1. Endpoint Analysis

• Windows Fundamental

  • Friendship with Powershell

  • Core Windows network commands to know

  • Windows Processes

  • DeepBlue CLI/DeepWhite CLI

• Linux Fundamental

  • Linux Filesystem

  • Users and Privileges

  • Linux CLI and Scripting

  • Processes in Linux

  • Networking in Linux

  • Using and understanding the power of Nmap

3. Networking & TCP/IP

• Headers and RFCs

• Shodan Search Engine

• Art of using tcpdump & Wireshark

• Packet Analysis

5. Egress Traffic Analysis

• MITRE & Egress

• Real Intelligence Threat Analytics

• Get into Rita

• User agents, JA3

• ELK / Security Onion

7. Endpoint Protection Analysis

• EDR

9. Vulnerability Management

2. Server Analysis

• Access to logs

• Getting align with CIS Benchmarks

• Config Files, Port and Services

4. Memory Forensics

• Say hello to Volatility

• Memory Analysis: Network

• Memory Analysis: Process

• Memory Analysis: DLL and CLI

6. User Entity Behavior Analytics

• MITRE and UEBA

• Log Analysis

  • AD Logs

  • Log Tracer

  • Log Anomalies

  • Which Logs are important to Collect/Check

  • Sysmon

• Certificate Analysis

• Lateral Movement

8. Internal Segmentation and Isolation

10. Using Tools

• Burp

• ZAP

• Security Scanners like Nessus