CompTIA Cybersecurity Analyst CySA+

CompTIA CySA+ Module 1  
System and Network Architecture

• Privacy vs. Security
• Evaluating Security Risks
• Building a Secure Network
• Secure Endpoint Management
• Penetration Testing
• Reverse Engineering
• Infrastructure Concepts and Designs
• Operating System Concepts
• Logging, Logs, and Log Ingestion
• Identity and Access Management

CompTIA CySA+ Module 2
Malicious Activity

• Analyzing Network Events
• Active Monitoring
• Detecting Common Network Issues
• Detecting Scans and Sweeps
• Investigating Host-Related Issues
• Investigating Service and Application Related Issues
• Determining Malicious Activity Using Tools and Techniques

CompTIA CySA+ Module 3
Threat Intelligence 

• Threat Data and Intelligence
• Threat Classification
• Applying Threat Intelligence
• Reconnaissance and Intelligence Gathering
• Mapping, Enumeration, and Asset Discovery
• Passive Discovery

CompTIA CySA+ Module 4
Vulnerability Management 

• Identifying Vulnerability Management Requirements
• Configuring and Executing Vulnerability Scans
• Developing a Remediation Workflow
• Risks of Vulnerability Scanning
• Assessment Tools
• Reviewing and Interpreting Scan Reports
• Validating Scan Results
• Common Vulnerabilities

CompTIA CySA+ Module 5
Responding to Vulnerabilities

• Analyzing and Managing Risk
• Implementing Security Controls
• Threat Classification
• Managing the Computing Environment
• Software Assurance Best Practices
• Designing and Coding for Security
• Software Security Testing
• Policies, Governance and Service

CompTIA CySA+ Module 6
Responding to Vulnerabilities

• Security Incidents
• Phases of Incident Response
• Building the Foundation for Incident Response
• Creating an Incident Response Team
• Classifying Incidents
• Attack Frameworks

CompTIA CySA+ Module 7
Detection, Analysis, Eradication and Recovery

• Indicators of Compromise
• Investigating IoCs
• Evidence Acquisition and Preservation
• Containing the Damage
• Incident Eradication and Recovery
• Validating Data Integrity

CompTIA CySA+ Module 8
Reporting and Communication

• Vulnerability Management Reporting and Communication
• Incident Response Reporting and Communication
• Building a Forensics Capability
• Forensic Software
• Conducting Endpoint Forensics
• Network Forensics
• Cloud, Virtual, and Container Forensics
• Post-Incident Activity and Evidence Acquisition

**Outlines are subject to change, as courses and materials are updated.**