more on the outline, reformatted nested lists to be prettier

2024-03-15 11:17:51 -06:00
parent 1509c01964
commit fb1efbdfb8
1 changed files with 64 additions and 63 deletions
@@ -1,67 +1,68 @@
 # getting-started-in-cybersec
 A guide to go from zero to hero in cyber security
-Outline of core fundamentals (mostly blue team)
+## fundamentals and theory
-* fundamentals
+1. definitions
-    1. definitions
+2. core ideas
-    2. core ideas
+    a. GRC
-        i. GRC
+        - security culture
-            - security culture
+        - budget
-            - budget
+        - man power
-            - man power
+    b. CIA triad
-        ii. CIA triad
+    c. security in depth + zero trust security vs castle methoddiv. assume compromise
-        iii. security in depth + zero trust security vs castle method
+    d. assessing threats
-        iv. assume compromise
+        - threat actors
-        v. assessing threats
+    e. threat modeling
-            - threat actors
+    f. risk analysis
-        vi. threat modeling
+        - assets
-        vii. risk analysis
+        - financial impact modeling
-            - assets
+        - heatmap of threats
-            - financial impact modeling
+    g. mitigating risk
-            - heatmap of threats
+    h. controlls
-        viii. mitigating risk
+        - administrative
-
+        - technical
-        ix. controlls
+        - detective
-            - administrative
+        - preventitive
-            - technical
+        - deturrant 
-            - detective
+    i. disaster recovery
-            - preventitive
+        - assume compromise
-            - deturrant 
+        - redundant backups
-        x. disaster recovery
+        - hot/cold/warm sites
-            - assume compromise
+    j. access and authentication
-            - redundant backups
+        - access
-            - hot/cold/warm sites
+        - authentication
-        xi. access and authentication
+        - MFA
-            - access
+            i. soemthing you know
-            - authentication
+            ii. something you have
-            - MFA
+            iii. something you are
-                i. soemthing you know
+            iv. location
-                ii. something you have
+3. how security departments usually work
-                iii. something you are
+    a. SOC
-                iv. location
+    b. NOC
-    3. how security departments usually work
+    c. IR
-        i. SOC
+    d. administrative
-        ii. NOC
+4. offensive/defensive aka red team/blue team
-        iii. IR
+        a. blue team
-        iv. administrative
+        b. red team
-
+        c. red team informs blue team
-    4. offensive/defensive aka red team/blue team
+        d. purple team
        i. blue team
        ii. red team
        iii. red team informs blue team
        iv. purple team
-    5. Look ahead to technical concepts
+## technical concepts and theory
-        i. networking
+1. networking
-            - client-server model
+   a. client-server model
-            - ip addresses
+   b. network devices
-            - mac addresses
+   c. ip addresses
-            - LAN
+   d. mac addresses
-            - ARP
+   e. LAN
-            - DHCP
+   f. ARP
-            - routing
+   g. DHCP
-        ii. networking contd
+   h. routing
-            - TCP
+   I. TCP
-                i. packets
+    - packets
-            - UDP
+   J. DNS
-            - DNS
+2. operating systems
    a. windows
    b. linux
    c. android
    d. ios
    e. embedded/iot