# Codelivly rooms > 372 free, hands-on cybersecurity rooms (modules), each a short set of lessons with practice tasks. Canonical: https://codelivly.com/rooms - [Web Fundamentals Capstone](https://codelivly.com/rooms/web-fundamentals-capstone) - Beginner, 5 lessons. Review the whole Fernhill web estate before the summer sale: map it, read its conversations, check its cookies and… - [HTTPS and TLS Basics](https://codelivly.com/rooms/https-and-tls-basics) - Beginner, 6 lessons. What HTTPS guarantees, how certificates and the TLS 1.3 handshake work, and how to read a certificate and diagnose the… - [Cookies, Sessions and State](https://codelivly.com/rooms/cookies-sessions-and-state) - Beginner, 6 lessons. How a stateless protocol remembers you: cookie attributes, protective flags, server-side sessions, tokens, and a full… - [HTTP Headers That Matter](https://codelivly.com/rooms/http-headers-that-matter) - Beginner, 6 lessons. Read request and response headers for a living: who sets each one, who trusts it, how caching and content negotiation… - [HTTP Methods and Status Codes](https://codelivly.com/rooms/http-methods-and-status-codes) - Beginner, 6 lessons. What each HTTP method promises, what each status code family means, and how to find the failing part of a web system… - [Anatomy of a URL](https://codelivly.com/rooms/anatomy-of-a-url) - Beginner, 6 lessons. Take any URL apart: scheme, host, port, path, query and fragment, origins, percent-encoding, relative links, redirects… - [What Happens When You Visit a Website](https://codelivly.com/rooms/what-happens-when-you-visit-a-website) - Beginner, 6 lessons. Follow one page load from the address bar to the finished page: DNS, TCP, TLS, the first HTTP exchange and the files… - [Triage Communication & Responsible Disclosure](https://codelivly.com/rooms/triage-communication-and-responsible-disclosure) - Beginner, 7 lessons. Work with a security team after you submit: answer triage questions, handle duplicates and disputes, stay professional,… - [Severity Rating for Bounty Reports](https://codelivly.com/rooms/severity-rating-for-bounty-reports) - Beginner, 6 lessons. Score a finding with CVSS 3.1, read platform priority taxonomies, and argue impact with evidence so your report gets… - [Writing a Bounty Submission](https://codelivly.com/rooms/writing-a-bounty-submission) - Beginner, 7 lessons. Write a vulnerability report a triager can reproduce in minutes: title, summary, steps, safe proof, honest impact and a… - [Legal Safe Harbor & Authorization](https://codelivly.com/rooms/legal-safe-harbor-and-authorization) - Beginner, 7 lessons. Learn what a safe harbor clause promises, why written authorization is what separates research from crime, and how to… - [Choosing Programs & Reading Scope](https://codelivly.com/rooms/choosing-programs-and-reading-scope) - Beginner, 6 lessons. Pick a first bug bounty program that fits your skills, then read its scope, exclusions and testing rules so every… - [How Bug Bounty Programs Work](https://codelivly.com/rooms/how-bug-bounty-programs-work) - Beginner, 6 lessons. Learn what a bounty program is, who reads your report, how platforms and VDPs differ, and set up a safe workspace… - [How the Web Talks: HTTP in Practice](https://codelivly.com/rooms/how-the-web-talks-http-in-practice) - Beginner, 5 lessons. Learn HTTP by doing: build requests, read responses, and debug a broken checkout in five hands-on labs. - [Security Automation and Auto-Remediation](https://codelivly.com/rooms/security-automation-and-auto-remediation) - Advanced, 5 lessons. Master security automation and auto-remediation. Learn to build SOAR playbooks, automate incident response, and… - [Security Metrics and DevSecOps KPIs](https://codelivly.com/rooms/security-metrics-and-devsecops-kpis) - Intermediate, 5 lessons. Master security metrics and DevSecOps KPIs. Learn to measure security posture, track remediation times, and drive… - [Compliance as Code](https://codelivly.com/rooms/compliance-as-code) - Intermediate, 5 lessons. Master compliance as code using Open Policy Agent (OPA) and Rego. - [Runtime Threat Detection with Falco](https://codelivly.com/rooms/runtime-threat-detection-with-falco) - Advanced, 5 lessons. Master runtime threat detection using