[فارسی]

01 مقدمه
01-01 اصول عملی امنیت سایبری: مقدمه

02 درس 1: اصول امنیتی
02-01 ماژول 1: مقدمه مبانی امنیت سایبری
02-02 اهداف آموزشی
02-03 درک مفاهیم امنیتی تضمین اطلاعات
02-04 درک فرآیند مدیریت ریسک
02-05 درک کنترل های امنیتی
02-06 درک فرآیندهای حکمرانی
02-07 ساخت آزمایشگاه امنیت سایبری شما

03 درس 2: تداوم کسب و کار (BC)، بازیابی بلایا (DR)، و مفاهیم واکنش به حادثه
03-01 اهداف آموزشی
03-02 درک تداوم کسب و کار (BC)
03-03 درک بازیابی بلایا (DR)
03-04 درک واکنش حادثه

04 درس 3: مفاهیم کنترل دسترسی
04-01 اهداف آموزشی
04-02 درک کنترل های دسترسی فیزیکی
04-03 بررسی اصل حداقل امتیاز
04-04 درک مفهوم تفکیک وظایف
04-05 معرفی کنترل دسترسی اختیاری (DAC)
04-06 درک کنترل دسترسی اجباری (MAC)
04-07 درک کنترل دسترسی مبتنی بر نقش (RBAC)

05 درس 4: امنیت شبکه
05-01 اهداف آموزشی
05-02 درک شبکه های کامپیوتری
05-03 درک تهدیدات و حملات شبکه
05-04 درک زیرساخت امنیت شبکه
05-05 معرفی تقسیم بندی شبکه
05-06 معرفی امنیت ابری

06 درس 5: عملیات امنیتی
06-01 اهداف آموزشی
06-02 درک امنیت داده ها
06-03 درک هش
06-04 درک سختی سیستم
06-05 درک بهترین شیوه سیاست های امنیتی
06-06 درک آموزش آگاهی امنیتی

07 درس 6: نرم افزار تعریف شبکه و زیرساخت به عنوان کد
07-01 اهداف آموزشی
07-02 امنیت شبکه تعریف شده توسط نرم افزار
07-03 درک تهدیدات علیه راه حل های SDN
07-04 معرفی قابلیت برنامه ریزی شبکه
07-05 معرفی SD-WAN و معماری های مدرن
07-06 بررسی 10 برتر OWASP

08 درس 7: رمزنگاری
08-01 اهداف آموزشی
08-02 معرفی رمزنگاری و تحلیل رمزی
08-03 درک پروتکل های رمزگذاری
08-04 توصیف الگوریتم های هش
08-05 معرفی زیرساخت کلید عمومی (PKI)
08-06 معرفی مقامات گواهی (CAs) و ثبت نام گواهی
08-07 بررسی اجرای SSL و TLS
08-08 بررسی پیاده سازی های IPsec و پیاده سازی های مدرن VPN

09 درس 8: AAA، مدیریت هویت، دید شبکه و تقسیم بندی
09-01 اهداف آموزشی
09-02 معرفی AAA و مدیریت هویت
09-03 پیاده سازی اعتماد صفر و احراز هویت چند عاملی
09-04 درک مدیریت هویت در ابر
09-05 بررسی پیاده سازی های تک علامتی (SSO).

10 درس 9: مبانی واکنش به حادثه
10-01 ماژول 2: پاسخ به حادثه، پزشکی قانونی دیجیتال و معرفی شکار تهدید
10-02 اهداف آموزشی
10-03 بررسی چگونگی شروع واکنش به حادثه
10-04 درک فرآیند واکنش به حادثه
10-05 تعریف کتابهای بازی و اجرای اتوماسیون کتاب (RBA)
10-06 درک اطلاعات تهدیدات سایبری (CTI)
10-07 درک عادی سازی داده ها
10-08 ساختارشکنی فرمت های داده جهانی و همبستگی 5 تایی
10-09 درک اصول نظارت بر امنیت
10-10 ابزارهای نظارت بر امنیت نقشه برداری

