysis⏱Duration: 1 h
  • Phishing⏱Duration: 1 h
  • Preliminary Scanning⏱Duration: 1 h
  • SNORT Configuration and Operation Lab⏱Duration: 1 h
  • Threat Designation⏱Duration: 1 h
  • Using Snort and Wireshark to Analyze Traffic⏱Duration: 1 h
  • Vulnerability Proof of Concept and Remediation⏱Duration: 1 h
  • Vulnerability Scanning with GVM⏱Duration: 2 h
  • Windows System Hardening with Group Policy & Active Directory⏱Duration: 2 h
  • Windows System Hardening with PowerShell⏱Duration: 2 h
• Infra LabsCySA+: Identify Network Vulnerabilities — 11 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
  • Use Reconnaissance Tools to Perform Network ScanningLevel: Guided⏱Duration: 30 min
  • Perform Network Scanning to Find VulnerabilitiesLevel: Guided⏱Duration: 30 min
  • Implement a Host-Based Intrusion Detection SystemLevel: Guided⏱Duration: 45 min
  • Implement Snort to Evaluate Network CommunicationsLevel: Guided⏱Duration: 30 min
  • Harden Network SecurityLevel: Guided⏱Duration: 30 min
  • Perform Web Server Vulnerability ScansLevel: Guided⏱Duration: 45 min
  • Establish Secure Communications Between Systems by Using SSH for Remote AccessLevel: Guided⏱Duration: 30 min
  • Can You Perform Network and Vulnerability Scanning?Level: Advanced⏱Duration: 45 min
  • Can You Implement a Host-Based Intrusion Detection System?Level: Advanced⏱Duration: 1 h
  • Can You Manage Network, Web, and Remote Access Security?Level: Advanced⏱Duration: 45 min
  • Can You Use Snort, IPSec, Wireshark, Nikto, Nmap, and Wapiti to Identify Network Vulnerabilities?Level: Expert⏱Duration: 1 h
• Infra LabsCySA+: Vulnerability Assessment Tools — 9 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
  • Using the OWASP Zed Attack Proxy Web Application ScannerLevel: Guided⏱Duration: 45 min
  • Using the Burp Suite Web Application ScannerLevel: Guided⏱Duration: 30 min
  • Use the Nikto Web Application ScannerLevel: Guided⏱Duration: 30 min
  • Use the Arachni Web Application ScannerLevel: Guided⏱Duration: 30 min
  • Use Web Application ScannersLevel: Advanced⏱Duration: 45 min
  • Use Greenbone Security Manager to Identify VulnerabilitiesLevel: Guided⏱Duration: 30 min
  • Use Nmap for EnumerationLevel: Guided⏱Duration: 30 min
  • Use hping for EnumerationLevel: Guided⏱Duration: 30 min
  • Use Responder for EnumerationLevel: Guided⏱Duration: 30 min

Learn

• CourseCompTIA CySA+ Labs↗ (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  8 sections · 93 lectures

  1. Module 1 - Threat and Vulnerability Management 28
  2. Module 2 - Incident Response 10
  3. Module 3 - Software and Systems Security 11
  4. Module 4 - OSINT (Open-Source Intelligence) 8
  5. Module 5 - Digital Forensics 20
  6. Module 6 - Malware Analysis 11
  7. Module 7 - Red Team Adversary Emulation 2
  8. Module 8 - Bonus Labs 3