Falco and eBPF. Learn to write custom rules, detect anomalous container behavior,… - [Observability for Security](https://codelivly.com/rooms/observability-for-security) - Intermediate, 5 lessons. Master security observability. Learn to leverage logs, metrics, and traces to detect threats, hunt anomalies, and… - [Dependency Governance and Private Registries](https://codelivly.com/rooms/dependency-governance-and-private-registries) - Intermediate, 5 lessons. Master dependency governance and private registries. Learn to proxy, cache, and secure third-party packages to prevent… - [SLSA and Build Provenance](https://codelivly.com/rooms/slsa-and-build-provenance) - Advanced, 5 lessons. Master the SLSA framework and build provenance. Learn to generate, verify, and enforce cryptographic attestations for… - [Artifact Signing with Sigstore](https://codelivly.com/rooms/artifact-signing-with-sigstore) - Advanced, 5 lessons. Master cryptographic artifact signing using Sigstore and Cosign. - [Software Bill of Materials (SBOM)](https://codelivly.com/rooms/software-bill-of-materials-sbom) - Intermediate, 5 lessons. Master SBOM generation and analysis. Learn to map dependencies, enforce compliance, and integrate SBOMs into the CI/CD… - [Supply Chain Attack Landscape](https://codelivly.com/rooms/supply-chain-attack-landscape) - Intermediate, 5 lessons. Master the threat landscape of software supply chain attacks. Learn to identify, analyze, and mitigate risks from… - [Repository and Branch Protection Governance](https://codelivly.com/rooms/repository-and-branch-protection-governance) - Intermediate, 5 lessons. Master repository security, branch protection rules, code owner enforcement, and preventing unauthorized pipeline… - [OIDC and Keyless Pipeline Authentication](https://codelivly.com/rooms/oidc-and-keyless-pipeline-authentication) - Advanced, 5 lessons. Master OpenID Connect for CI/CD. Learn to implement keyless authentication, eliminate static secrets, and configure… - [Securing CI/CD Runners and Agents](https://codelivly.com/rooms/securing-cicd-runners-and-agents) - Advanced, 5 lessons. Master the security of CI/CD compute environments, differentiating between ephemeral and self-hosted runners, and… - [CI/CD Attack Surface](https://codelivly.com/rooms/cicd-attack-surface) - Advanced, 5 lessons. Master CI/CD pipeline threat modeling, runner security, and the prevention of secret leakage and workflow injection… - [Secrets Management with HashiCorp Vault](https://codelivly.com/rooms/secrets-management-with-hashicorp-vault) - Intermediate, 5 lessons. Master dynamic secrets, centralized credential management, and secure authentication using HashiCorp Vault to eliminate… - [Policy as Code with OPA](https://codelivly.com/rooms/policy-as-code-with-opa) - Advanced, 5 lessons. Master Policy as Code using Open Policy Agent (OPA) and Rego to enforce custom, organization-specific security rules… - [Configuration Hardening with Ansible](https://codelivly.com/rooms/configuration-hardening-with-ansible) - Intermediate, 5 lessons. Master automated host hardening with Ansible, translating CIS benchmarks into idempotent playbooks and enforcing… - [Terraform State and Secrets Security](https://codelivly.com/rooms/terraform-state-and-secrets-security) - Intermediate, 5 lessons. Master secure Terraform state management, secret handling, and remote backend isolation to prevent credential leakage… - [Terraform Security Misconfigurations](https://codelivly.com/rooms/terraform-security-misconfigurations) - Intermediate, 5 lessons. Master the identification and remediation of common Terraform misconfigurations, including insecure storage, open… - [Terraform Fundamentals](https://codelivly.com/rooms/terraform-fundamentals) - Intermediate, 5 lessons. Master the core concepts of Terraform, including HCL syntax, state management, providers, and resource lifecycle to… - [Vulnerability Triage and Management](https://codelivly.com/rooms/vulnerability-triage-and-management) - Intermediate, 5 lessons. Master risk-based vulnerability triage, contextual scoring, and exception management to prioritize remediation and… - [Dynamic Application Security Testing (DAST)](https://codelivly.com/rooms/dynamic-application-security-testing-dast) - Intermediate, 