CompTIA CySA+ Certification Complete Course (CS0-003)

Prepare to pass the CompTIA Cybersecurity Analyst+ (CySA+) (CS0-003) certification exam with this comprehensive course. Gain hands-on skills in security operations, incident response, vulnerability management, and advanced cybersecurity tools.

★★★★★

(6,000)

40,800 Students

36 Hours

Stage 3 - Intermediate

Last update: June 2024

Audio Language: English

Subtitles/Captions: Yes

Caption Language: English

Type of Training: Online, self-paced

Focus: CompTIA CySA+ Training Courses, CompTIA Courses, Certification Courses, Cyber Security Certification Courses, Cyber Security Courses, SOC Analyst Training Courses, Cyber Security Compliance Training Courses

What You’ll Learn

This CySA+ Certification Complete Course will teach you:

Security Operations: Master techniques for monitoring, analyzing, and improving organizational cybersecurity operations.
Incident Response: Develop robust skills for handling cyber incidents, from detection to recovery.
Network Forensics: Dive into Wireshark, tcpdump, and other tools to analyze network traffic and identify Indicators of Compromise (IOCs).
SIEM Mastery: Configure and analyze Security Information and Event Management (SIEM) systems to detect and respond to threats.

Vulnerability Management: Learn to identify, assess, and mitigate security vulnerabilities using advanced tools.
Threat Intelligence: Understand threat actors, attack frameworks, and effective intelligence-sharing practices.
Endpoint Security: Explore sandboxing, malware analysis, and Endpoint Detection and Response (EDR) tools for advanced defense.
Cybersecurity Architecture: Architect secure networks and implement best practices in segmentation, zero trust, and access control.

Included in the CySA+ Certification Complete Course

36 Hours of On-Demand Video

3 Downloadable Resources

1 Practice Test

1 Article

Access on Mobile

Certificate of Completion

Suitable for the Following Careers

Cyber Security Analyst

Threat Intelligence Analyst

Vulnerability Management Specialist

Incident Responder

Security Operations Center (SOC) Analyst

Course Content

Training Overview

Description of Training

Introduction

Download the Study Guide

Exam Tips

Quiz 1: Introduction

Identify Security Control Types

Identify Security Control Types (OBJ. 2.5)

Cybersecurity Roles and Responsibilities (OBJ. 2.5)

Security Operations Center (SOC) (OBJ. 2.5)

Security Control Categories (OBJ. 2.5)

Selecting Security Controls (OBJ. 2.5)

Quiz 2: Identify Security Control Types

Threat Intelligence Sharing

Classifying Threats

Threat Hunting

Threat Hunting (OBJ. 1.3, 1.4, & 2.5)

Threat Modeling (OBJ. 1.4 & 2.5)

Threat Hunting (OBJ. 1.4 & 2.5)

Open-source Intelligence (OBJ. 1.4)

Google Hacking (OBJ. 1.4)

Profiling Techniques (OBJ. 1.4)

Harvesting Techniques (OBJ. 1.3)

AbuseIPDB (OBJ. 1.3)

Deep Web and Dark Web (OBJ. 1.4)

Bug Bounty (OBJ. 1.4)

Quiz 5: Threat Hunting

Network Forensics

Appliance Monitoring

Appliance Monitoring (OBJ. 1.1 & 1.3)

Firewall Logs (OBJ. 1.1 & 1.3)

Firewall Configurations (OBJ. 1.1)

Proxy Logs (OBJ. 1.3)

Web Application Firewall Logs (OBJ. 1.3)

IDS and IPS Configuration (OBJ. 1.3)

IDS and IPS Logs (OBJ. 1.3)

Port Security Configuration (OBJ. 1.1)

NAC Configuration (OBJ. 1.1)

Analysis of Security Appliances (OBJ. 1.3)

Quiz 7: Appliance Monitoring

Endpoint Monitoring

Endpoint Monitoring (OBJ. 1.1 & 1.3)

Endpoint Analysis (OBJ. 1.3)

Sandboxing (OBJ. 1.3)

Reverse Engineering (OBJ. 1.3)

Malware Exploitation (OBJ. 1.3)

Behavior Analysis (OBJ. 1.1 & 1.3)

Malware Analysis (demo) (OBJ. 1.3)

EDR Configuration (OBJ. 1.3)

Block Lists and Allow Lists (OBJ. 1.1)

Quiz 8: Endpoint Monitoring

Email Monitoring

Configuring Your SIEM

Analyzing Your SIEM

Digital Forensics

Digital Forensics (OBJ. 3.2)

