Overview Guide for Cybersecurityπ‘οΈπ
1. Basics
βββ Networking π
β βββ OSI Model
β β βββ Layers 1-7, Functions
β β βββ Encapsulation/Decapsulation
β βββ TCP/IP Suite
β β βββ IPv4/IPv6, TCP/UDP
β β βββ Protocol Ports, ICMP, ARP
β βββ Subnetting
β β βββ CIDR, VLSM, Calculations
β β βββ Supernetting
β βββ NAT/PAT
β β βββ Types, Mechanisms
β β βββ NAT Traversal
β βββ DNS
β β βββ Resolution, DNSSEC
β β βββ Spoofing, Tunneling
β βββ VPNs
β β βββ IPSec, SSL/TLS
β β βββ Split Tunneling
β βββ Firewalls
β β βββ Stateful vs Stateless
β β βββ NGFW, Rule Creation
β βββ Load Balancers
β βββ Layer 4/7, Health Checks
β βββ Algorithms, Session Persistence
βββ Operating Systems π»
β βββ Windows
β β βββ Registry, AD, GPO
β β βββ Event Logs
β βββ Linux π§
β β βββ Filesystem, Permissions
β β βββ Systemd, Log Management
β βββ MacOS π
β β βββ SIP, Keychain Access
β β βββ Daemons, Gatekeeper
β βββ Kernel Exploits π
β β βββ Privilege Escalation, CVE
β β βββ Debugging, Exploit Dev
β βββ Shell Scripting π₯οΈ
β βββ Bash, PowerShell
β βββ Automation, Scheduling
βββ Programming & Scripting π‘
β βββ Python π
β β βββ Networking, Automation
β β βββ API, Pentesting
β β βββ Data Analysis
β βββ Bash
β β βββ CLI Fu, Text Manipulation
β β βββ Network Config, Process Management
β βββ PowerShell
β β βββ Cmdlets, Remoting
β β βββ Execution Policies, Admin Tasks
β βββ C/C++ πΎ
β β βββ Memory Management, Buffer Overflows
β β βββ Pointer Manipulation, Exploits
β βββ Assembly Language π οΈ
β βββ x86/x64, Shellcode Dev
β βββ Debugging, Reverse Engineering
β βββ Reverse Engineering π
β βββ Disassembly, Decompilation
β βββ Binary Patching, Malware Analysis
2. Intermediate Security Skills π
βββ Threat Modeling
β βββ STRIDE: Spoofing, Tampering, etc.
β βββ DREAD: Damage, Reproducibility, etc.
β βββ MITRE ATT&CK: Tactics, Techniques
βββ Penetration Testing π΅οΈββοΈ
β βββ Reconnaissance: OSINT, DNS Recon
β βββ Scanning: Nmap, Nessus
β β βββ Port Scanning, OS Detection
β β βββ Vulnerability Prioritization
β βββ Exploitation: Metasploit, Custom Payloads
β β βββ Shellcode, ROP
β β βββ Fuzzing, Mitigation Bypass
β βββ Post-Exploitation: Privilege Escalation
β β βββ Persistence, Data Exfiltration
β βββ Reporting: Documentation, Recommendations
3. Advanced Topics π
βββ Offensive Security
β βββ Exploit Development
β βββ Advanced Persistent Threats (APTs)
β βββ Red Team Operations
βββ Security Operations Center (SOC) π
β βββ Monitoring, Incident Response
β βββ SIEM Configuration
β βββ Threat Intelligence
βββ Digital Forensics π΅οΈββοΈ
β βββ Data Acquisition
β βββ Evidence Preservation
β βββ Analysis & Reporting
βββ Compliance & Governance π
βββ GDPR, HIPAA
βββ Risk Management
βββ Policy Development
4. Emerging Technologies & Trends π
βββ Cloud Security βοΈ
β βββ Cloud Service Models (IaaS, PaaS, SaaS)
β βββ Cloud Security Posture Management (CSPM)
β βββ Cloud Access Security Brokers (CASB)
β βββ Data Encryption in the Cloud
β βββ Identity and Access Management (IAM)
β βββ Cloud Security Best Practices
βββ Zero Trust Architecture π
β βββ Principles of Zero Trust
β βββ Identity and Device Authentication
β βββ Network Segmentation
β βββ Microsegmentation
β βββ Policy Enforcement
βββ Internet of Things (IoT) π
β βββ IoT Security Challenges
β βββ Device Authentication & Encryption
β βββ IoT Network Segmentation
β βββ Vulnerability Management
β βββ IoT Data Protection