# Codelivly learning paths > 81 free learning paths: ordered sets of rooms that build one skill area, each ending in a path exam. Canonical: https://codelivly.com/learning-paths - [Security Monitoring and Compliance Automation](https://codelivly.com/learning-paths/security-monitoring-and-compliance-automation) - Advanced, 5 rooms. Master continuous security monitoring, compliance as code, and automated auditing to ensure persistent software supply… - [Software Supply Chain Security](https://codelivly.com/learning-paths/software-supply-chain-security) - Advanced, 5 rooms. Master the defense of the software supply chain. Learn to implement SBOMs, cryptographic artifact signing, and the SLSA… - [Secrets Management and Pipeline Hardening](https://codelivly.com/learning-paths/secrets-management-and-pipeline-hardening) - Intermediate, 5 rooms. Master the secure lifecycle of credentials and the fortification of CI/CD pipelines against supply chain attacks and… - [Infrastructure as Code Security](https://codelivly.com/learning-paths/infrastructure-as-code-security) - Beginner, 5 rooms. Master the principles of securing Infrastructure as Code (IaC), including static analysis, Policy as Code, and drift… - [Application Security Testing in Pipelines](https://codelivly.com/learning-paths/application-security-testing-in-pipelines) - Intermediate, 5 rooms. Master the integration of SAST, SCA, DAST, and secret scanning into CI/CD pipelines to automate vulnerability detection… - [Secure SDLC and Threat Modeling](https://codelivly.com/learning-paths/secure-sdlc-and-threat-modeling) - Intermediate, 5 rooms. Master the integration of security into the Software Development Life Cycle. - [Advanced Intelligence Analysis and Reporting](https://codelivly.com/learning-paths/cti-advanced-analysis-reporting) - Advanced, 5 rooms. Produce decision ready threat intelligence: risk based strategic analysis, competing hypotheses and bias control,… - [Threat Intelligence Operations and Sharing](https://codelivly.com/learning-paths/cti-operations-and-sharing) - Intermediate, 5 rooms. Structure, exchange, curate and disseminate threat intelligence with STIX 2.1, TAXII 2.1, MISP and OpenCTI, and make it… - [Threat Actor and Campaign Investigation](https://codelivly.com/learning-paths/cti-threat-actor-investigation) - Intermediate, 5 rooms. Investigate adversaries by their behaviour: map intrusions to MITRE ATT&CK, model them with the Diamond Model, profile… - [OSINT and Indicator Analysis](https://codelivly.com/learning-paths/cti-osint-indicator-analysis) - Beginner, 5 rooms. Collect OSINT safely, analyse IPs, domains, DNS, URLs, hashes and certificates, pivot through infrastructure, and… - [Cyber Threat Intelligence Foundations](https://codelivly.com/learning-paths/cti-foundations) - Beginner, 5 rooms. The core of threat intelligence work: requirements, the intelligence lifecycle, threat actors, sources and collection,… - [CI/CD Pipeline Fundamentals](https://codelivly.com/learning-paths/cicd-pipeline-fundamentals) - Intermediate, 5 rooms. Master the principles, stages, and security best practices of Continuous Integration and Continuous Deployment to… - [Software Development and Git Fundamentals](https://codelivly.com/learning-paths/software-development-and-git-fundamentals) - Beginner, 5 rooms. Master the core principles of software development, version control with Git, and secure coding practices to build a… - [Automated AI Security Testing](https://codelivly.com/learning-paths/automated-ai-security-testing) - Advanced, 5 rooms. Master automated AI security testing methodologies, leveraging open-source frameworks to continuously evaluate LLMs and… - [AI Red Team Reporting and Responsible Disclosure](https://codelivly.com/learning-paths/ai-red-team-reporting-responsible-disclosure) - Advanced, 5 rooms. Master the art of documenting, scoring, and responsibly disclosing AI security