Plaintext

Home
Start Here
Showcase
Office Hours
Instructor & Cohort Guide
Interactive Tour (Prototype)
Interactive Tour (Prototype)
- Foundations — full track
  Foundations — full track
- Random sample (one per track)
  Random sample (one per track)
Foundations
Foundations
- 01 · Security First Principles
  01 · Security First Principles
  - Lab
- 02 · Building a Safe Lab
  02 · Building a Safe Lab
  - Lab
- 03 · Docker & Containers
  03 · Docker & Containers
  - Lab
- 04 · Linux for Security
  04 · Linux for Security
  - Lab
- 05 · Windows for Security
  05 · Windows for Security
  - Lab
- 06 · Networking Fundamentals
  06 · Networking Fundamentals
  - Lab
- 07 · Web & HTTP Fundamentals
  07 · Web & HTTP Fundamentals
  - Lab
- 08 · Data & Encoding
  08 · Data & Encoding
  - Lab
- 09 · Cryptography Basics
  09 · Cryptography Basics
  - Lab
- 10 · Scripting & Automation
  10 · Scripting & Automation
  - Lab
- 11 · Version Control & Working in the Open
  11 · Version Control & Working in the Open
  - Lab
- 12 · Threat Modeling
  12 · Threat Modeling
  - Lab
Offensive Security
Offensive Security
- 01 · Reconnaissance & OSINT
  01 · Reconnaissance & OSINT
  - Lab
- 02 · Scanning & Enumeration
  02 · Scanning & Enumeration
  - Lab
- 03 · Vulnerability Identification
  03 · Vulnerability Identification
  - Lab
- 04 · Exploitation Fundamentals
  04 · Exploitation Fundamentals
  - Lab
- 05 · Memory Corruption Primer
  05 · Memory Corruption Primer
  - Lab
- 06 · Web — Injection
  06 · Web — Injection
  - Lab
- 07 · Web — Auth & Access Control
  07 · Web — Auth & Access Control
  - Lab
- 08 · Web — SSRF, XXE & Deserialization
  08 · Web — SSRF, XXE & Deserialization
  - Lab
- 09 · Password & Credential Attacks
  09 · Password & Credential Attacks
  - Lab
- 10 · Privilege Escalation — Linux
  10 · Privilege Escalation — Linux
  - Lab
- 11 · Privilege Escalation — Windows
  11 · Privilege Escalation — Windows
  - Lab
- 12 · Pivoting & Lateral Movement
  12 · Pivoting & Lateral Movement
  - Lab
- 13 · C2 & Post-Exploitation
  13 · C2 & Post-Exploitation
  - Lab
- 14 · Living-off-the-Land & Evasion
  14 · Living-off-the-Land & Evasion
  - Lab
- 15 · PowerShell Offensive Tradecraft
  15 · PowerShell Offensive Tradecraft
  - Lab
- 16 · Cloud & Container Attack Primer
  16 · Cloud & Container Attack Primer
  - Lab
- 17 · Reporting & Remediation
  17 · Reporting & Remediation
  - Lab
Defensive Operations
Defensive Operations
- 01 · Telemetry & Log Centralisation
  01 · Telemetry & Log Centralisation
  - Lab
- 02 · Windows & Endpoint Telemetry
  02 · Windows & Endpoint Telemetry
  - Lab
- 03 · Linux Telemetry
  03 · Linux Telemetry
  - Lab
- 04 · Network Security Monitoring
  04 · Network Security Monitoring
  - Lab
- 05 · Intrusion Detection
  05 · Intrusion Detection
  - Lab
- 06 · SIEM Fundamentals
  06 · SIEM Fundamentals
  - Lab
- 07 · Log Parsing & Normalisation
  07 · Log Parsing & Normalisation
  - Lab
- 08 · Detection-as-Code
  08 · Detection-as-Code
  - Lab
- 09 · Detection Testing & Tuning
  09 · Detection Testing & Tuning
  - Lab
- 10 · ATT&CK Mapping & Coverage
  10 · ATT&CK Mapping & Coverage
  - Lab
- 11 · Threat Hunting — Endpoint
  11 · Threat Hunting — Endpoint
  - Lab
- 12 · Threat Hunting — Network
  12 · Threat Hunting — Network
  - Lab
- 13 · PowerShell Logging & Hunting
  13 · PowerShell Logging & Hunting
  - Lab
- 14 · Alert Triage & Incident Response
  14 · Alert Triage & Incident Response
  - Lab
- 15 · Threat Intelligence
