Blue_Team_Midterm_Study_Guide_DEPRECATED.md

Blue Team Midterm (DEPRECATED)

• Understand what multi factor authentication (MFA) is
• Understand firewalls and why you would place multiple on a network
• Understand Network Segmentation
• Understand Network Isolation
• Virtual LAN
• Virtual Private Network (VPN)
• Understanding Security Controls
• Read and Write Firewall Rules

Know what major regulatory bodies govern (you do not need to know every detail about the regulations):

• PCI DSS

• FERPA

• HIPAA

• SOX

• Be able to read CVEs and take action based on the threat and remediation

Understand the Following Concepts:

• SQL injections
• XXS
• Buffer overlow
• DOS

Understand what the following are:

• CVSS
• CPE
• CVE
• CCE

Understand the purpose and usage of tools such as:

• Metasploit

• Nessus

• nmap

• WireShark

• traceroute

• netstat

• ping

• John the Ripper

• Understand the phases of NIST penetration testing process

• Be able to read log file and parse them using Python or some other method

Know what these do:

• SIEM

• IDS and (H)ost based IDS

• IPS and (H)ost based IPS

• Know what beaconing is and how to detect it

• Know what a heuristic is

• Know what signature based detection is