11 درس 10: اصول شکار تهدید
11-01 اهداف آموزشی
11-02 معرفی فرآیند شکار تهدید
11-03 تاکتیک‌ها، تکنیک‌ها و دانش متداول خصمانه MITRE (ATT

[ENGLISH]

01 Introduction
01-01 Practical cybersecurity fundamentals: Introduction

02 Lesson 1: Security Principles
02-01 Module 1: Cybersecurity fundamentals introduction
02-02 Learning objectives
02-03 Understanding the security concepts of information assurance
02-04 Understanding the risk management process
02-05 Understanding security controls
02-06 Understanding governance processes
02-07 Building your cybersecurity lab

03 Lesson 2: Business Continuity (BC), Disaster Recovery (DR), and Incident Response Concepts
03-01 Learning objectives
03-02 Understanding business continuity (BC)
03-03 Understanding disaster recovery (DR)
03-04 Understanding incident response

04 Lesson 3: Access Control Concepts
04-01 Learning objectives
04-02 Understanding physical access controls
04-03 Exploring the principle of least privilege
04-04 Understanding the concept of segregation of duties
04-05 Introducing discretionary access control (DAC)
04-06 Understanding mandatory access control (MAC)
04-07 Understanding role-based access control (RBAC)

05 Lesson 4: Network Security
05-01 Learning objectives
05-02 Understanding computer networking
05-03 Understanding network threats and attacks
05-04 Understanding network security infrastructure
05-05 Introducing network segmentation
05-06 Introducing cloud security

06 Lesson 5: Security Operations
06-01 Learning objectives
06-02 Understanding data security
06-03 Understanding hashing
06-04 Understanding system hardening
06-05 Understanding best practice security policies
06-06 Understanding security awareness training

07 Lesson 6: Software Defined Networking and Infrastructure as Code
07-01 Learning objectives
07-02 Software defined networking security
07-03 Understanding the threats against SDN solutions
07-04 Introducing network programmability
07-05 Introducing SD-WAN and modern architectures
07-06 Surveying the OWASP Top 10

08 Lesson 7: Cryptography
08-01 Learning objectives
08-02 Introducing cryptography and cryptanalysis
08-03 Understanding encryption protocols
08-04 Describing hashing algorithms
08-05 Introducing public key infrastructure (PKI)
08-06 Introducing certificate authorities (CAs) and certificate enrollment
08-07 Surveying SSL and TLS implementations
08-08 Surveying IPsec implementations and modern VPN implementations

09 Lesson 8: AAA, Identity Management, Network Visibility, and Segmentation
09-01 Learning objectives
09-02 Introducing AAA and identity management
09-03 Implementing zero trust and multifactor authentication
09-04 Understanding identity management in the cloud
09-05 Surveying single-sign on (SSO) implementations

10 Lesson 9: Incident Response Fundamentals
10-01 Module 2: Incident response, digital forensics, and threat hunting introduction
10-02 Learning objectives
10-03 Exploring how to get started in incident response
10-04 Understanding the incident response process
10-05 Defining playbooks and run book automation (RBA)
10-06 Understanding cyber threat intelligence (CTI)
10-07 Understanding data normalization
10-08 Deconstructing universal data formats and 5-tuple correlation
10-09 Understanding security monitoring fundamentals
10-10 Surveying security monitoring tools

11 Lesson 10: Threat Hunting Fundamentals
11-01 Learning objectives
11-02 Introducing the threat hunting process
11-03 MITRE’s adversarial tactics, techniques, and common knowledge (ATT&CK®)
11-04 Understanding automated adversarial emulation

12 Lesson 11: Digital Forensics
12-01 Learning objectives
12-02 Introducing digital forensics
12-03 Introducing reverse engineering
12-04 Understanding evidence preservation and chain of custody
12-05 Collecting evidence from endpoints and servers
12-06 Collecting evidence from mobile and IoT devices
12-07 Exploring memory analysis with Volatility