  15 · Threat Intelligence
  - Lab
- 16 · Response Automation (SOAR)
  16 · Response Automation (SOAR)
  - Lab
- 17 · KEV-Driven Defense
  17 · KEV-Driven Defense
  - Lab
- 18 · Detection & Telemetry Drift
  18 · Detection & Telemetry Drift
  - Lab
- 19 · Reviewing AI-Generated Detections
  19 · Reviewing AI-Generated Detections
  - Lab
Digital Forensics & IR
Digital Forensics & IR
- 01 · Forensic Fundamentals & Evidence Handling
  01 · Forensic Fundamentals & Evidence Handling
  - Lab
- 02 · Acquisition & Imaging
  02 · Acquisition & Imaging
  - Lab
- 03 · File Systems & Carving
  03 · File Systems & Carving
  - Lab
- 04 · Windows Artifacts
  04 · Windows Artifacts
  - Lab
- 05 · Browser & App Artifacts
  05 · Browser & App Artifacts
  - Lab
- 06 · Memory Forensics
  06 · Memory Forensics
  - Lab
- 07 · Timeline Analysis
  07 · Timeline Analysis
  - Lab
- 08 · Triage & Live Response
  08 · Triage & Live Response
  - Lab
- 09 · Network Forensics
  09 · Network Forensics
  - Lab
- 10 · Log & Cloud Forensics
  10 · Log & Cloud Forensics
  - Lab
- 11 · Anti-Forensics & Detecting It
  11 · Anti-Forensics & Detecting It
  - Lab
- 12 · Malware Artifacts in IR
  12 · Malware Artifacts in IR
  - Lab
- 13 · Incident Response Process
  13 · Incident Response Process
  - Lab
- 14 · Reporting & Root-Cause Analysis
  14 · Reporting & Root-Cause Analysis
  - Lab
- 15 · Forensic Eval Harness
  15 · Forensic Eval Harness
  - Lab
- 16 · Reviewing AI Incident Summaries
  16 · Reviewing AI Incident Summaries
  - Lab
Malware Analysis
Malware Analysis
- 01 · Analysis Lab Setup & Safety
  01 · Analysis Lab Setup & Safety
  - Lab
- 02 · File Triage & Identification
  02 · File Triage & Identification
  - Lab
- 03 · Static Analysis — Strings & PE
  03 · Static Analysis — Strings & PE
  - Lab
- 04 · Static Analysis — Capabilities
  04 · Static Analysis — Capabilities
  - Lab
- 05 · Dynamic Analysis — Behavioural
  05 · Dynamic Analysis — Behavioural
  - Lab
- 06 · Dynamic Analysis — Network
  06 · Dynamic Analysis — Network
  - Lab
- 07 · Disassembly Basics
  07 · Disassembly Basics
  - Lab
- 08 · Decompilation & Code Analysis
  08 · Decompilation & Code Analysis
  - Lab
- 09 · Unpacking & Obfuscation
  09 · Unpacking & Obfuscation
  - Lab
- 10 · Anti-Analysis Techniques
  10 · Anti-Analysis Techniques
  - Lab
- 11 · Document & Script Malware
  11 · Document & Script Malware
  - Lab
- 12 · IOC Extraction & ATT&CK Mapping
  12 · IOC Extraction & ATT&CK Mapping
  - Lab
- 13 · Detection Authoring & Reporting
  13 · Detection Authoring & Reporting
  - Lab
Cloud & Container Security
Cloud & Container Security
- 01 · Cloud Fundamentals
  01 · Cloud Fundamentals
  - Lab
- 02 · Cloud Identity & IAM
  02 · Cloud Identity & IAM
  - Lab
- 03 · IAM Attack Paths
  03 · IAM Attack Paths
  - Lab
- 04 · Cloud Network Security
  04 · Cloud Network Security
  - Lab
- 05 · Posture & Misconfiguration Auditing
  05 · Posture & Misconfiguration Auditing
  - Lab
- 06 · Infrastructure-as-Code Security
  06 · Infrastructure-as-Code Security
  - Lab
- 07 · Secrets Management & Detection
  07 · Secrets Management & Detection
  - Lab
- 08 · CI/CD Pipeline Security
  08 · CI/CD Pipeline Security
  - Lab
- 09 · Serverless Security
  09 · Serverless Security
  - Lab
- 10 · Container & Image Security
  10 · Container & Image Security
  - Lab
- 11 · Container Escape & Runtime
  11 · Container Escape & Runtime
  - Lab
- 12 · Kubernetes — RBAC & Network Policy
  12 · Kubernetes — RBAC & Network Policy