Digital Forensic Analysts (OBJ. 3.2)

Forensics Procedures (OBJ. 3.2)

Work Product Retention (OBJ. 3.2)

Data Acquisition (OBJ. 3.2)

Forensics Tools (OBJ. 3.2)

Memory Acquisition (OBJ. 3.2)

Disk Image Acquisition (OBJ. 3.2)

Hashing (OBJ. 1.3 & 3.2)

Timeline Generation (OBJ. 3.2)

Carving (OBJ. 3.2)

Chain of Custody (OBJ. 3.2)

Collecting and Validating Evidence (OBJ. 3.2)

Quiz 12: Digital Forensics

Analyzing Network IOCs

Analyzing Network IOCs (OBJ. 1.2)

Traffic Spikes (OBJ. 1.2)

Beaconing (OBJ. 1.2)

Irregular P2P Communications (OBJ. 1.2)

Rogue Devices (OBJ. 1.2)

Scans and Sweeps (OBJ. 1.2)

Nonstandard Port Usage (OBJ. 1.2)

TCP Ports (OBJ. 1.2)

UDP Ports (OBJ. 1.2)

Data Exfiltration (OBJ. 1.2)

Covert Channels (OBJ. 1.2)

Analysis of Network IOCs (OBJ. 1.2)

Quiz 13: Analyzing Network IOCs

Analyzing Host-related IOCs

Analyzing Host-related IOCs (OBJ. 1.2)

Host-related IOCs (OBJ. 1.2)

Malicious Processes (OBJ. 1.2)

Memory Forensics (OBJ. 1.2)

Consumption (OBJ. 1.2)

Disk and File System (OBJ. 1.2)

Unauthorized Privilege (OBJ. 1.2)

Unauthorized Software (OBJ. 1.2)

Unauthorized ChangeHardware (OBJ. 1.2)

Persistence (OBJ. 1.2)

Quiz 14: Analyzing Host-related IOCs

Analyzing Application-related IOCs

Analyzing Lateral Movement and Pivoting IOCs

Incident Response Preparation

Incident Response Preparation (OBJ. 3.3 & 4.2)

Incident Response Phases (OBJ. 3.3)

Documenting Procedures (OBJ. 3.3)

Data Criticality (OBJ. 3.3)

Communication Plan (OBJ. 3.3 & 4.2)

Reporting Requirements (OBJ. 3.3)

Response Coordination (OBJ. 3.3)

Business Continuity Plan (OBJ. 3.3)

Training and Testing (OBJ. 3.3)

Quiz 17: Incident Response Preparation

Detection and Containment

Containment, Eradication, Recovery, and Post-incident Actions

CER and Post-incident Actions (OBJ. 3.2, 3.3, & 4.2)

Containment (OBJ. 3.2)

Eradication (OBJ. 3.2)

Eradication Actions (OBJ. 3.2)

Recovery (OBJ. 3.2)

Recovery Actions (OBJ. 3.2)

Post-Incident Activities (OBJ. 3.3 & 4.2)

Lessons Learned (OBJ. 3.3 & 4.2)

Root Cause Analysis (OBJ. 3.3 & 4.2)

Quiz 19: Containment, Eradication, Recovery, and Post-incident Actionst

Risk Mitigation

Frameworks, Policies, and Procedures

Enumeration Tools

Enumeration Tools (OBJ. 2.1 & 2.2)

Nmap Discovery Scans (OBJ. 2.2)

Nmap Port Scans (OBJ. 2.2)

Nmap Port States (OBJ. 2.2)

Nmap Fingerprinting Scans (OBJ. 2.2)

Using Nmap (OBJ. 2.2)

Hping (OBJ. 2.2)

Angry IP Scanner (OBJ. 2.2)

Maltego (OBJ. 2.2)

Responder (OBJ. 2.2)

Wireless Assessment Tools (OBJ. 2.2)

Recon-ng (OBJ. 2.2)

Hashcat (OBJ. 2.2)

Testing Credential Security (OBJ. 2.2)

Quiz 22: Enumeration Tools

Vulnerability Scanning

Vulnerability Scanning (Introduction) (OBJ. 2.1 & 2.2)

Identifying Vulnerabilities (OBJ. 2.1)

Scanning Workflow (OBJ. 2.1)

Scope Considerations (OBJ. 2.1)

Scanner Types (OBJ. 2.1)

Scanning Parameters (OBJ. 2.1)

