1. ๐ Cybersecurity Fundamentals
- www.nist.gov/cybersecurity
- www.cisa.gov
- www.cybersecurityguide.org
- www.sans.org
- www.isc2.org
- www.comptia.org
- www.cybrary.it
- www.tryhackme.com
- www.hackthebox.com
2. ๐ก️ Network Security
- www.cisco.com/security
- www.paloaltonetworks.com
- www.fortinet.com
- www.checkpoint.com
- www.sonicwall.com
- www.wireshark.org
- www.snort.org
- www.suricata.io
- www.zeek.org
3. ๐จ๐ป Ethical Hacking / Penetration Testing
- www.hackthebox.com
- www.tryhackme.com
- www.offsec.com
- www.eccouncil.org
- www.tcm-sec.com
- www.hackerone.com
- www.bugcrowd.com
- www.portswigger.net
- www.metasploit.com
- www.exploit-db.com
4. ๐ Web Application Security
Very important: OWASP is one of the most important resources for application security. Its OWASP Top 10 covers major web application risks. (owasp.org)
- www.owasp.org
- www.owasp.org/www-project-top-ten
- www.portswigger.net/web-security
- www.burp-suite.com
- www.zaproxy.org
- www.w3.org/security
- www.cwe.mitre.org
- www.cve.org
- www.nvd.nist.gov
Important topics:
- SQL Injection
- XSS
- CSRF
- SSRF
- Authentication vulnerabilities
- Authorization / IDOR
- API Security
- Session Security
- Security Misconfiguration
- Supply-chain security
5. ๐ฅ️ Endpoint Security
- www.crowdstrike.com
- www.microsoft.com/security
- www.sentinelone.com
- www.trellix.com
- www.sophos.com
- www.bitdefender.com
- www.eset.com
- www.malwarebytes.com
6. ๐จ SOC — Security Operations Center
- www.splunk.com
- www.microsoft.com/security/business/siem-and-xdr
- www.elastic.co/security
- www.ibm.com/products/qradar-siem
- www.exabeam.com
- www.logrhythm.com
- www.sumologic.com
- www.graylog.org
Learn:
SIEM → Log Analysis → Alert Triage → Detection → Investigation → Incident Response
7. ๐ SIEM / XDR
- www.splunk.com/en_us/products/splunk-enterprise.html
- www.elastic.co/security/siem
- www.microsoft.com/security/business/siem-and-xdr
- www.ibm.com/qradar
- www.paloaltonetworks.com/cortex
- www.crowdstrike.com/platform/xdr
- www.sentinelone.com/platform
8. ๐ต️ Threat Intelligence
- www.mitre.org
- www.attack.mitre.org
- www.cisa.gov
- www.virustotal.com
- www.abuse.ch
- www.malware-traffic-analysis.net
- www.recordedfuture.com
- www.mandiant.com
- www.threatconnect.com
9. ๐ฆ Malware Analysis
- www.virustotal.com
- www.malwarebytes.com
- www.hybrid-analysis.com
- www.any.run
- www.joesandbox.com
- www.remnux.org
- www.flare-on.com
- www.malware-traffic-analysis.net
10. ๐งช Vulnerability Management
- www.nist.gov
- www.nvd.nist.gov
- www.cve.org
- www.cisa.gov/known-exploited-vulnerabilities
- www.tenable.com
- www.qualys.com
- www.rapid7.com
- www.greenbone.net
- www.openvas.org
11. ☁️ Cloud Security
AWS Security
- www.aws.amazon.com/security
- www.aws.amazon.com/iam
- www.aws.amazon.com/guardduty
- www.aws.amazon.com/security-hub
- www.aws.amazon.com/waf
Microsoft Azure Security
Google Cloud Security
12. ๐ IAM — Identity & Access Management
- www.okta.com
- www.microsoft.com/entra
- www.cyberark.com
- www.pingidentity.com
- www.auth0.com
- www.keycloak.org
- www.onelogin.com
Important topics:
- IAM
- PAM
- SSO
- MFA
- OAuth 2.0
- OpenID Connect
- SAML
- RBAC
- ABAC
- Zero Trust
13. ๐ Cryptography
- www.cryptography.io
- www.nist.gov/cryptography
- www.rfc-editor.org
- www.openssl.org
- www.gnupg.org
- www.cloudflare.com/learning/cryptography
Learn:
- Encryption
- Hashing
- Digital signatures
- PKI
- TLS/SSL
- AES
- RSA
- ECC
- Public/private keys
14. ๐ต️ Digital Forensics & Incident Response — DFIR
- www.sans.org/digital-forensics