vulnerabilities using industry-standard… - [AI Red Team Methodology](https://codelivly.com/learning-paths/ai-red-team-methodology) - Advanced, 4 rooms. Master advanced AI red teaming methodologies, from scoping and reconnaissance to exploiting agentic systems and… - [Multi-Agent and MCP Security](https://codelivly.com/learning-paths/multi-agent-mcp-security) - Advanced, 5 rooms. Master advanced security concepts for multi-agent systems and the Model Context Protocol (MCP), focusing on inter-agent… - [Agent Exploitation](https://codelivly.com/learning-paths/agent-exploitation) - Advanced, 5 rooms. Master advanced offensive techniques against autonomous AI agents, including tool hijacking, memory poisoning, and… - [AI Agent Fundamentals and Trust Boundaries](https://codelivly.com/learning-paths/ai-agent-fundamentals-trust-boundaries) - Advanced, 4 rooms. Master the architecture of autonomous AI agents, multi-agent systems, and the critical trust boundaries that separate… - [Data and Model Poisoning](https://codelivly.com/learning-paths/data-model-poisoning) - Intermediate, 5 rooms. Master the techniques of data and model poisoning in AI systems. - [RAG and Vector Database Attacks](https://codelivly.com/learning-paths/rag-and-vector-database-attacks) - Intermediate, 5 rooms. Master the unique security risks of Retrieval-Augmented Generation (RAG) and vector databases. - [AI API and Function-Calling Attacks](https://codelivly.com/learning-paths/ai-api-and-function-calling-attacks) - Intermediate, 5 rooms. Master the security risks of LLM function calling and API integrations. - [Insecure Output Handling and Downstream Attacks](https://codelivly.com/learning-paths/insecure-output-handling-downstream-attacks) - Intermediate, 5 rooms. Master the risks of Insecure Output Handling (OWASP LLM07). Learn how LLM-generated content can trigger XSS, SSRF, and… - [System Prompt and Data Extraction](https://codelivly.com/learning-paths/system-prompt-and-data-extraction) - Intermediate, 4 rooms. Master the art of extracting hidden system prompts and sensitive training data from LLMs through advanced prompt… - [Jailbreaking and Guardrail Bypass](https://codelivly.com/learning-paths/jailbreaking-and-guardrail-bypass) - Intermediate, 5 rooms. Master advanced LLM jailbreaking techniques and learn how to systematically bypass AI safety guardrails through… - [Prompt Injection Fundamentals](https://codelivly.com/learning-paths/prompt-injection-fundamentals) - Intermediate, 5 rooms. Master the core mechanics of prompt injection. Learn how attackers manipulate LLM inputs to bypass guardrails, leak… - [AI Application Architecture and Attack Surface](https://codelivly.com/learning-paths/ai-application-architecture-and-attack-surface) - Beginner, 5 rooms. Understand the core components of AI applications and map the unique attack surfaces introduced by LLMs, vector… - [Python for AI Security Testing](https://codelivly.com/learning-paths/python-for-ai-security-testing) - Beginner, 6 rooms. Master Python fundamentals and libraries to automate AI red teaming, parse LLM APIs, and build robust security… - [AI and Machine Learning Fundamentals](https://codelivly.com/learning-paths/ai-and-machine-learning-fundamentals) - Beginner, 5 rooms. Master the core concepts of AI and ML. Understand model architectures, training pipelines, and the foundational… - [Cloud Incident Response and Forensics](https://codelivly.com/learning-paths/cloud-incident-response-and-forensics) - Advanced, 3 rooms. Master cloud incident response and digital forensics. Learn to detect, contain, and investigate security breaches in… - [Cloud Data Governance and DLP](https://codelivly.com/learning-paths/cloud-data-governance-and-dlp) - Advanced, 3 rooms. Master cloud data security. Learn to implement data classification, Data Loss Prevention (DLP), and governance… - [Cloud-Native Application