What you'll learn

Knowing a tool's name and knowing how to use it are two completely different things. In this course, CompTIA CySA+ (CS0-004): Detection, Analysis, and Attack Mitigation, you'll gain the ability to operate the tools analysts rely on every day, analyze indicators of malicious activity across network, host, cloud, and identity surfaces, and interpret vulnerability assessment tool output with enough context to act on it. First, you'll explore the detection platforms, network analysis tools, and threat intelligence systems that power a modern SOC. Next, you'll discover how attack methodology frameworks like MITRE ATT&CK and the Cyber Kill Chain connect what your tools are showing you to real attacker behavior. Finally, you'll learn how to analyze indicators of compromise across multiple attack surfaces and read the output from a wide range of vulnerability assessment and adversary simulation tools. When you're finished with this course, you'll have the skills and knowledge of detection, analysis, and attack mitigation needed to move from watching alerts to actually understanding them.