Scheduling and Constraints (OBJ. 2.1)

Vulnerability Feeds (OBJ. 2.1)

Scan Sensitivity (OBJ. 2.1)

Scanning Risks (OBJ. 2.1)

Conducting Scans (OBJ. 2.1 & 2.2)

Quiz 23: Vulnerability Scanning

Analyzing Output from Vulnerability Scanners

Analyzing Output from Vulnerability Scanners (OBJ. 2.1, 2.3, & 4.1)

Scan Reports (OBJ. 2.3 & 4.1)

Common Identifiers (OBJ. 2.3)

CVSS (OBJ. 2.3)

Interpreting CVSS (OBJ. 2.3)

Vulnerability Reports (OBJ. 2.1 & 2.3)

Nessus (OBJ. 2.2)

OpenVAS and Qualys (OBJ. 2.2)

Assessing Scan Outputs (OBJ. 2.2 & 2.3)

Quiz 24: Analyzing Output from Vulnerability Scanners

Mitigating Vulnerabilities

Identity and Access Management Solutions

Identity and Access Management Solutions (OBJ. 1.1)

Identity and Access Management (OBJ. 1.1)

Password Policies (OBJ. 1.1)

SSO and MFA (OBJ. 1.1)

Certificate Management (OBJ. 1.1)

Federation (OBJ. 1.1)

Passwordless Authentication (OBJ. 1.1)

Privilege Management (OBJ. 1.1)

IAM Auditing (OBJ. 1.1)

Conduct and Use Policies (OBJ. 1.1)

Account and Permissions Audits (OBJ. 1.1)

Quiz 26: Identity and Access Management Solutions

Network Architecture and Segmentation

Network Architecture and Segmentation (OBJ. 1.1, 1.4, & 2.5)

Asset and Change Management (OBJ. 2.5)

Network Architecture (OBJ. 1.1)

Segmentation (OBJ. 1.1)

Jumpbox (OBJ. 1.1)

Virtualization (OBJ. 1.1)

Virtualized Infrastructure (OBJ. 1.1)

Honeypots (OBJ. 1.4)

Zero Trust (OBJ. 1.1)

Configuring Network Segmentation (OBJ. 1.1)

Quiz 27: Network Architecture and Segmentation

Hardware Assurance Best Practices

Specialized Technology

Specialized Technology (OBJ. 2.1 & 2.4)

Mobile Vulnerabilities (OBJ. 2.1 & 2.4)

IoT Vulnerabilities (OBJ. 2.1 & 2.4)

Embedded System Vulnerabilities (OBJ. 2.1 & 2.4)

ICS & SCADA Vulnerabilities (OBJ. 2.1 & 2.4)

Mitigating Vulnerabilities (OBJ. 2.1 & 2.4)

Premise System Vulnerabilities (OBJ. 2.1 & 2.4)

Vehicular Vulnerabilities (OBJ. 2.1 & 2.4)

Quiz 29: Specialized Technology

Non-technical Data and Privacy Controls

Technical Data and Privacy Controls

Technical Data and Privacy Controls (OBJ. 1.1)

Access Controls (OBJ. 1.1)

File System Permissions (OBJ. 1.1)

Encryption (OBJ. 1.1)

Data Loss Prevention (OBJ. 1.1)

DLP Discovery and Classification (OBJ. 1.1)

Deidentification Controls (OBJ. 1.1)

DRM and Watermarking (OBJ. 1.1)

Analyzing Share Permissions (OBJ. 1.1)

Quiz 31: Technical Data and Privacy Controls

Mitigate Software Vulnerabilities and Attacks

Mitigate Software Vulnerabilities and Attacks (OBJ. 2.4 & 2.5)

SDLC Integration (OBJ. 2.5)

Execution and Escalation (OBJ. 2.4)

Overflow Attacks (OBJ. 2.4)

Race Conditions (OBJ. 2.5)

Improper Error Handling (OBJ. 2.5)

Design Vulnerabilities (OBJ. 2.4)

Platform Best Practices (OBJ. 2.5)

Metasploit Framework (OBJ. 2.2)

Quiz 32: Mitigate Software Vulnerabilities and Attacks

Mitigate Web Application Vulnerabilities and Attacks

Mitigate Web Application Vulnerabilities and Attacks (OBJ. 2.4 & 2.5)

Directory Traversal (OBJ. 2.4)

Cross-site Scripting (OBJ. 2.4)

SQL Injection (OBJ. 2.4)