Security](https://codelivly.com/learning-paths/cloud-native-application-security) - Advanced, 3 rooms. Master the security of modern cloud applications. Learn to secure containers, serverless functions, CI/CD pipelines,… - [Cloud Networking Attack Surface](https://codelivly.com/learning-paths/cloud-networking-attack-surface) - Advanced, 3 rooms. Master cloud networking security. Learn to identify and exploit misconfigurations in VPCs, security groups, load… - [Cloud Attack Techniques and Offensive Security](https://codelivly.com/learning-paths/cloud-attack-techniques-and-offensive-security) - Advanced, 4 rooms. Master offensive cloud security. Learn to simulate real-world attacks, exploit misconfigurations, and understand… - [Cloud Security Posture Management and Compliance](https://codelivly.com/learning-paths/cloud-security-posture-management-and-compliance) - Advanced, 3 rooms. Master CSPM, continuous compliance, configuration drift detection, and automated remediation in multi-cloud… - [Infrastructure as Code and DevSecOps](https://codelivly.com/learning-paths/infrastructure-as-code-and-devsecops) - Advanced, 3 rooms. Master secure CI/CD pipelines, IaC scanning, and automated compliance to embed security from code to cloud. - [Container and Kubernetes Security](https://codelivly.com/learning-paths/container-and-kubernetes-security) - Advanced, 4 rooms. Master the security of containerized workloads and Kubernetes clusters. - [Cloud Infrastructure and Storage Security](https://codelivly.com/learning-paths/cloud-infrastructure-and-storage-security) - Intermediate, 4 rooms. Master the security of cloud compute, storage, and networking. - [Cloud Identity and Access Management](https://codelivly.com/learning-paths/cloud-identity-and-access-management) - Intermediate, 4 rooms. Master IAM, RBAC, ABAC, identity federation, and privileged access management to secure identities across multi-cloud… - [Cloud Platform Fundamentals](https://codelivly.com/learning-paths/cloud-platform-fundamentals) - Beginner, 5 rooms. Master the core concepts of cloud computing, the shared responsibility model, and foundational services across AWS,… - [Scripting and Automation for Malware Analysis](https://codelivly.com/learning-paths/scripting-and-automation-for-malware-analysis) - Advanced, 3 rooms. Master Python, IDAPython, and Ghidra scripting to automate malware analysis. - [Malware Classification and Detection Engineering](https://codelivly.com/learning-paths/malware-classification-and-detection-engineering) - Advanced, 3 rooms. Master malware classification and detection engineering. Learn to map threats to MITRE ATT&CK, write YARA and Sigma… - [Unpacking and Anti-Analysis Evasion](https://codelivly.com/learning-paths/unpacking-and-anti-analysis-evasion) - Advanced, 3 rooms. Advanced malware analysis techniques for unpacking protected binaries and identifying anti analysis and evasion… - [Advanced Static and Dynamic Analysis](https://codelivly.com/learning-paths/advanced-static-and-dynamic-analysis) - Advanced, 4 rooms. Master advanced reverse engineering techniques. Dive deep into complex control flow, custom algorithm recognition,… - [Reverse Engineering Fundamentals](https://codelivly.com/learning-paths/reverse-engineering-fundamentals) - Intermediate, 5 rooms. Master the core concepts of reverse engineering. Learn x86/x64 assembly, binary analysis, and essential tools like… - [Legal Procedure and Expert Testimony](https://codelivly.com/learning-paths/legal-procedure-and-expert-testimony) - Advanced, 2 rooms. Master legal procedures and expert testimony in DFIR. Learn to maintain chain of custody, write defensible reports, and… - [Timeline Analysis and Artifact Correlation](https://codelivly.com/learning-paths/timeline-analysis-and-artifact-correlation) - Advanced, 3 rooms. Master timeline analysis and artifact correlation. Learn to merge disparate forensic data sources into a unified,… - [Cloud and Email