Cyber Security Career - Knowledge by Joas Antonio
Cyber Security Career - Knowledge
1. BLUE TEAM
1.1. Computer Fundamentals Knowledge
1.1.1. Hardware, Software, Network Computer, Programming Logic, Science Computer Concepts and Others
1.2. Information Security Fundamentals
1.2.1. C.I.A, Best Practice, Concepts, Threats, Attack Types and Others
1.3. Standard Information Security
1.3.1. ISO 27000 Family
1.4. Vulnerability Management Concept
1.4.1. Vulnerability Analysis, SAST, DAST, IAST and Solutions
1.5. Analyst and Assesment Risk Management
1.6. Threat/Vulnerability Concept
1.7. Attack Vectors Concept
1.7.1. Web, Clouding, Infraestructure, Operation System, Mobile, IoT and Others
1.7.2. Business Continuity and Disaster Recovery
1.8. Network Computer Security Concept
1.9. Incident Response
1.10. Log Analysis and Management Concept
1.11. Frameworks and Methodologies of Information Security
1.11.1. NIST, C2M2, LGPD/GDPR, HIPAA, PCI-DSS
1.12. Cryptography Controls
1.12.1. Best Gartner Cryptography
1.13. Patch Management
1.14. Hardening and CIS Controls
1.15. Computer Forensic
1.16. Information System Administrator
1.16.1. Terraform, Ansible, Clouding Computer, Containers
1.17. Cyber Security Solutions Knowledge
1.17.1. 20 CIS Control Solutions
1.18. Infraestructure Management
1.19. End-points and Host Securitys Management
1.20. Network Security Solutions Administration
1.21. Security Policy Development
1.21.1. Nist Cyber Security Framework
1.22. Threat Intelligence and Threat Hunter
1.23. Clouding Computer Concept and Security Techniques
2. RED TEAM
2.1. Computer Fundamentals Knowledge
2.1.1. Hardware, Software, Network Computer, Programming Logic, Science Computer Concepts and Others
2.2. Information Security Fundamentals
2.3. Vulnerability Analysis and Management Concept
2.4. Analyst and Assessment Risk Management
2.5. Threat/Vulnerability Concept
2.6. Attack Vectors Concept
2.6.1. Web, Infraestructure, Mobile, Cloud, IoT and Others
2.7. Ethical Hacking Concept
2.8. Penetration Testing Techniques
2.8.1. Enumeration, Reconnaissance, Exploitation, Post Exploitation, Exploit Dev, Automation PenTest
2.9. Application Security Concept
2.10. Tatics, Techniques and Procedures (Mitre Att&ck)
2.11. Frameworks and Methodologies of PenTest
2.11.1. PTES, NIST, OSSTMM, OWASP, Cyber Kill Chain, Mitre and Others
2.12. Skills in Languagens Programming
2.12.1. Low Level, High level, Scripting and Others
2.12.1.1. JavaScript, PHP, Python, Ruby, GO, C, C# and Others
2.13. Skills in Report Writing
2.14. Operation System Administrator
2.15. Skills in Social Engineering Techniques
2.15.1. Linux and Windows, Automation, Administration and others
2.16. Knowledge in Red Team Operations
2.17. Research Vulnerability and Techniques of Penetration Testing
2.18. Cyber Security Solutions Knowledge
2.19. Computer Hacking Forensic
2.20. Threat Intelligence and Threat Hunter Concept
2.21. Frameworks and Methodologies of Information Security
2.21.1. NIST, C2M2, LGPD/GDPR, HIPAA, PCI-DSS
2.22. Advanced Penetration Testing and Red Team Skills/Concept
3. Laboratory
3.1. Hack the Box
3.2. Proving Grounds and Vulnhub
3.3. Try Hack Me
3.4. OWASP Labs Project
3.5. Rapid 7 Labs Project
3.6. Open Source Solutions
3.6.1. IDS, IPS, Firewall, WAF, SIEM, Log Manager and others