XML Vulnerabilities (OBJ. 2.4)

Secure Coding (OBJ. 2.5)

Authentication Attacks (OBJ. 2.4 & 2.5)

Session Hijacking (OBJ. 2.4 & 2.5)

Server-Side Request Forgery (OBJ. 2.4)

Sensitive Data Exposure (OBJ. 2.5)

Clickjacking (OBJ. 2.4 & 2.5)

Web Application Vulnerabilities (OBJ. 2.4 & 2.5)

Quiz 33: Mitigate Web Application Vulnerabilities and Attackst

Analyzing Application Assessments

Cloud and Automation

Service-Oriented Architecture

Service-Oriented Architecture (OBJ. 1.1, 1.5, & 2.4)

SOA and Microservices (OBJ. 1.1)

SOAP (OBJ. 1.5 & 2.5)

SAML (OBJ. 1.5)

REST (OBJ. 1.5)

APIs, Webhooks, and Plugins (OBJ. 1.5)

Scripting (OBJ. 1.3 & 1.5)

Workflow Orchestration (OBJ. 1.5)

FAAS and Serverless (OBJ. 1.1)

Quiz 36: Service-Oriented Architecture

Cloud Infrastructure Assessments

Automation Concepts and Technologies

Automation Concepts and Technologies (OBJ. 1.5)

CICD (OBJ. 1.5)

DevSecOps (OBJ. 1.5)

IAC (OBJ. 1.5)

Machine Learning (OBJ. 1.5)

Data Enrichment (OBJ. 1.5)

SOAR (OBJ. 1.5)

Standardized Processes (OBJ. 1.5)

Single Pane of Glass (OBJ. 1.5)

Quiz 38: Automation Concepts and Technologies

Practice Test: CompTIA CySA+ (CS0-003) Practice Test

Conclusion

Audio Version of Training

OPEN FULL CURRICULUM

Requirements

Basic understanding of networking and network security.

Familiarity with the concepts from the Network+ and Security+ certifications.

A desire to learn intermediate-level cyber security skills.

Description of CySA+ Certification Training

Elevate your cybersecurity expertise with this all-encompassing course that prepares you for the CompTIA CySA+ (CS0-003) exam. Designed for cyber security professionals and enthusiasts, this course bridges the gap between foundational and advanced cyber security certifications.

Dive into real-world applications of cyber security concepts, mastering topics like vulnerability management, threat intelligence, incident response, and security architecture. Through hands-on exercises, you’ll gain practical skills in network forensics, endpoint protection, and configuring SIEM systems.

Build expertise in security operations, threat analysis, and vulnerability assessments.
Learn advanced incident response strategies, including detection, containment, and recovery.
Use forensic tools like Wireshark and tcpdump to analyze traffic and detect threats.
Architect secure networks with segmentation, zero trust, and endpoint monitoring.
Explore the latest cybersecurity tools and techniques, including sandboxing and SIEM.
Understand compliance frameworks, policies, and industry standards.

Whether you're pursuing the CySA+ certification or aiming to enhance your cyber security career, this course equips you with the skills and confidence to succeed. Take the first step toward becoming a cyber security expert.

Who Is This Course For

This course is perfect for those preparing for the CompTIA CySA+ (CS0-003) exam, as well as cyber security professionals seeking to deepen their knowledge of security operations, threat intelligence, and incident response.

Course Instructor

Jason Dion

Jason Dion is an Adjunct Instructor at Liberty University's College of Engineering and Computational Science and Anne Arundel Community College's Department of Computing Technologies. With networking experience dating back to 1992, Jason has held roles such as Network Engineer, Deputy Director of a Network Operations Center, and Information Systems Officer for large organizations worldwide.

He holds multiple IT certifications, including CISSP, CEH, CNDA, DFE, DMC, Security+, Network+, A+, and ITIL v3. Jason also has a Master's in Information Technology specializing in Information Assurance, a Master's in Pastoral Counseling, and a Bachelor's in Human Resources Management.

Passionate about sharing his knowledge, Jason helps students develop practical skills in information security and IT management, drawing on his decades of hands-on experience.

Read More

Read Less

Testimonials

★★★★★

Brandon T.

Instructor goes above and beyond by giving real world examples on how to use and implement the information you are learning. This helps understand the concepts required on the exam better as well as prepare you for the type of work you would be doing.

★★★★★

Luigi B.

This is the third course from Jason Dion that I use to get ready for a CompTIA certification exam and Jason never makes you get disappointed.

