Name & Direct Link: Cybersecurity Foundations

Platforms: YouTube & Level Effect

Cost: Free – $19+ (Pay What You Can)

Hands-On: Labs are included with the Pay What You Can courses

Proof of Completion: There is a certification for the Pay What You Can courses

Community: They have a Discord server

Free YouTube Videos:

IT Fundamentals

• IT Fundamentals – Module 1 – Windows Operating System
• IT Fundamentals – Module 2 – Linux Operating System
• IT Fundamentals – Module 3 – Networking

Compliance Fundamentals

• Compliance Fundamentals – Module 1 – Governance, Risk, Compliance (GRC)

Cybersecurity Fundamentals

• Cybersecurity Fundamentals – Module 1 – Cybersecurity Industry
• Cybersecurity Fundamentals – Module 2 – Cryptography
• Cybersecurity Fundamentals – Module 3 – Logging for Security
• Cybersecurity Fundamentals – Module 4 – Cyber Threat Intelligence

SOC100-1 & SOC100-2 (Course, Labs, Certification) – $19+ Pay What You Can

The courses in the YouTube videos above that were previously part of their Cybersecurity Foundations path are now part of SOC100-1 & SOC100-2.

SOC100-1 Topics:

• Windows Operating System
• Linux Operating System
• Networking
• Windows Enterprise Administration
• HelpDesk Analyst & Troubleshooting
• Career Prep Portfolio
• Home Lab

SOC100-2 Topics:

• Cybersecurity Industry
• Governance, Risk, Compliance (GRC)
• Cryptography
• Windows Triage & Malware Analysis
• Email Security
• Log & Event Analysis with SIEM
• Cyber Threat Intelligence (CTI)
• Report Writing
• Career Prep – Malware Lab

Name & Direct Link: Not Scary Binary

Platform: YouTube

Hands-On: Yes – Course exercises are on GitHub

Topics:

• Binary Encoding
• Min & Max Values
• Hexadecimal
• Byte Ordering
• Masking and Shifting

Name & Direct Link: Constructing Defense

Platform: Constructing Defense

Cost: $150 (get 25% off using code: DFIRDIVA)

Proof of Completion: Certificate of Completion

Topics Include: 

• Lab Construction and Provisioning
• Terraform Setup
• Domain Controller
• Windows 11
• Certer
• Linux
• PCAP
• Cloud Accounts (Azure, AWS)
• Kubernetes Setup
• Sysmon Setup
• Telemetry Setup & Miscellaneous Lab Configuration
• Windows Auditing and GPO Setup
• Linux Auditd + Laurel
• SIEM
• Windows and Linux Event Collection
• Kubernetes Monitoring
• Cloud Collection
• Lab Executions
• Credential Access
• Lateral Movement
• Threat Detection
• LOLBAS / LOLBINs

Name & Affiliate Link*: Windows Internals

Platform: TrainSec

Course Instructor: Pavel Yosifovich

Community/Forum: There is a Discord community

Cost: $139 (single course) – $849 (5 course bundle)

Topics:

• Windows Internals: Day 1
  • Windows Versions
  • Core Concepts
  • System Architecture
  • Using WinDbg
  • The SSDT
  • Core System Files
  • Objects and Handles
  • Sessions
  • System Processes
• Windows Internals: Day 2
  • Process Fundamentals
  • Process Creation and Termination
  • “Special” Process
  • Jobs and Silos
  • Threads Fundamentals
  • Thread Scheduling
• Windows Internals: Day 3
  • Interrupts
  • Exceptions
  • System Crash
  • Object Management
  • Sharing Kernel Objects
  • Synchronization
  • More Mechanisms
• Windows Internals: Day 4
  • Memory Fundamentals
  • Sharing and Protection
  • Virtual Address Translation
  • Physical Memory
  • Memory Usage: User Mode
  • Memory Usage: Kernel
  • Memory Mapped Files
• Windows Internals: Day 5
  • I/O System Basics
  • I/O Request Packets (IRPs)
  • Devices and Drivers
  • IRP Processing
  • More About Drivers
  • Security Fundamentals
  • Security in Detail
  • Securing Objects
  • Other Security Features

*DFIR Diva is an affiliate of TrainSec and receives a small percentage of sales made through affiliate links that go toward keeping the site running.