5 lessons. Master Dynamic Application Security Testing (DAST) to identify runtime vulnerabilities in web applications, triage… - [Secrets Detection](https://codelivly.com/rooms/secrets-detection) - Intermediate, 5 lessons. Master secrets detection, credential scanning, and rotation strategies to prevent hardcoded passwords and API keys from… - [Software Composition Analysis (SCA)](https://codelivly.com/rooms/software-composition-analysis-sca) - Intermediate, 5 lessons. Master SCA fundamentals, SBOM generation, and license compliance to secure the software supply chain against vulnerable… - [Static Application Security Testing (SAST)](https://codelivly.com/rooms/static-application-security-testing-sast) - Intermediate, 5 lessons. Master SAST fundamentals, tool integration, and false positive tuning to catch code-level vulnerabilities early in the… - [Security Code Review](https://codelivly.com/rooms/security-code-review) - Intermediate, 5 lessons. Master manual and automated security code review techniques to identify vulnerabilities, enforce secure coding… - [Secure Coding Practices](https://codelivly.com/rooms/secure-coding-practices) - Intermediate, 5 lessons. Master foundational secure coding principles to prevent common vulnerabilities like injection, XSS, and insecure… - [Security Requirements and Abuse Cases](https://codelivly.com/rooms/security-requirements-and-abuse-cases) - Intermediate, 5 lessons. Master the art of defining security requirements and modeling abuse cases to proactively design resilient, secure… - [Threat Modeling with STRIDE](https://codelivly.com/rooms/threat-modeling-with-stride) - Intermediate, 5 lessons. Master the STRIDE threat modeling methodology to proactively identify, quantify, and mitigate architectural security… - [Secure SDLC and Shift-Left Security](https://codelivly.com/rooms/secure-sdlc-and-shift-left-security) - Intermediate, 5 lessons. Master the fundamentals of integrating security early into the Software Development Life Cycle to prevent… - [Final Threat Intelligence Investigation](https://codelivly.com/rooms/cti-final-investigation) - Advanced, 6 lessons. Capstone: Threat Intelligence Investigation and Reporting. Investigate a fictional intrusion end to end, weigh… - [Executive Briefings and Technical Intelligence Reports](https://codelivly.com/rooms/cti-briefings-and-reports) - Advanced, 5 lessons. Write intelligence products that get read and acted on: BLUF and key judgements, report structures for executives and… - [Intelligence Driven Detection and Defensive Recommendations](https://codelivly.com/rooms/cti-intelligence-driven-detection) - Advanced, 5 lessons. Turn adversary behaviour into detections and prioritised defensive actions: from TTPs to Sigma and YARA rules, coverage… - [Intelligence Gaps, Competing Hypotheses, and Analytical Bias](https://codelivly.com/rooms/cti-hypotheses-gaps-and-bias) - Advanced, 6 lessons. Plan collection against intelligence gaps, test explanations with Analysis of Competing Hypotheses and challenge… - [Strategic Intelligence and Risk Based Analysis](https://codelivly.com/rooms/cti-strategic-intelligence-and-risk) - Advanced, 5 lessons. Produce strategic intelligence that leadership can act on: assess threat, vulnerability, impact and likelihood, tie… - [Integrating CTI into SOC and Incident Response Workflows](https://codelivly.com/rooms/cti-soc-and-ir-integration) - Advanced, 6 lessons. Make intelligence change SOC and IR outcomes: enrichment, IOC lifecycle, detection handoffs, hunting, incident support… - [Intelligence Requirements, Prioritization, and Dissemination](https://codelivly.com/rooms/cti-requirements-prioritization-dissemination) - Intermediate, 5 lessons. Run requirements, prioritise work, tailor products to audiences and disseminate them with correct handling and real… - [MISP and OpenCTI Workflows](https://codelivly.com/rooms/cti-misp-and-opencti-workflows) - Intermediate, 5 lessons. Model, curate and share intelligence in MISP and OpenCTI without leaking data or flooding consumers with noise. - [TAXII 2.1 and Intelligence Exchange Concepts](https://codelivly.com/rooms/cti-taxii-2-1-exchange) - Intermediate, 5 lessons. Understand sharing models and operate TAXII 2.1 