KNOWLEDGE GRID // 59 MODULES

NETWORK & CYBERSECURITY CORE

A structured learning lab covering networking, infrastructure, security operations, cloud and SOC skills. Click any subtopic for a dedicated explanation and interactive model.

59modules

540subtopics

3Dvisual lab

NETWORK DEVICES // 3D LAB

Infrastructure Device Lab

Open a device to learn what it does, how traffic moves through it, basic configuration, verification and security hardening. The full 3D simulation appears inside the device module.

SOC / CYBER CAREER MATRIX

Skills & High-Demand Tools

Skill Category	Technical Skills	High-Demand Tools
	TCP/IP, OSI Model, DNS, DHCP, HTTP/HTTPS, FTP, SSH, VPN, VLAN, Routing, Switching	Wireshark \| Cisco Packet Tracer \| GNS3 \| Nmap
	Windows Administration, Linux Administration, Active Directory, Windows Registry, Services, Processes, Permissions, PowerShell/CMD	Windows Server \| Ubuntu \| Kali Linux \| PowerShell \| CMD
	CIA Triad, Risk Management, Security Controls, Defense in Depth, Zero Trust, Least Privilege, Asset Management, Threat Modeling	CIS Controls \| NIST Cybersecurity Framework \| MITRE ATT&CK
	Firewalls, IDS, IPS, NAC, VPN, Proxy, Segmentation, ACLs	pfSense \| Snort \| Suricata \| Palo Alto \| Fortinet \| Cisco ASA
	Log Analysis, Correlation Rules, Alert Investigation, Parsing, Normalization, Dashboards, Detection Rules, Case Management	Splunk \| Microsoft Sentinel \| QRadar \| Elastic SIEM \| Wazuh \| ArcSight
	Endpoint Monitoring, Threat Detection, Malware Analysis, Behavioral Telemetry, Isolation, Response Actions, XDR Correlation	Microsoft Defender XDR \| CrowdStrike Falcon \| SentinelOne \| Sophos \| Cortex XDR
	IOC, TTP, Threat Hunting, Indicator Enrichment, Confidence, Attribution Limits, Threat Feeds	VirusTotal \| AlienVault OTX \| MISP \| ThreatFox \| Shodan
	Detection, Triage, Containment, Eradication, Recovery, Lessons Learned, Evidence Preservation	Velociraptor \| KAPE \| FTK Imager \| Autopsy \| Volatility
	Disk Analysis, Memory Analysis, Timeline Analysis, File Metadata, Hashing, Evidence Handling	Autopsy \| FTK Imager \| Volatility \| Redline
	Vulnerability Assessment, Risk Prioritization, CVSS, Asset Inventory, Remediation Validation, Exception Handling	Nessus \| OpenVAS \| Qualys \| Rapid7 InsightVM
	Phishing Analysis, SPF, DKIM, DMARC, Mail Headers, Attachment Analysis, URL Analysis	Microsoft Defender for Office 365 \| Proofpoint \| Mimecast
	MFA, RBAC, Privileged Access, Authentication, Authorization, Lifecycle Management, SSO	Active Directory \| Entra ID \| Okta
	AWS Security, Azure Security, IAM, Security Groups, Network Segmentation, Secrets, Cloud Logging	AWS Security Hub \| Azure Defender \| Microsoft Sentinel \| Prisma Cloud
	Static Analysis, Dynamic Analysis, Indicators, Behavioral Analysis, Sandboxing, Persistence	ANY.RUN \| Hybrid Analysis \| REMnux \| PEStudio
	OWASP Top 10, SQL Injection, XSS, CSRF, Authentication, Session Security, Security Headers	Burp Suite Community \| OWASP ZAP
	Network Traffic Analysis, Ethernet Frames, IP Packets, TCP Streams, DNS, HTTP, TLS	Wireshark \| tcpdump \| Zeek
	Windows Event Logs, Syslog, Sysmon, Parsing, Retention, Normalization, Alerting	Sysmon \| Elastic Stack \| Graylog
	IOC Search, Behavioral Analysis, Hypothesis, Querying, Baselining, Hunting Notes	Microsoft Defender \| Splunk \| Sigma Rules \| Velociraptor
	Bash, PowerShell, Python, Regex, APIs, JSON, Git	Visual Studio Code \| Git \| GitHub
	Sigma Rules, YARA Rules, Detection Logic, False Positives, Coverage, Testing	Sigma \| YARA
	ISO 27001, PCI DSS, HIPAA, GDPR, SOC 2, Control Mapping, Evidence	Audit Tools \| GRC Platforms
	Docker, Kubernetes Security, Images, Registries, Runtime Controls, Secrets, Network Policies	Docker \| Kubernetes \| Trivy
	Cloud Monitoring, CloudTrail, Azure Monitor, Google Cloud Logging, Audit Events, Alerting	AWS CloudTrail \| Azure Monitor \| Google Cloud Logging

CURRICULUM INDEX

Cybersecurity Skills // PRIORITY ★★★★★

Networking

3D // INTERACTIVE SIMULATIONNetworking — Professional Learning Model

A concept-focused visual model showing the major components, evidence sources and control points for Networking.

DEFINITION

Networking is the engineering discipline of connecting hosts, networks and services so data can move predictably between endpoints.

EXPLANATION

Students should learn the TCP/IP stack, addressing, name resolution, transport behavior, routing, switching and common services before relying on security tools.

LEARNING OBJECTIVES

Define the core concepts; explain the architecture and workflow; identify normal and abnormal evidence; practice in an authorized lab; and document defensive findings.

SUBTOPICS // CLICK TO OPEN

KEY POINTS

SECURITY & ATTACKS

Common security concerns include misconfiguration, credential abuse, unauthorized access, spoofing, data exposure, evasion, service disruption and lateral movement. Focus on prevention, detection and response in authorized environments.

TROUBLESHOOTING

Start by defining the symptom and scope. Check configuration and dependencies, validate logs/telemetry, reproduce safely in a lab, isolate the failing layer or component, change one variable at a time, and document the result.

TOOLS / PRACTICE

Wireshark | Cisco Packet Tracer | GNS3 | Nmap

Open full study notes

# Networking ## Core skills - TCP/IP - OSI Model - DNS - DHCP - HTTP/HTTPS - FTP - SSH - VPN - VLAN - Routing - Switching ## Tools - Wireshark - Cisco Packet Tracer - GNS3 - Nmap ## Study approach Understand the architecture first, then practice observation and defensive troubleshooting in a controlled lab. Record commands, evidence, assumptions and conclusions.