Forensics](https://codelivly.com/learning-paths/cloud-and-email-forensics) - Intermediate, 3 rooms. Master cloud and email forensics. Learn to investigate Microsoft 365, Google Workspace, email headers, and cloud logs… - [Mobile Device Forensics](https://codelivly.com/learning-paths/mobile-device-forensics) - Intermediate, 4 rooms. Master mobile device forensics. Learn to securely acquire, analyze, and extract critical digital evidence from iOS and… - [DFIR Reporting and Case Management](https://codelivly.com/learning-paths/dfir-reporting-and-case-management) - Intermediate, 3 rooms. Master DFIR reporting and case management. Learn to document incidents, maintain chain of custody, and communicate… - [Malware Analysis Fundamentals](https://codelivly.com/learning-paths/malware-analysis-fundamentals) - Beginner, 4 rooms. Master the basics of malware analysis. Learn to build a secure lab, perform static and dynamic analysis, and extract… - [Network Forensics](https://codelivly.com/learning-paths/network-forensics) - Intermediate, 4 rooms. Master PCAP analysis, protocol deep-dives, TLS decryption, and network threat hunting to uncover cyber attacks and data… - [Memory Forensics](https://codelivly.com/learning-paths/memory-forensics) - Advanced, 4 rooms. Master the acquisition and analysis of volatile memory (RAM) to uncover hidden malware, active network connections, and… - [Disk and File System Forensics](https://codelivly.com/learning-paths/disk-and-file-system-forensics) - Beginner, 5 rooms. Master the acquisition, preservation, and deep analysis of disk drives to uncover hidden evidence and recover deleted… - [Digital Forensics Fundamentals](https://codelivly.com/learning-paths/digital-forensics-fundamentals) - Beginner, 5 rooms. Master the core principles of digital forensics, including evidence handling, chain of custody, and the systematic… - [Wireless Networking Fundamentals](https://codelivly.com/learning-paths/wireless-networking-fundamentals) - Beginner, 3 rooms. Master the core concepts of wireless networking, including RF physics, IEEE 802.11 standards, Wi-Fi security protocols,… - [Network Troubleshooting and Monitoring](https://codelivly.com/learning-paths/network-troubleshooting-and-monitoring) - Intermediate, 4 rooms. Master network troubleshooting and monitoring using advanced tools, telemetry, and structured methodologies to ensure… - [Network Automation & Scripting](https://codelivly.com/learning-paths/network-automation-scripting) - Intermediate, 3 rooms. Master network automation using Python, Ansible, and NETCONF/RESTCONF to eliminate manual errors, enforce compliance,… - [Network Security and Hardening](https://codelivly.com/learning-paths/network-security-and-hardening) - Intermediate, 4 rooms. Master network defense strategies, firewall architectures, IDS/IPS, Zero Trust, and advanced hardening techniques to… - [WAN, VPN and Cloud Networking](https://codelivly.com/learning-paths/wan-vpn-and-cloud-networking) - Intermediate, 3 rooms. Master wide-area networks, IPsec VPNs, SD-WAN, and cloud networking. - [Network Services Administration](https://codelivly.com/learning-paths/network-services-administration) - Intermediate, 4 rooms. Master the administration, hardening, and exploitation of core enterprise network services like DNS, DHCP, SMB, and… - [Network Design and Architecture](https://codelivly.com/learning-paths/network-design-and-architecture) - Advanced, 4 rooms. Master enterprise network design, from hierarchical models and high availability to modern spine-leaf topologies and… - [Pentest Methodology & Reporting](https://codelivly.com/learning-paths/pentest-methodology-reporting) - Intermediate, 6 rooms. Master the end-to-end penetration testing lifecycle. Learn scoping, execution, risk rating, and how to write… - [Routing & Switching Fundamentals](https://codelivly.com/learning-paths/routing-switching-fundamentals) - Beginner, 