discovery, collections, paging and submissions correctly. - [STIX 2.1 and Structured Intelligence Objects](https://codelivly.com/rooms/cti-stix-2-1-objects) - Intermediate, 6 lessons. Read, write and validate STIX 2.1 objects, relationships, sightings, patterns and TLP markings. - [Phishing and Malware Campaign Investigation](https://codelivly.com/rooms/cti-phishing-and-malware-campaigns) - Intermediate, 6 lessons. Investigate phishing and malware campaigns from headers, authentication results, lures, redirect chains, phishing kits… - [Campaign Tracking and Infrastructure Relationships](https://codelivly.com/rooms/cti-campaign-tracking) - Intermediate, 6 lessons. Cluster intrusions into activity groups, read infrastructure relationships without false links, and track campaigns… - [Threat Actor Profiling and Attribution Limitations](https://codelivly.com/rooms/cti-actor-profiling-and-attribution) - Intermediate, 5 lessons. Build sourced actor profiles, read vendor naming overlaps correctly, and make attribution judgements at the right level… - [The Diamond Model of Intrusion Analysis](https://codelivly.com/rooms/cti-diamond-model) - Intermediate, 5 lessons. Structure intrusion evidence as Diamond events, link them into threads, pivot across infrastructure and capability, and… - [MITRE ATT&CK and Adversary Behavior Analysis](https://codelivly.com/rooms/cti-attack-behavior-analysis) - Intermediate, 5 lessons. Read the ATT&CK knowledge base correctly, map real observations to tactics and techniques with evidence, and avoid the… - [Threat Intelligence Platforms and Enrichment Workflows](https://codelivly.com/rooms/cti-tip-enrichment-workflows) - Intermediate, 6 lessons. Manage indicators in a threat intelligence platform: normalise, deduplicate, enrich, score, allowlist, expire and… - [WHOIS, Passive DNS, Certificate Transparency, and Infrastructure Pivoting](https://codelivly.com/rooms/cti-whois-pdns-ct-pivoting) - Intermediate, 6 lessons. Use registration data, passive DNS and Certificate Transparency to pivot from one indicator to an operation, rating… - [URLs, File Hashes, Certificates, and Digital Artifacts](https://codelivly.com/rooms/cti-urls-hashes-certificates-artifacts) - Beginner, 5 lessons. Parse and defang URLs, use cryptographic and fuzzy hashes correctly, read X.509 certificates, and rank artefacts by… - [IP Addresses, Domains, DNS, and Network Infrastructure](https://codelivly.com/rooms/cti-ip-domain-dns-infrastructure) - Beginner, 5 lessons. Read IP addresses, ASNs, hosting context, domain names and DNS records as an analyst, and know the limits of each. - [OSINT Collection and Source Validation](https://codelivly.com/rooms/cti-osint-collection-and-source-validation) - Beginner, 5 lessons. Collect open source intelligence safely and lawfully, evaluate sources, and record provenance analysts can trust. - [Analytical Reasoning, Evidence, and Confidence](https://codelivly.com/rooms/cti-analytical-reasoning-and-confidence) - Beginner, 5 lessons. Separate evidence from inference and judgement, express likelihood and confidence precisely, and recognise common… - [Intelligence Sources and Collection Methods](https://codelivly.com/rooms/cti-sources-and-collection) - Beginner, 6 lessons. Know the source types CTI teams use, collect within legal and ethical limits, and grade sources with the Admiralty… - [Threat Actors, Motivations, and Objectives](https://codelivly.com/rooms/cti-threat-actors-and-motivations) - Beginner, 5 lessons. Categorise threat actors, reason about their motivations and objectives, and assess capability, intent and opportunity. - [Intelligence Lifecycle and Requirements](https://codelivly.com/rooms/cti-intelligence-lifecycle-and-requirements) - Beginner, 6 lessons. Run the intelligence lifecycle and turn stakeholder concerns into prioritised intelligence requirements and PIRs. - [Introduction to Cyber Threat Intelligence](https://codelivly.com/rooms/cti-introduction-to-threat-intelligence) - Beginner, 5 lessons. What cyber threat intelligence is, who consumes it, the four levels of intelligence, and the products analysts deliver. - [Jenkins Pipelines](https://codelivly.com/rooms/jenkins-pipelines) - Intermediate, 5 lessons. Master Jenkins Pipelines. Learn Jenkinsfile