Instructor-led training / OV-AT607

CompTIA CySA+ Cybersecurity Analyst

Enhance your cybersecurity skills and become a certified expert with the CompTIA CySA+ Cybersecurity Analyst course, designed for IT professionals seeking to master threat detection and vulnerability analysis.

Request private training Talk to us

Instructor-led

OV-AT607

Duration: 5 Days
Format: Live Online
Access: Multiple Timezones

Overview

About this course.

This 5-day course is intended for those wishing to qualify with CompTIA CySA+ Cybersecurity Analyst Certification. CompTIA’s CySA+ Certification is an intermediate-level certificate for IT professionals with previous experience of working in the field of IT security.

The CompTIA CySA+ examination is designed for IT security analysts, vulnerability analysts, or threat intelligence analysts. The exam will certify that the successful candidate has the knowledge and skills required to configure and use threat detection tools, perform data analysis, and interpret the results to identify vulnerabilities, threats, and risks to an organization with the end goal of securing and protecting applications and systems within an organization.

Review this course online at https://www.alta3.com/courses/AT607

Objectives

What you'll learn

Configure and utilize various threat detection tools.
Perform comprehensive data analysis to identify vulnerabilities.
Implement security measures to protect organizational systems.
Analyze and interpret threat intelligence effectively.

Audience

Who it's for

IT Security Analysts
Vulnerability Analysts
Threat Intelligence Analysts
Cybersecurity Professionals

Prerequisites

Before you start

Know basic network terminology and functions (such as OSI Model, Topology, Ethernet, Wi-Fi, switches, routers).
Understand TCP/IP addressing, core protocols, and troubleshooting tools.
Identify network attack strategies and defenses.
Know the technologies and uses of cryptographic standards and products.
Identify network- and host-based security technologies and practices.
Describe the standards and products used to enforce security on web and communications technologies.

Outline

Course outline.

Download PDF

Module 1 / Threat Management 1

Cybersecurity Roles and Responsibilities
Frameworks and Security Controls
Risk Evaluation
Penetration Testing Processes
The Kill Chain
Open Source Intelligence
Social Engineering
Topology Discovery
Service Discovery
OS Fingerprinting

Module 2 / Threat Management 2

Configuring Firewalls
Intrusion Detection and Prevention
Configuring IDS
Malware Threats
Configuring Anti-virus Software
Sysinternals
Enhanced Mitigation Experience Toolkit
Packet Capture
Packet Capture Tools
Monitoring Tools
Log Review and SIEM
SIEM Data Outputs
SIEM Data Analysis
Point-in-Time Data Analysis

Module 3 / Vulnerability Management

Vulnerability Management Requirements
Asset Inventory
Data Classification
Vulnerability Management Processes
Vulnerability Scanners
Microsoft Baseline
Security Analyzer
Vulnerability Feeds and SCAP
Configuring Vulnerability Scans
Vulnerability Scanning Criteria
Exploit Frameworks
Analyzing Vulnerability Scans
Remediation and Change Control
Remediating Host Vulnerabilities
Remediating Network Vulnerabilities
Remediating Virtual Infrastructure Vulnerabilities
Software Development Lifecycle
Software Vulnerabilities
Software Security Testing
Interception Proxies
Web Application Firewalls
Source Authenticity
Reverse Engineering

Module 4 / Cyber Incident Response

Incident Response Processes
Threat Classification
Incident Severity and Prioritization
Types of Data
Digital Forensics Investigations
Documentation and Forms
Digital Forensics Crime Scene
Digital Forensics Kits
Image Acquisition
Password Cracking
Analysis Utilities
Analysis and Recovery Frameworks
Analyzing Network Symptoms
Analyzing Host Symptoms
Analyzing Data Exfiltration
Analyzing Application Symptoms
Using Sysinternals
Containment Techniques
Eradication Techniques
Validation Techniques
Corrective Actions

Module 5 / Security Architecture

Network Segmentation
Blackholes, Sinkholes, and Honeypots
System Hardening
Group Policies and MAC
Endpoint Security
Network Access Control
Identity Management
Identity Security Issues
Identity Repositories
Context-based Authentication
Single Sign On and Federations
Exploiting Identities
Exploiting Web Browsers and Applications
Frameworks and Compliance
Reviewing Security Architecture
Procedures and Compensating Controls
Verifications and Quality Control
Security Policies and Procedures
Personnel Policies and Training

For teams

Training a whole team?

Request private training for CompTIA CySA+ Cybersecurity Analyst and we'll follow up with a quote for your group.

Request a quote Browse the catalog