13 Lesson 12: Introduction to Security Penetration Testing and Bug Hunting
13-01 Module 3: Ethical hacking, penetration testing, and bug hunting introduction
13-02 Learning objectives
13-03 How to start a career in ethical hacking
13-04 Understanding the difference between traditional pen testing, bug bounties, and red team assessments
13-05 Exploring bug bounty programs
13-06 Understanding the ethical hacking and bug hunting methodology
13-07 Planning and scoping a penetration testing assessment

14 Lesson 13: Passive Reconnaissance and OSINT
14-01 Learning objectives
14-02 Understanding information gathering and vulnerability identification
14-03 Introducing open source intelligence (OSINT) techniques
14-04 Performing DNS-based passive recon
14-05 Identifying cloud vs. self-hosted assets
14-06 Introducing Shodan, Maltego, AMass, Recon-NG, and other recon tools
14-07 Surveying password dumps, file metadata, and public source-code repositories
14-08 Introduction to Google hacking and search engine reconnaissance

15 Lesson 14: Active Reconnaissance, Enumeration, and Scanning
15-01 Learning objectives
15-02 Introduction to host and service enumeration
15-03 Mastering Nmap
15-04 Performing website and web application reconnaissance
15-05 Discovering cloud assets
15-06 Crafting packets with Scapy to perform reconnaissance

16 Lesson 15: Exploiting Systems and Applications
16-01 Learning objectives
16-02 Performing on-path attacks
16-03 Exploring the OWASP Top 10 risks in web applications
16-04 Exploiting cross-site scripting (XSS) and cross-site request forgery (CSRF) vulnerabilities
16-05 Understanding server-side request forgery (SSRF) vulnerabilities
16-06 Hacking databases
16-07 Exploiting wireless vulnerabilities
16-08 Exploiting buffer overflows and creating payloads

17 Lesson 16: Post Exploitation Techniques and Reporting
17-01 Learning objectives
17-02 Avoiding detection and evading security tools
17-03 Introduction to lateral movement and exfiltration
17-04 Exploring command and control (C2) techniques
17-05 Understanding living-off-the-land and fileless malware
17-06 Best practices when creating pen testing and bug bounty reports
17-07 Understanding post-engagement cleanup

18 Lesson 17: Cloud Security Concepts
18-01 Module 4: Cloud, DevOps, and IoT security introduction
18-02 Learning objectives
18-03 Introducing the different cloud deployment and service models
18-04 Surveying patch management in the cloud
18-05 Performing security assessments in cloud environments
18-06 Exploring cloud logging and monitoring methodologies

19 Lesson 18: DevSecOps
19-01 Learning objectives
19-02 Introducing DevSecOps
19-03 Securing code, applications, and building DevSecOps pipelines

20 Lesson 19: IoT Security
20-01 Learning objectives
20-02 Introducing IoT concepts
20-03 Surveying IoT hacking methodologies and IoT hacking tools
20-04 Introducing OT, ICS, and SCADA concepts and attacks

21 Lesson 20: Introduction to AI Security
21-01 Module 5: AI security, ethics, and privacy: Balancing innovation with protection introduction
21-02 Learning objectives
21-03 Surveying the AI landscape and use cases
21-04 Exploring LLMs, ChatGPT, Co-pilot and more
21-05 Understanding the importance of AI security
21-06 Exploring the OWASP Top 10 for LLMs

22 Lesson 21: A Deep Dive into the Different Types of AI Threats
22-01 Learning objectives
22-02 Exploring data poisoning attacks
22-03 Understanding model inversion attacks
22-04 Discussing membership inference attacks
22-05 Explaining the model theft attack
22-06 Introducing MITRE’s ATLAS

23 Lesson 22: Principles of Secure AI Development
23-01 Learning objectives
23-02 Exploring the secure AI development lifecycle
23-03 Understanding privacy-preserving AI techniques
23-04 Understanding robustness and resilience in AI models
23-05 Surveying AI security best practices
23-06 Exploring AI security tools and frameworks
23-07 Understanding the legal landscape and potential new regulations
23-08 Investigating ethical implications of artificial intelligence

24 Summary
24-01 Practical cybersecurity fundamentals: Summary