Practise

• LabsCyber Defense Incident Responder — 34 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analyze and Update a Company BCP/BIA/DRP/CIRP⏱Duration: 2 h
  • Analyze SQL Injection Attack⏱Duration: 1 h
  • Applying Filters to TCPDump and Wireshark⏱Duration: 1 h
  • Block Incoming Traffic on Known Port⏱Duration: 1 h
  • Comprehensive Threat Response⏱Duration: 2 h
  • Cryptography: Steganography⏱Duration: 2 h
  • Cryptography: Using GPG for Encryption and Key Management⏱Duration: 1 h
  • Data Backup to Prep for Recovery⏱Duration: 1 h
  • Data Recovery with Autopsy⏱Duration: 1 h
  • Dynamic Malware Analysis⏱Duration: 1 h
  • Firewall Setup and Configuration⏱Duration: 1 h
  • Hash Verification⏱Duration: 1 h
  • Identify Whether High-Risk Systems Were Affected⏱Duration: 1 h
  • Implement Single System Changes in Firewall⏱Duration: 1 h
  • Installing Patches and Testing Software⏱Duration: 2 h
  • Introduction to Squert⏱Duration: 1 h
  • Log Event Reports⏱Duration: 1 h
  • Microsoft Baseline Security Analyzer⏱Duration: 1 h
  • Monitoring Network Traffic⏱Duration: 1 h
  • Network Discovery⏱Duration: 2 h
  • Network Segmentation (FW/DMZ/WAN/LAN)⏱Duration: 1 h
  • Network Topology Generation⏱Duration: 2 h
  • Overview of Kibana⏱Duration: 1 h
  • Recover from Incident⏱Duration: 2 h
  • Report Writing for Presentation to Management⏱Duration: 1 h
  • Setting up Filters and Queries in Kibana⏱Duration: 1 h
  • Setting Up Zones in a Firewall⏱Duration: 1 h
  • Threat Designation⏱Duration: 1 h
  • Validate Indications of Compromise: Analysis of PE File⏱Duration: 1 h
  • Vulnerability Analysis/Protection⏱Duration: 3 h
  • WebApp Attack PCAP Analysis⏱Duration: 1 h
  • Windows Event Log Manipulation via Windows Event Viewer⏱Duration: 1 h
  • Windows System Hardening with Group Policy & Active Directory⏱Duration: 2 h
  • Windows System Hardening with PowerShell⏱Duration: 2 h
• Infra LabsCyber Security Incident Response — 11 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
  • Perform Log Analysis and Task AutomationLevel: Guided⏱Duration: 30 min
  • Perform Backup Options to Allow for Lost File RestorationLevel: Guided⏱Duration: 30 min
  • Implement New Security PoliciesLevel: Guided⏱Duration: 30 min
  • Explore Network Traffic by Using WiresharkLevel: Guided⏱Duration: 30 min
  • Find Network System VulnerabilitiesLevel: Guided⏱Duration: 30 min
  • Evaluate and Customize Security Policy TemplatesLevel: Guided⏱Duration: 30 min
  • Perform Open Source Intelligence (OSINT) Gathering OperationsLevel: Guided⏱Duration: 30 min
  • Can You Manage Logs with Scripts, Perform File Restoration, and Perform Vulnerability Scans?Level: Advanced⏱Duration: 45 min
  • Can You Use GPOs and Security Templates as Part of IR?Level: Advanced⏱Duration: 1 h
  • Can You Examine Network Communications by Using Incident Response Tools?Level: Advanced⏱Duration: 45 min
  • Can You Perform File Restoration, Manage GPOs, and Perform OSINT?Level: Expert⏱Duration: 1 h

Learn

• CourseCovered in TOTAL: CompTIA CySA+ Cybersecurity Analyst (CS0-004)↗ (opens in a new tab)opens on courses.stationx.net — Chapter 14 - Vulnerability Response Remediation & Reporting 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  19 sections · 72 lectures

  1. Training Overview 2
  2. Introduction 3
  3. Chapter 1 - Security Operations System Fundamentals 4
  4. Chapter 2 - Security Operations Infrastructure Types 3
  5. Chapter 3 - Security Operations Network Architecture, Access & Data 3
  6. Chapter 4 - Security Operations AI & Automation 7
  7. Chapter 5 - Attack Methodology Frameworks 2
  8. Chapter 6 - Indicators of Attack (IoA) 6
  9. Chapter 7 - Threat Intelligence 6
  10. Chapter 8 - Security Operations Tools Detection & Investigation 5
  11. Chapter 9 - Security Operations Tools Vulnerability Assessment 7
  12. Chapter 10 - Vulnerability Scanning Methods 5
  13. Chapter 11 - Vulnerability Assessment & Prioritization 3
  14. Chapter 12 - Application Security & Attack Mitigation 2
  15. Chapter 13 - Vulnerability Response Controls & Risk Management 3
  16. Chapter 14 - Vulnerability Response Remediation & Reporting 4
  17. Chapter 15 - Evidence & Data Protection 2
  18. Chapter 16 - Incident Response 4
  19. Audio Version of the Course 1

Practise

• LabsCyber Defense Analyst Training Series — 25 labs 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
  • Analysis and Recommendation Report⏱Duration: 1 h
  • Creating Recommendations Based on Vulnerability Assessments⏱Duration: 1 h
  • Report Writing for Presentation to Management⏱Duration: 1 h

  Extra practice

  • Additional Scanning Options⏱Duration: 1 h
  • Advanced Techniques for Malware Recovery⏱Duration: 1 h
  • Analyze and Classify Malware⏱Duration: 1 h
  • CIRP Creation and Disaster⏱Duration: 2 h
  • Collecting Logs and Verifying Syslog Aggregation⏱Duration: 2 h
  • Conduct Root Cause Analysis for System Crashes⏱Duration: 1 h
  • Creating SIEM Reports with Splunk⏱Duration: 1 h
  • Disable User Account on Windows 10⏱Duration: 1 h
  • Identifying Malicious Network Connections⏱Duration: 1 h
  • IDS Setup and Configuration⏱Duration: 1 h
  • Linux Users and Groups⏱Duration: 1 h
  • Log Analysis⏱Duration: 1 h
  • Log Correlation⏱Duration: 1 h
  • Open and Close Ports on Windows 7⏱Duration: 1 h
  • Parse Files Out of Network Traffic⏱Duration: 1 h
  • Protect Against Beaconing⏱Duration: 1 h
  • Recover from SQL Injection Attack⏱Duration: 1 h
  • Searching for Indicators of Compromise⏱Duration: 1 h
  • Setting Up SYSLOG Forwarding From a Windows System⏱Duration: 1 h
  • Vulnerability Scanner Set-up and Configuration⏱Duration: 1 h
  • Vulnerability Scanner Set-up and Configuration with OpenVAS⏱Duration: 1 h
  • Whitelist Comparison⏱Duration: 1 h