The course is complete and clear, I've passed the exam yesterday evening with a 809/900 score on my first attempt.

I surely recommend this course. Great job!

★★★★★

Joseph K.

Jason Dion is top notch training. Enjoyed the course and his teaching style!

Show More

Show Less

Frequently Asked Questions

What is CySA+ equivalent to?

CySA+ is equivalent to other intermediate-level certifications like EC-Council's CEH or GIAC’s GCIH. It focuses on threat detection, analysis, and response from a defensive, or blue team, perspective.

Should I take CySA+ or PenTest+ first?

Choose CySA+ if you’re more interested in defensive (blue team) roles, like security analyst, and PenTest+ if you prefer offensive (red team) roles, such as penetration testing. Your career goals should guide your decision.

When does the course start and finish?

The CySA+ Certification Complete Course starts now and never ends! It is a completely self-paced online course - you decide when you start and when you finish.

Students Who Took This Course Also Liked

Guarantee Your Cyber Security Career with the StationX Master’s Program!

Get real work experience and a job guarantee in the StationX Master’s Program. Dive into tailored training, mentorship, and community support that accelerates your career.

Job Guarantee & Real Work Experience: Launch your cybersecurity career with guaranteed placement and hands-on experience within our Master’s Program.
30,000+ Courses and Labs: Hands-on, comprehensive training covering all the skills you need to excel in any role in the field.
Pass Certification Exams: Resources and exam simulations that help you succeed with confidence.
Mentorship and Career Coaching: Personalized advice, resume help, and interview coaching to boost your career.
Community Access: Engage with a thriving community of peers and professionals for ongoing support.
Advanced Training for Real-World Skills: Courses and simulations designed for real job scenarios.
Exclusive Events and Networking: Join events and exclusive networking opportunities to expand your connections.

TAKE THE NEXT STEP IN YOUR CAREER TODAY!

UNLOCK YOUR MASTER’S PROGRAM

UNLOCK THE STATIONX MASTER’S PROGRAM

Your Path to a Guaranteed Cybersecurity Job & Real Experience

In the StationX Master’s Program, you’ll gain:

30,000+ Cybersecurity Courses & Labs
Pass Top Cybersecurity Certification Exams
Cybersecurity Mentorship & Career Support
Dedicated Cybersecurity Community
Advanced Real-World Cybersecurity Training
Exclusive Cybersecurity Networking

UNLOCK YOUR CAREER

CompTIA CySA+ Certification Complete Course (CS0-003)

What You’ll Learn

Included in the CySA+ Certification Complete Course

Suitable for the Following Careers

Course Content

Training Overview

Introduction

Identify Security Control Types

Threat Intelligence Sharing

Classifying Threats

Threat Hunting

Network Forensics

Appliance Monitoring

Endpoint Monitoring

Email Monitoring

Configuring Your SIEM

Analyzing Your SIEM

Digital Forensics

Analyzing Network IOCs

Analyzing Host-related IOCs

Analyzing Application-related IOCs

Analyzing Lateral Movement and Pivoting IOCs

Incident Response Preparation

Detection and Containment

Containment, Eradication, Recovery, and Post-incident Actions

Risk Mitigation

Frameworks, Policies, and Procedures

Enumeration Tools

Vulnerability Scanning

Analyzing Output from Vulnerability Scanners

Mitigating Vulnerabilities

Identity and Access Management Solutions

Network Architecture and Segmentation

Hardware Assurance Best Practices

Specialized Technology

Non-technical Data and Privacy Controls

Technical Data and Privacy Controls

Mitigate Software Vulnerabilities and Attacks

Mitigate Web Application Vulnerabilities and Attacks

Analyzing Application Assessments

Cloud and Automation

Service-Oriented Architecture

Cloud Infrastructure Assessments

Automation Concepts and Technologies

Practice Test: CompTIA CySA+ (CS0-003) Practice Test

Conclusion

Audio Version of Training

OPEN FULL CURRICULUM

Requirements

Description of CySA+ Certification Training

Who Is This Course For

Course Instructor

Testimonials

Frequently Asked Questions

Students Who Took This Course Also Liked

CompTIA CySA+ Practice Questions: CS0-003 Accelerator

CompTIA CySA+ Exam Objectives: Practice Flash Cards

Guarantee Your Cyber Security Career with the StationX Master’s Program!

Your Path to a Guaranteed Cybersecurity Job & Real Experience

StationX Accelerator Pro

StationX Accelerator Premium

StationX Master's Program