COMPTIA CYSA+

- Cybersecurity Analysts - Cybersecurity Roles and Responsibilities - Frameworks and Security Controls - Risk Evaluation - Penetration Testing Processes - Reconnaissance Techniques - The Kill Chain - Open Source Intelligence - Social Engineering - Topology Discovery - Service Discovery - OS Fingerprinting

- Security Appliances - Configuring Firewalls - Intrusion Detection and Prevention - Configuring IDS - Malware Threats - Configuring Anti-Virus Software - Sysinternals - Enhanced Mitigation Experience Toolkit - Logging and Analysis - Packet Capture - Packet Capture and Monitoring Tools - Log Review and SIEM - SIEM Data Outputs - SIEM Data Analysis - Point-in-time Data Analysis

- Managing Vulnerabilities - Vulnerability Management Requirements - Asset Inventory - Data Classification - Vulnerability Management Processes - Vulnerability Scanners - Microsoft Baseline Security Analyzer - Vulnerability Feeds and SCAP - Configuring Vulnerability Scans - Vulnerability Scanning Criteria - Exploit Frameworks - Remediating Vulnerabilities - Analyzing Vulnerability Scans - Remediation and Change Control - Remediating Host Vulnerabilities - Remediating Network Vulnerabilities - Remediating Virtual Infrastructure Vulnerabilities - Secure Software Development - Software Development Life Cycle - Software Vulnerabilities - Software Security Testing - Interception Proxies - Web Application Firewalls - Source Authenticity - Reverse Engineering

- Incident Response - Incident Response Processes - Threat Classification - Incident Severity and Prioritization - Types of Data - Forensics Tools - Digital Forensics Investigations - Documentation and Forms - Digital Forensics Crime Scenes - Digital Forensics Kits - Image Acquisition - Password Cracking - Analysis Utilities - Incident Analysis and Recovery - Analysis and Recovery Frameworks - Analyzing Network Symptoms - Analyzing Host Symptoms - Analyzing Data Exfiltration - Analyzing Application Symptoms - Using Sysinternals - Containment, Eradication, and Validation Techniques - Corrective Actions

- Secure Network Design - Network Segmentation - Blackholes, Sinkholes, and Honeypots - System Hardening - Group Policies and MAC - Endpoint Security - Managing Identities and Access - Network Access Control - Identity Management - Identity Security Issues - Identity Repositories - Context-based Authentication - Single Sign-On and Federation - Exploiting Identities - Exploiting Web Browsers and Applications - Security Frameworks and Policies - Frameworks and Compliance - Reviewing Security Architecture - Procedures and Compensating Controls - Verifications and Quality Control - Security Policies and Procedures - Personnel Policies and Training