Detection & Response
Work across the SOC lifecycle by analyzing telemetry, triaging alerts, scoping incidents and converting adversary behavior into reliable detection, containment and continuous-improvement workflows.
- DOMAIN
- BLUE TEAM
- FOCUS
- DETECTION & RESPONSE
- CONTEXT
- SOC / DFIR
- TYPE
- DEFENSIVE
Security MonitoringAlert TriageSecurity Telemetry AnalysisLog AnalysisLog Source OnboardingWindows Event LogsSysmonSIEM OperationsEDR / XDR InvestigationIDS / IPS MonitoringIOC AnalysisIncident InvestigationIncident ScopingIncident ResponseContainment & EradicationRecovery SupportFile Integrity MonitoringVulnerability DetectionDetection EngineeringSigma RulesThreat HuntingMalware TriageSOAR FundamentalsSecurity AutomationDetection TuningFalse-Positive ReductionMITRE ATT&CK MappingSOC PlaybooksCase Documentation
Network & Infrastructure Security
Map network architecture, identify exposed services and analyze traffic across enterprise systems from both defensive and adversarial perspectives.
- DOMAIN
- INFRASTRUCTURE
- FOCUS
- NETWORKS
- CONTEXT
- DEFENSE / ANALYSIS
- TYPE
- HYBRID
TCP/IPOSI ModelIPv4 & IPv6Routing & SwitchingNetwork Discovery ProtocolsNetwork Architecture & MappingTarget IdentificationNetwork Scanning & FingerprintingNetwork Service AssessmentTraffic AnalysisNetwork SegmentationNmapWiresharkLinux SecurityWindows SecurityWindows Service VulnerabilitiesDatabase Security Basics
Web & API Security
Assess web applications and APIs through systematic validation of input handling, identity controls, sessions, server behavior and business logic.
- DOMAIN
- APPLICATION
- FOCUS
- WEB / API
- CONTEXT
- AUTHORIZED TESTING
- TYPE
- OFFENSIVE-INFORMED
Input ValidationAllowlisting & DenylistingCross-Site Scripting (XSS)SQL InjectionXML External Entity (XXE)Cross-Site Request Forgery (CSRF)Authentication VulnerabilitiesBrute-Force ResistanceAuthorization TestingInsecure Direct Object Reference (IDOR)Session ManagementParameter ManipulationSecure CookiesServer-Side Request Forgery (SSRF)Insecure File UploadsCode InjectionBusiness Logic FlawsDirectory TraversalSecurity MisconfigurationInformation DisclosureVulnerable & Outdated ComponentsSupply Chain Attack PreventionSame-Origin PolicySecurity HeadersWeb Server & Framework TestingOWASP Top 10
Active Directory & Enterprise Security
Analyze enterprise identity controls and map how configuration weaknesses can develop into privilege escalation, lateral movement and broader attack paths.
- DOMAIN
- ENTERPRISE
- FOCUS
- IDENTITY
- CONTEXT
- ACTIVE DIRECTORY
- TYPE
- HYBRID
Active Directory Security BasicsKerberos SecurityIdentity & Access ManagementAuthentication & AuthorizationPrivilege Escalation AnalysisActive Directory Certificate ServicesAttack Path AnalysisLateral MovementWindows Domain SecurityPassword PolicyIdentity Hardening
Threat Intelligence & Adversary Analysis
Study adversary behavior, observable indicators and attack chains to support investigation, detection and informed defensive decisions.
- DOMAIN
- INTELLIGENCE
- FOCUS
- ADVERSARIES
- CONTEXT
- RESEARCH / ANALYSIS
- TYPE
- ANALYTICAL
Threat IntelligenceOpen-Source Intelligence (OSINT)MITRE ATT&CKAdversary TTPsAdversary SimulationAttack Chain AnalysisSecurity ResearchVulnerability ResearchDigital ForensicsBasic Malware AnalysisSocial Engineering Awareness
Cloud & Container Security
Understand security monitoring, identity, misconfigurations and attack surfaces across cloud and containerized environments.
- DOMAIN
- CLOUD
- FOCUS
- MULTI-CLOUD
- CONTEXT
- CLOUD / CONTAINERS
- TYPE
- DEFENSIVE
Cloud SecurityMulti-Cloud SecurityAWS SecurityAzure SecurityGoogle Cloud SecurityKubernetes SecurityContainer SecurityRBAC SecurityCloud MonitoringCloud Threat DetectionCloud Misconfiguration Analysis
Cryptography & Security Foundations
Apply core cryptographic concepts and hardening practices to protect data, credentials, transport security and system configurations.
- DOMAIN
- FOUNDATIONS
- FOCUS
- CRYPTOGRAPHY
- CONTEXT
- SYSTEMS / DATA
- TYPE
- DEFENSIVE
Cryptography FundamentalsEncoding vs Encryption vs HashingSymmetric CiphersAsymmetric CiphersTLS SecurityCertificate ValidationTLS Certificate MisconfigurationPassword StorageSecure Password HashingSecurity Best PracticesSystem Hardening
Technical Communication & English
Communicate cybersecurity concepts, evidence and technical findings clearly across written, verbal and community-facing contexts in English and Spanish.
- DOMAIN
- COMMUNICATION
- ENGLISH
- C1
- EVIDENCE
- TOEIC
- CONTEXT
- TECHNICAL / BILINGUAL
English C1TOEICTechnical WritingSecurity DocumentationReport WritingKnowledge SharingCommunity CommunicationSpanish — Native