  - Lab
- 13 · Kubernetes — Admission & Runtime
  13 · Kubernetes — Admission & Runtime
  - Lab
- 14 · Cloud Attack Techniques
  14 · Cloud Attack Techniques
  - Lab
- 15 · Cloud Logging & Detection
  15 · Cloud Logging & Detection
  - Lab
- 16 · Cloud Incident Response
  16 · Cloud Incident Response
  - Lab
- 17 · Data Protection & KMS
  17 · Data Protection & KMS
  - Lab
Active Directory & Windows
Active Directory & Windows
- 01 · AD & Windows Security Model
  01 · AD & Windows Security Model
  - Lab
- 02 · Enumeration
  02 · Enumeration
  - Lab
- 03 · Kerberos Attacks
  03 · Kerberos Attacks
  - Lab
- 04 · Credential Theft & Replay
  04 · Credential Theft & Replay
  - Lab
- 05 · ACL & Delegation Abuse
  05 · ACL & Delegation Abuse
  - Lab
- 06 · Lateral Movement
  06 · Lateral Movement
  - Lab
- 07 · Persistence in AD
  07 · Persistence in AD
  - Lab
- 08 · Path to Domain Admin
  08 · Path to Domain Admin
  - Lab
- 09 · Detecting AD Attacks
  09 · Detecting AD Attacks
  - Lab
- 10 · Hardening AD as Code
  10 · Hardening AD as Code
  - Lab
- 11 · Defending Identity
  11 · Defending Identity
  - Lab
- 12 · Tiering a Brownfield Domain
  12 · Tiering a Brownfield Domain
  - Lab
- 13 · AD Posture Drift & Steady-State
  13 · AD Posture Drift & Steady-State
  - Lab
Endpoint & Host Hardening
Endpoint & Host Hardening
- 01 · Endpoint Threat Model
  01 · Endpoint Threat Model
  - Lab
- 02 · Windows Hardening to CIS
  02 · Windows Hardening to CIS
  - Lab
- 03 · Linux Hardening to CIS
  03 · Linux Hardening to CIS
  - Lab
- 04 · Exploit Mitigation & Allowlisting
  04 · Exploit Mitigation & Allowlisting
  - Lab
- 05 · Endpoint Telemetry & EDR
  05 · Endpoint Telemetry & EDR
  - Lab
- 06 · Configuration Management
  06 · Configuration Management
  - Lab
- 07 · Compliance Scoring & Auditing
  07 · Compliance Scoring & Auditing
  - Lab
- 08 · Patch & Vulnerability Management
  08 · Patch & Vulnerability Management
  - Lab
- 09 · Local Privilege-Escalation Defense
  09 · Local Privilege-Escalation Defense
  - Lab
- 10 · Detecting Host Compromise
  10 · Detecting Host Compromise
  - Lab
- 11 · Host & Boot Integrity
  11 · Host & Boot Integrity
  - Lab
- 12 · Configuration & Posture Drift
  12 · Configuration & Posture Drift
  - Lab
- 13 · Rolling a Baseline Across a Fleet
  13 · Rolling a Baseline Across a Fleet
  - Lab
Cryptography, PKI & Secrets
Cryptography, PKI & Secrets
- 01 · Primitives in Practice
  01 · Primitives in Practice
  - Lab
- 02 · Symmetric & AEAD
  02 · Symmetric & AEAD
  - Lab
- 03 · Asymmetric & Key Exchange
  03 · Asymmetric & Key Exchange
  - Lab
- 04 · Hashing, MACs & Passwords
  04 · Hashing, MACs & Passwords
  - Lab
- 05 · TLS Deep Dive
  05 · TLS Deep Dive
  - Lab
- 06 · PKI & Certificate Management
  06 · PKI & Certificate Management
  - Lab
- 07 · Secrets Management
  07 · Secrets Management
  - Lab
- 08 · Secret Detection & Leakage
  08 · Secret Detection & Leakage
  - Lab
- 09 · Email Authentication
  09 · Email Authentication
  - Lab
- 10 · Auditing Applied-Crypto Failures
  10 · Auditing Applied-Crypto Failures
  - Lab
- 11 · Post-Quantum & Crypto-Agility Migration
  11 · Post-Quantum & Crypto-Agility Migration
  - Lab
- 12 · Choosing Your Crypto: an ADR
  12 · Choosing Your Crypto: an ADR
  - Lab
Python for Security
Python for Security
- 01 · Setup & Security Idioms
  01 · Setup & Security Idioms
  - Lab
- 02 · Files, Regex & Log Parsing
  02 · Files, Regex & Log Parsing
  - Lab
