Course
Cybersecurity Fundamentals for Practitioners
Think like an operator: threat-model your systems, walk the attack lifecycle, harden and instrument hosts, and run your first incident — with real commands and real pitfalls.
Threat Models and the Attack Lifecycle
Learn to think about who attacks you, what they want, and the observable trail every intrusion leaves behind.
- 01Threat Modeling Before You Ship AnythingA lightweight, repeatable way to enumerate who attacks you, what they want, and where your design breaks first.30mOpen
- 02The Attack Lifecycle, Mapped to What You Can SeeWalk every stage of a real intrusion and learn the log lines, processes, and artifacts it leaves on your systems.35mOpen
- 03Mapping Your Attack Surface Like a Recon OperatorRun the same enumeration an attacker would — subdomains, open ports, forgotten services — before they do it for you.35mMembers
Hardening and Detection Engineering
Shrink the attack surface on hosts and identity, then build detections that fire on attacker behavior — not noise.
- 01Hardening a Linux Host Without Locking Yourself OutSSH, firewall, updates, and audit — the changes that matter, the order to apply them, and how to test each before it bites.40mMembers
- 02Detection Engineering: Turning Log Noise into SignalPick the logs that matter, write rules that catch attacker behavior, and tune out false positives before they train you to ignore alerts.40mMembers
- 03Identity Is the Perimeter: Getting Auth RightSSH keys, phishing-resistant MFA, sane password policy, and least privilege for humans and services — the layer attackers actually attack.35mMembers
Incident Response and Blue vs Red
Handle the first hour of a breach, gather live forensics, and use adversary emulation to prove your defenses work.
- 01Incident Response: What to Do in the First HourTriage, contain, preserve — a concrete sequence for the moment an alert is real, plus the mistakes that make breaches worse.40mPremium
- 02Live Forensics on a Compromised HostCollect volatile evidence in the right order, find what the attacker changed, and build a timeline that holds up.40mPremium
- 03Thinking Red to Defend Blue: Adversary Emulation BasicsSafely replay attacker techniques in your environment to prove — or disprove — that your detections actually fire.35mPremium