Phase 4: Cybersecurity Fundamentals

Learn Security Foundations

  1. Professor Messer Security+ Playlist https://www.youtube.com/playlist?list=PLG49S3nxzAnnOmvg5UGVenB_qQgsh01uC

  2. TryHackMe (Beginner Paths) https://tryhackme.com/

  3. OWASP Top 10 Overview https://owasp.org/www-project-top-ten/

Focus On:

  • CIA Triad

  • Authentication vs Authorization

  • Hashing vs Encryption

  • Symmetric vs Asymmetric cryptography

  • Risk management

  • Common attack types

Learn Security Tools

  1. Metasploit https://www.metasploit.com/

  2. Burp Suite Community Edition https://portswigger.net/burp/communitydownload

  3. OpenVAS https://www.openvas.org/

When Done Should Be Able To:

-Explain how common attacks work

-Scan a machine for vulnerabilities

-Analyze basic logs

-Explain the difference between encryption and hashing

-Describe the incident response lifecycle

Practice Ideas

-Scan a vulnerable VM in your lab

-Analyze failed login attempts in logs

-Exploit a basic vulnerability in a controlled lab

-Write a short security findings report