- 03 · Structured Data & Reporting
  03 · Structured Data & Reporting
  - Lab
- 04 · HTTP & APIs for Enrichment
  04 · HTTP & APIs for Enrichment
  - Lab
- 05 · Building CLI Tools
  05 · Building CLI Tools
  - Lab
- 06 · Network Programming
  06 · Network Programming
  - Lab
- 07 · Automating the Web
  07 · Automating the Web
  - Lab
- 08 · Driving Security Tools
  08 · Driving Security Tools
  - Lab
- 09 · Building an MCP Server
  09 · Building an MCP Server
  - Lab
- 10 · Packaging, Testing & Owning AI Code
  10 · Packaging, Testing & Owning AI Code
  - Lab
- 11 · Eval Harness for Security Tools
  11 · Eval Harness for Security Tools
  - Lab
Security Automation
Security Automation
- 01 · The Automation Mindset
  01 · The Automation Mindset
  - Lab
- 02 · Infrastructure as Code
  02 · Infrastructure as Code
  - Lab
- 03 · IaC Security Scanning
  03 · IaC Security Scanning
  - Lab
- 04 · Configuration Management
  04 · Configuration Management
  - Lab
- 05 · CI/CD Pipelines & Gates
  05 · CI/CD Pipelines & Gates
  - Lab
- 06 · Containerising Tooling
  06 · Containerising Tooling
  - Lab
- 07 · Enrichment & Data Pipelines
  07 · Enrichment & Data Pipelines
  - Lab
- 08 · SOAR Fundamentals
  08 · SOAR Fundamentals
  - Lab
- 09 · Detection-as-Code Pipelines
  09 · Detection-as-Code Pipelines
  - Lab
- 10 · Reviewing AI-Generated Automation
  10 · Reviewing AI-Generated Automation
  - Lab
- 11 · Secrets Handling in Pipelines
  11 · Secrets Handling in Pipelines
  - Lab
- 12 · Click-ops → IaC Migration
  12 · Click-ops → IaC Migration
  - Lab
Zero Trust Network Access
Zero Trust Network Access
- 01 · Zero Trust Principles
  01 · Zero Trust Principles
  - Lab
- 02 · Identity as the Control Plane
  02 · Identity as the Control Plane
  - Lab
- 03 · Device Trust & Posture
  03 · Device Trust & Posture
  - Lab
- 04 · ZTNA Architectures
  04 · ZTNA Architectures
  - Lab
- 05 · SASE & Cloud-Delivered Zero Trust
  05 · SASE & Cloud-Delivered Zero Trust
  - Lab
- 06 · Identity-Aware Access
  06 · Identity-Aware Access
  - Lab
- 07 · Microsegmentation
  07 · Microsegmentation
  - Lab
- 08 · Policy as Code
  08 · Policy as Code
  - Lab
- 09 · Monitoring & Detection
  09 · Monitoring & Detection
  - Lab
- 10 · VPN → ZTNA Migration
  10 · VPN → ZTNA Migration
  - Lab
- 11 · Red-team Your Zero-Trust Deployment
  11 · Red-team Your Zero-Trust Deployment
  - Lab
- 12 · Workload Identity & mTLS
  12 · Workload Identity & mTLS
  - Lab
AI-Augmented Security Ops
AI-Augmented Security Ops
- 01 · The Hybrid AI Pattern
  01 · The Hybrid AI Pattern
  - Lab
- 02 · Running Local Models
  02 · Running Local Models
  - Lab
- 03 · Prompt Patterns for Security
  03 · Prompt Patterns for Security
  - Lab
- 04 · Retrieval-Augmented Generation
  04 · Retrieval-Augmented Generation
  - Lab
- 05 · Building MCP Servers
  05 · Building MCP Servers
  - Lab
- 06 · A SoC Copilot (MCP + RAG)
  06 · A SoC Copilot (MCP + RAG)
  - Lab
- 07 · AI-Assisted Detection & Triage
  07 · AI-Assisted Detection & Triage
  - Lab
- 08 · SOAR + AI
  08 · SOAR + AI
  - Lab
- 09 · Securing the AI You Run
  09 · Securing the AI You Run
  - Lab
- 10 · Attacking AI Systems
  10 · Attacking AI Systems
  - Lab
- 11 · AI Evaluation & Observability
  11 · AI Evaluation & Observability
  - Lab
Glossary

04 · Detection & Reporting (YARA)

Comments

Sign in with GitHub to comment. Choose the type: Feedback (errors or suggestions on this page) · Hints (help for fellow learners — no spoilers) · General (anything else).