- www.autopsy.com
- www.sleuthkit.org
- www.volatilityfoundation.org
- www.magnetforensics.com
- www.kroll.com
- www.cisa.gov
15. ๐งฐ Security Tools
- www.kali.org
- www.wireshark.org
- www.nmap.org
- www.metasploit.com
- www.zaproxy.org
- www.portswigger.net/burp
- www.sqlmap.org
- www.openvas.org
- www.wazuh.com
- www.snort.org
- www.suricata.io
16. ๐ง Linux Security
17. ๐ Zero Trust
- www.nist.gov/publications/zero-trust-architecture
- www.cisa.gov/zero-trust-maturity-model
- www.cloudflare.com/zero-trust
- www.microsoft.com/security/business/zero-trust
- www.paloaltonetworks.com/zero-trust
18. ๐️ Application / DevSecOps
- www.sonarsource.com
- www.snyk.io
- www.checkmarx.com
- www.veracode.com
- www.semgrep.dev
- www.github.com/security
- www.gitlab.com/solutions/dev-sec-ops
Important areas:
SAST → DAST → SCA → Secrets Scanning → Container Security → IaC Security → CI/CD Security
19. ๐ณ Container / Kubernetes Security
- www.docker.com
- www.kubernetes.io
- www.aquasec.com
- www.sysdig.com
- www.twistlock.com
- www.trivy.dev
- www.cisecurity.org
20. ๐ GRC — Governance, Risk & Compliance
- www.nist.gov
- www.iso.org/isoiec-27001-information-security.html
- www.isaca.org
- www.cisecurity.org
- www.pcisecuritystandards.org
- www.aicpa-cima.com
- www.socreports.com
21. ๐ Security Standards / Frameworks
- www.nist.gov/cyberframework
- www.cisecurity.org/controls
- www.iso.org
- www.owasp.org
- www.mitre.org
- www.attack.mitre.org
- www.cisa.gov
- www.cve.org
- www.nvd.nist.gov
22. ๐ Bug Bounty
- www.hackerone.com
- www.bugcrowd.com
- www.intigriti.com
- www.yeswehack.com
- www.hackenproof.com
- www.synack.com
23. ๐ Cybersecurity Learning
- www.tryhackme.com
- www.hackthebox.com
- www.cybrary.it
- www.sans.org
- www.coursera.org
- www.udemy.com
- www.edx.org
- www.cyberdefenders.org
- www.picoctf.org
24. ๐ Cybersecurity Certifications
Beginner
Intermediate
- www.comptia.org/certifications/cybersecurity
- www.eccouncil.org/train-certify/certified-ethical-hacker-ceh
- www.offsec.com/courses/pen-200
Advanced
- www.isc2.org/certifications/cissp
- www.giac.org
- www.isaca.org/credentialing/cisa
- www.isaca.org/credentialing/cism
25. ๐ฐ Cybersecurity News
- www.bleepingcomputer.com
- www.theregister.com/security
- www.darkreading.com
- www.securityweek.com
- www.threatpost.com
- www.schneier.com
- www.krebsOnSecurity.com
- www.cisa.gov/news-events
26. ๐ฌ Cybersecurity Research
- www.arxiv.org
- www.usenix.org
- www.ieee.org
- www.acm.org
- www.ndss-symposium.org
- www.blackhat.com
- www.defcon.org
๐ฏ Cybersecurity Career Roadmap
Agar job/career ke liye Cybersecurity seekh rahe ho, to main is order ko recommend karunga:
Networking → Linux → Windows → Security Fundamentals → Python/Bash → Wireshark → Nmap → Web Security → OWASP → SIEM → SOC → Incident Response → Threat Intelligence → Cloud Security → IAM → DevSecOps → Security Automation
Career ke major tracks
- ๐ก️ SOC Analyst → SIEM + Networking + Windows/Linux + Incident Response
- ๐ด Penetration Tester → Networking + Linux + Web Security + Burp Suite + Kali
- ☁️ Cloud Security Engineer → AWS/Azure/GCP + IAM + Containers + Kubernetes
- ๐ Application Security Engineer → OWASP + APIs + SAST/DAST + DevSecOps
- ๐ต️ DFIR Analyst → Digital Forensics + Malware + Incident Response
- ๐ง Threat Intelligence Analyst → MITRE ATT&CK + OSINT + Threat Feeds
- ๐ GRC Analyst → NIST + ISO 27001 + Risk + Compliance
- ๐ค AI Security → LLM Security + AI Agents + Prompt Injection + Data Security + AI Governance
No comments:
Post a Comment