CompTIA CySA+ Hands-on Labs

Practise the skills of a cyber security analyst hands-on: vulnerability management, incident response, systems security, OSINT, digital forensics and malware analysis, across eight modules of labs.

4.8

★★★★★

(2,435)

Stage 3 - Intermediate

Last update: 2025

Audio Language: English

Subtitles/Captions: Yes

Caption Language: English

Type of Training: Online, self-paced

Focus: CompTIA CySA+ Training Courses, CompTIA Courses, Certification Courses, SOC Analyst Training Courses

What You’ll Learn

These hands-on CySA+ labs will teach you:

Threat and Vulnerability Management: Find, assess and prioritise vulnerabilities in practice.
Incident Response: Work through the steps of handling a security incident.
Software and Systems Security: Secure systems and software hands-on.
OSINT: Gather open-source intelligence the way analysts do.

Digital Forensics: Collect and examine evidence.
Malware Analysis: Examine malicious software safely.
Red Team Adversary Emulation: See how attackers operate, to defend against them.

Included in CompTIA CySA+ Hands-on Labs

8 Modules of Hands-on Labs

Access on Mobile

Suitable for the Following Careers

SOC Analyst

Cyber Security Analyst

Threat Hunter

Vulnerability Analyst

Incident Responder

Course Content

New section

Module 1 - Threat and Vulnerability Management

02 Installing OpenVAS

01 Performing Vulnerability Research

03 Scanning Applications Using OpenVAS

04 Installing Nessus

05 Vulnerability Assessment Using Nessus

06 Vulnerability Scanning Using Nikto

07 Analyzing Windows System Vulnerabilities

08 Snort Installation

09 Configuring Snort

10 Writing Snort Rules

11 OWASP ZAP Basics

12 Using ZAP to Scan Authenticated Pages

13 WInPEAS for Windows System Vulnerabilities

14 LinPEAS for Linux System Vulnerabilities

15 Vulnerability Management Using Qualys

16 Splunk Installation

17 Searching Data and Creating Visualizations in Splunk

18 Email Header Analysis

19 Static Email Analysis

20 Hybrid Analysis of Suspicious Files

21 Anti-DDOS Guardian

22 Android App Scanning Using Yaazhini

23 APK Analysis Asing AndroBugs

24 Static Analysis Using MobSF

25 Web Vulnerability Analysis Using Burp Suite

26 Wazuh Agent Deployment

27 Wazuh Agent

28 Wpscan for Vulnerability Assessment

Module 2 - Incident Response

01 Common Linux Forensics Artifacts

02 Common Linux Forensics Artifacts Part 2

03 STIX Threat Intelligence

04 Capturing Memory from a Process

06 Memory Analysis Through Autopsy

08 Detecting Malicious Activity in a PCAP file Using Wireshark

10 VirusTotal for SOC Analysis 2

11 Document Analysis Using REMnux

12 Extracting and Analysing VBA Code From Documents

14 Audio Analysis and Manipulation with Audacity

Module 3 - Software and Systems Security

01 Installing Ghidra Reverse Engineering Tool

02 Analyzing Binary Using Ghidra

03 Reversing Binary Using Ghidra

05 Scanning and Reconnaissance

06 Vulnerability Assessment

07 Exploit Verification

08 JADX Installation and Usage for Android APK Analysis

09 Deep Dive into Android APK Analysis Using JADX

10 Cracking Passwords with Volatility and John

11 Usage of Burp Suite

12 Recovering Passwords From Firefox

Module 4 - OSINT (Open-Source Inteligence)

Module 5 - Digital Forensics

01 Acquiring disk image using FTK imager

02 Analysing Image File Using Autopsy

03 Analysing Image File Using OSForensics

04 Acquiring Memory Image From Windows

05 Acquiring Memory Image from Linux

06 Acquiring Registry Hives

08 Registry Forensics 2

09 Browser Forensics using Browsing History View

10 Browser Forensics Using Hindsight Framework

11 Analysing Windows Notifications

13 HxD and HexEdit Usage and Installation

14 Practical Memory Forensics Using Volatility

15 Practical Memory Forensics Using Volatility2

16 PNGCheck and PNG File Chunk Inspector Usage and Installation

18 MFT Acquisiton Using KAPE

19 MFT Analysis

20 LNK Files Analysis Using LECmd

21 Viewing Recent System Activities Using LastActivityView

22 Acquiring Android Image Files with Belkasoft X Evidence Center

23 Analysing Image Files with Belkasoft X Evidence Center

Module 6 - Malware Analysis

01 Basic Usage of Process Explorer

02 Viewing API Calls by API Logger

03 Tracing Windows API Using Tiny Tracer

04 Viewing API Calls by API Monitor

05 Analysisng Registry Changes Using RegShot

06 Basic Usage of ProcMon

07 Detecting Process Masquerading with Process Explorer

08 Detecting Process Hollowing with Process Explorer

09 Detecting Malware Persistence Using RegRipper

10 Parsing Registry Hives using VSC Toolset and RegRipper

11 Using MobSFlive for APK analysis

Module 7 - Red Team Adversary Emulation

Module 8 - Bonus Labs

OPEN FULL CURRICULUM

Requirements

Knowledge of CompTIA Network+ and Security+ content is recommended.

Best used alongside the CySA+ course.

Description of CompTIA CySA+ Hands-on Labs

These hands-on labs let you practise the skills behind CompTIA CySA+, so you can do an analyst's work, not only describe it.

The labs are organised in eight modules:

Threat and vulnerability management
Incident response
Software and systems security
OSINT (open-source intelligence)
Digital forensics
Malware analysis
Red team adversary emulation
Bonus labs

Who Is This Course For

These labs are for CySA+ students, SOC analysts, threat hunters and anyone who learns cyber security best by doing.

Course Instructor

StationX

StationX has been an award-winning, leading provider of online cybersecurity training and consultancy services since 1999. Through hands-on learning experiences, StationX offers the most engaging and effective way to learn real-world concepts and skills essential for a successful cyber career.

StationX has built and aggregated over 1,000 classes, virtual labs, practice tests, and exam simulations covering cybersecurity, hacking, penetration testing, certifications, Linux, networking, and cloud computing. Their training has benefited more than 250,000 students in 195+ countries, earning them the prestigious AI Cyber Security Educator of the Year 2020 Award.

Read More

Read Less

Frequently Asked Questions

Do these labs cover the CySA+ exam?

They practise the hands-on skills behind CySA+: vulnerability management, incident response, forensics and malware analysis. Use them alongside the CySA+ course to prepare for the exam.

What is in the CompTIA CySA+ V4 exam?

CySA+ V4 (exam code CS0-004) launched on 23 June 2026. It has up to 85 multiple-choice and performance-based questions, lasts 165 minutes, and the passing score is 750 on a scale of 100–900.

Is this course part of a bundle?

Yes. It is included in the CompTIA CySA+ Training Bundle (CS0-004), free when you pass the exam with a voucher bought from StationX.

Students Who Took This Course Also Liked

StationX AI-Driven Cyber Security Engineering Training Program

Become the one in the room everyone turns to — the expert AI can’t replace.

The StationX Master’s Program gives you a rare ability companies will pay almost anything for — then it’s yours to point wherever you want your life to go.

A senior role at the top of your pay grade. Your own consultancy. Or a business of your own. One capability, three futures — you choose, and you can change your mind.

SEE THE AI MASTER’S PROGRAM