Phase 4: Cybersecurity Fundamentals
========================================

Learn Security Foundations
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

1. Professor Messer Security+ Playlist
   https://www.youtube.com/playlist?list=PLG49S3nxzAnnOmvg5UGVenB_qQgsh01uC

2. TryHackMe (Beginner Paths)
   https://tryhackme.com/

3. OWASP Top 10 Overview
   https://owasp.org/www-project-top-ten/


Focus On:

- CIA Triad
- Authentication vs Authorization
- Hashing vs Encryption
- Symmetric vs Asymmetric cryptography
- Risk management
- Common attack types


Learn Security Tools
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

1. Metasploit
   https://www.metasploit.com/

2. Burp Suite Community Edition
   https://portswigger.net/burp/communitydownload

3. OpenVAS
   https://www.openvas.org/


When Done Should Be Able To:

-Explain how common attacks work

-Scan a machine for vulnerabilities

-Analyze basic logs

-Explain the difference between encryption and hashing

-Describe the incident response lifecycle



Practice Ideas
=================

-Scan a vulnerable VM in your lab

-Analyze failed login attempts in logs

-Exploit a basic vulnerability in a controlled lab

-Write a short security findings report