cysa-plus

WSQ CompTIA Cybersecurity Analyst (CySA+) CS0-003 — TGS-2024049211. Course slides (v8, domain-ordered with in-depth theory), Learner Guide, Lesson Plan and 30 hands-on Killercoda labs.

CySA+ Reference Dossier is an interactive, browser-based study guide for the CompTIA CySA+ CS0-003 certification exam. This comprehensive reference tool covers all four domains with detailed definitions, contextual examples, and expandable explanations for over 130 security analytics and response terms.

Comprehensive cybersecurity glossary database featuring 60+ terms across certifications, roles, concepts, organizations, and skills. Built as a clean, searchable reference tool for cybersecurity professionals, students, and career-changers. Includes detailed definitions for all major industry certifications (CompTIA, (ISC)², GIAC, EC-Council)📚.

Python-based Windows Event Log analyzer for detecting suspicious authentication, privilege, account, and process activity.

Detected OWASP ZAP attack traffic in Apache2 logs using bash — identified 1,544 malicious requests and 218 req/sec peak rate via grep, cut, sort, and uniq

Phishing and social engineering lab using the Social Engineering Toolkit (SET) with attacker lifecycle, blue-team defenses, and full documentation.

Honeypot lab on Kali Linux using PentBox to detect intrusion attempts on TCP port 443. Blue-team focused project mapped to CompTIA Security+ and CySA+ objectives.

Boot hardening on Arch Linux: LUKS2 encryption backed by TPM2 and Secure Boot signed with custom keys, with real-world troubleshooting documented.

Public SOC analyst portfolio and CySA+ (CS0-004) study log — Wazuh and ManageEngine Log360, detection, alert triage and incident response, built in the open.

Python-based SSH log analyzer that detects brute-force and suspicious authentication activity.

SOC-style investigation of Windows audited events using Event Viewer, including event correlation and incident reporting.

About Me

Windows Firewall Rule Lab – Creating inbound rule for TCP port 420 (AllowPing)

Python-based file integrity monitoring system designed to protect the integrity of designated files or directories.

Offline agentic PBQ generator for Identity & Access Management certification training. No API keys. No cost. No limits.

15-domain enterprise security assessment for a 10M-user tech company with no security program — CISO briefing with findings, tool recommendations, and remediation roadmap

Hub for community driven CySA+ Study Aid