Name & Direct Link: Defensive Security Pathway Curriculum

Platform: Safer Internet Project

Cost: This pathway is part of the $35/month SIP Membership

Proof of Completion: Certificate of Completion

Community: They have a Discord server

Topics:

• Networking Fundamentals
• Programming Fundamentals
• Bash Fundamentals
• Microsoft 365 Security & Compliance
• Microsoft Sentinel
• Splunk
• WordPress Defence
• Honeypots
• Cybersecurity Incident Response Plans
• Writing Professional Security Assessment Reports
• How to Follow the ASD Essential 8 Framework and What it’s Used For
• When to Assign Admin Access
• Securing API’s
• Cybersecurity Best Practices (Data Integrity, PII & IP Risks)
• Data Breaches

Name & Direct Link: Getting Started in Cybersecurity

Platform: Safer Internet Project

Cost: Free

Proof of Completion: Certificate of Completion

Community: They have a Discord server

Topics:

• The Importance of Cybersecurity
• Career Pathways in Cybersecurity
• Defensive Cybersecurity
• Basics of Network Security
• Secure Software Development Lifecycle
• Incident Response and Forensics
• Security Awareness and Training
• Offensive Cybersecurity
• Ethical Hacking and Penetration Testing
• Vulnerability Assessment and Management
• Exploit Development
• Social Engineering and Phishing Attacks
• Network Security Tools
• Malware Analysis Tools
• Intrusion Detection and Prevention Systems
• Security Information and Event Management
• Risk Assessment and Management
• Security Policies and Procedures
• Secure Configuration Management
• Data Privacy and Protection
• Compliance and Regulatory Requirements
• Machine Learning in Cybersecurity
• Cloud Security
• Internet of Things (IoT) Security
• Mobile Security
• Blockchain Security
• Building a Cybersecurity Resume
• Interview Preparation and Skills
• Professional Certifications in Cybersecurity
• Networking in the Cybersecurity Industry
• Continuing Education and Skill Enhancement

Name & Affiliate Link*: Enterprise Security Fundamentals 

Platform: Blue Cape Security

Cost: $299 (It can also be bundled with Practical Windows Forensics with their Hero Bundle for $449)

Hands-On: Has online labs

Proof of Completion: Certificate of Completion

Community: There is a BlueCapeSecurity Discord Server

Topics:

• Cyber Threat Landscape
• Enterprise Domain Environments
• Logging, Telemetry, Visibility
• Windows Event Logs
• PowerShell Event Logging and Tuning
• Sysmon Event Logging and Detection
• Initial Access Techniques
• Discovery, Execution and File Transfer with LOLBins
• Domain Reconnaissance
• Credential Attacks
• Lateral Movement Techniques
• Windows Endpoint Compromise
• Persistence Mechanisms
• Privilege Escalation Techniques
• Execution and Defense Evasion
• Data Staging and Exfiltration Techniques
• Network Telemetry and Security
• C2 Beacon Analysis
• Malware Analysis

*DFIR Diva is an affiliate of Blue Cape Security and receives a small percentage of sales made through affiliate links that go toward keeping the site running.

Name & Direct Link: CNIT 50: Network Security Monitoring

Platform: Sam Bowne’s Website

Additional Information: This contains the class recordings and slides for the course taught at City College. Anyone can also attend any of the live class sessions on Twitch for free. Non-City College students can also take the quizzes. Visit Sam Bowne’s homepage to see if a live class is being taught: https://samsclass.info/

Topics: Machine Data, Splunk, Getting Data In, Basic Searching, Using Fields, Best Practices, SPL Fundamentals, Transforming Commands, Reports and Dashboards, Pivot and Datasets, Lookups, Scheduled Reports and Alerts

Name & Direct Link: CryptoHack

Community: They have a Discord Server

Topics: Courses and Challenges Related to Cryptography

Challenges Include: ASCII, RSA, XOR, Symmetric Ciphers, Diffie-Hellman, Elliptic Curves, Hash Functions, JSON Web Tokens

Courses Include: Introduction to Cryptohack, Modular Arithmetic, Symmetric Cryptography, Public-Key Cryptography, Elliptic Curves

Name & Direct Link: Cybersecurity Fundamentals

Platform: APNIC Academy

Cost: Free

Proof of Completion: Certificate

Topics:

• Cybersecurity Introduction
• Concepts Terminology
• Security Controls
• Security Principles
• Technical Terminology
• Cryptography
• Identity and Access Management
• Incident Response