Ethical Hacking and Security Operations
Legal foundations, a safe lab, scanning, web testing, hardening, network defense, SIEM, threat hunting, and incident response.
9 lessons · about 83 minutes of reading
Log in to track your progress through this course.
Start lesson 1- 1
Ethical Hacking Fundamentals: Law, Scope, and Methodology
Learn what separates a penetration tester from a criminal: authorization, scope, rules of engagement, and a repeatable methodology.
9 min read
- 2
Build a Safe Cybersecurity Home Lab
Set up an isolated virtual lab with an attacker machine and intentionally vulnerable targets that cannot reach your real network.
9 min read
- 3
Network Reconnaissance and Scanning with Nmap in Your Lab
Discover hosts, open ports, and service versions in your own lab with Nmap, and learn how defenders use the same results.
9 min read
- 4
Web Application Testing with Burp Suite and the OWASP WSTG
Intercept and inspect traffic to a practice app with Burp Suite Community, and use the OWASP Web Security Testing Guide to structure testing.
9 min read
- 5
Linux Server Hardening Essentials
Reduce a Linux server's attack surface with updates, SSH key authentication, a host firewall, fail2ban, and a Lynis audit.
9 min read
- 6
Network Defense: Firewalls, Segmentation, and Suricata IDS
Limit how far an attacker can move with network segmentation and firewall rules, and detect suspicious traffic with Suricata.
9 min read
- 7
Security Logging and SIEM Basics with Wazuh and Sigma
Collect and analyze security logs, write a Python log detector, and learn how Wazuh and Sigma detection rules work.
10 min read
- 8
MITRE ATT&CK and Threat Hunting Basics
Use the ATT&CK knowledge base to describe attacker behavior, map your detections, and start simple hypothesis-driven hunts.
9 min read
- 9
Incident Response Lifecycle and Digital Forensics Basics
Learn how to prepare for, detect, contain, and recover from security incidents, following NIST SP 800-61 Rev. 3, with basic evidence handling.
10 min read