6 rooms. Master the core concepts of computer networking, including the OSI model, TCP/IP, subnetting, VLANs, and basic… - [Web Application Security](https://codelivly.com/learning-paths/web-application-security) - Intermediate, 6 rooms. Master advanced web app vulnerabilities. Learn to exploit authentication flaws, file uploads, SSRF, XXE, insecure… - [Wireless & Social Engineering](https://codelivly.com/learning-paths/wireless-social-engineering) - Advanced, 2 rooms. Master wireless penetration testing and human-layer exploitation. - [Privilege Escalation](https://codelivly.com/learning-paths/privilege-escalation) - Advanced, 2 rooms. Master privilege escalation on both Linux and Windows. Learn to go from a low-privileged user to root or SYSTEM using… - [Active Directory Attacks](https://codelivly.com/learning-paths/active-directory-attacks) - Advanced, 4 rooms. Master Active Directory penetration testing. Learn AD fundamentals, credential dumping with Mimikatz, attack path… - [Credential Attacks](https://codelivly.com/learning-paths/credential-attacks) - Intermediate, 3 rooms. Master the art of stealing, cracking, and abusing credentials. - [Exploitation Fundamentals](https://codelivly.com/learning-paths/exploitation-fundamentals) - Intermediate, 5 rooms. Transition from finding vulnerabilities to gaining control. Master reverse shells, payload generation, Metasploit, and… - [Recon & Enumeration Tools](https://codelivly.com/learning-paths/recon-enumeration-tools) - Beginner, 5 rooms. Master the art of digital reconnaissance. Learn to map attack surfaces, discover hidden assets, and gather critical… - [SOC Tools: Hands-On Practicals](https://codelivly.com/learning-paths/soc-tools-hands-on-practicals) - Advanced, 4 rooms. Bridge the gap between theory and operational reality. Build real detection logic, configure open-source SOC stacks,… - [Incident Response](https://codelivly.com/learning-paths/incident-response) - Advanced, 3 rooms. Master the complete Incident Response lifecycle, from surgical containment and evidence handling to timeline… - [Endpoint & Network Security Monitoring](https://codelivly.com/learning-paths/endpoint-network-security-monitoring) - Advanced, 5 rooms. Master the dual lenses of the SOC. Learn to ingest, analyze, and correlate deep endpoint telemetry (EDR/Sysmon) with… - [Threat Detection and Intelligence](https://codelivly.com/learning-paths/threat-detection-intelligence) - Advanced, 5 rooms. Move from reactive SOC operations to proactive cyber defense. Master threat intelligence, advanced detection… - [SOC Fundamentals](https://codelivly.com/learning-paths/soc-fundamentals) - Intermediate, 6 rooms. Master the nerve center of cybersecurity. Explore Security Operations Center (SOC) roles, SIEM architecture, log… - [Cybersecurity Foundations](https://codelivly.com/learning-paths/cybersecurity-foundations) - Beginner, 6 rooms. Master the core principles of information security. Explore the CIA triad, risk management, cryptography, network… - [Linux Fundamentals for Cybersecurity](https://codelivly.com/learning-paths/linux-fundamentals-for-cybersecurity) - Beginner, 9 rooms. Master the Linux command line, file systems, permissions, processes, and networking. - [Windows Fundamentals](https://codelivly.com/learning-paths/windows-fundamentals) - Beginner, 9 rooms. Master Windows operating system fundamentals for cybersecurity. - [Networking Fundamentals](https://codelivly.com/learning-paths/networking-fundamentals) - Beginner, 5 rooms. Master the backbone of the internet. Explore the OSI model, TCP/IP, IP addressing, subnetting, and core protocols to… - [Computer Fundamentals](https://codelivly.com/learning-paths/computer-fundamentals) - Beginner, 5 rooms. Master the foundational building blocks of computing. Explore hardware, OS architecture, binary, command line, and… ## Related - [Career paths](https://codelivly.com/career-paths)