syntax, distributed builds, shared libraries, and secure credential… - [GitLab CI/CD](https://codelivly.com/rooms/gitlab-cicd) - Intermediate, 5 lessons. Master GitLab CI/CD pipelines. Learn .gitlab-ci.yml syntax, runners, caching, and secure deployment strategies. - [GitHub Actions](https://codelivly.com/rooms/github-actions) - Intermediate, 5 lessons. Master GitHub Actions for CI/CD. Learn workflow syntax, advanced features, security hardening, and how to build robust,… - [Docker for Pipelines](https://codelivly.com/rooms/docker-for-pipelines) - Intermediate, 5 lessons. Master containerization for CI/CD. Learn to write optimized multi-stage Dockerfiles, leverage service containers for… - [DevOps and the Software Delivery Lifecycle](https://codelivly.com/rooms/devops-and-the-software-delivery-lifecycle) - Beginner, 5 lessons. Understand the core principles of DevOps, the stages of the Software Delivery Lifecycle (SDLC), and how CI/CD bridges… - [YAML, JSON and Configuration Formats](https://codelivly.com/rooms/yaml-json-and-configuration-formats) - Beginner, 5 lessons. Master the foundational data serialization formats used in modern DevOps, cloud infrastructure, and security tooling. - [Python for DevSecOps Automation](https://codelivly.com/rooms/python-for-devsecops-automation) - Beginner, 5 lessons. Master Python for security automation. Learn to interact with APIs, parse JSON, manage secrets, and build robust,… - [Bash Scripting for Automation](https://codelivly.com/rooms/bash-scripting-for-automation) - Beginner, 5 lessons. Master the Linux command line and automate repetitive tasks with robust, secure Bash scripts for system administration… - [Git Branching and Collaboration](https://codelivly.com/rooms/git-branching-and-collaboration) - Beginner, 5 lessons. Master parallel development with Git branches, learn effective merging strategies, and navigate the Pull Request… - [Git Version Control](https://codelivly.com/rooms/git-version-control) - Beginner, 5 lessons. Master the fundamentals of Git, from core commands and branching strategies to resolving merge conflicts and managing… - [Guided Lab: Running a Full Automated Scan](https://codelivly.com/rooms/guided-lab-running-a-full-automated-scan) - Advanced, 3 lessons. A comprehensive, hands-on capstone lab where you will execute a full automated AI security scan using Garak, PyRIT, and… - [Using promptfoo for Prompt Evaluation & Regression Testing](https://codelivly.com/rooms/using-promptfoo-for-prompt-evaluation-regression-testing) - Advanced, 3 lessons. Master promptfoo to build automated, CI/CD-integrated evaluation suites for testing LLM prompt quality, safety… - [Guided Lab: Writing a Full Report from Capstone Findings](https://codelivly.com/rooms/guided-lab-writing-a-full-report-from-capstone-findings) - Advanced, 3 lessons. A comprehensive, hands-on capstone lab where you will synthesize your AI red team findings into a professional,… - [Using PyRIT for Adversarial Testing](https://codelivly.com/rooms/using-pyrit-for-adversarial-testing) - Advanced, 3 lessons. Master Microsoft's PyRIT framework to orchestrate complex, multi-step adversarial attacks and evaluate LLM resilience… - [Responsible Disclosure Norms for AI Vulnerabilities](https://codelivly.com/rooms/responsible-disclosure-norms-for-ai-vulnerabilities) - Advanced, 2 lessons. Master the ethical, legal, and procedural frameworks for responsibly disclosing AI-specific vulnerabilities to vendors,… - [Writing Reproducible Proof-of-Concepts for AI Findings](https://codelivly.com/rooms/writing-reproducible-proof-of-concepts-for-ai-findings) - Advanced, 2 lessons. Master the art of creating context-rich, statistically validated, and automated proof-of-concepts for non-deterministic… - [Using Garak for Automated LLM Vulnerability Scanning](https://codelivly.com/rooms/using-garak-for-automated-llm-vulnerability-scanning) - Advanced, 3 lessons. Master the deployment and configuration of Garak, the industry-standard open-source LLM vulnerability scanner, to… - [Rating Severity for AI-Specific Vulnerabilities](https://codelivly.com/rooms/rating-severity-for-ai-specific-vulnerabilities) - Advanced, 2 lessons. Learn how to accurately assess and score AI-specific vulnerabilities using hybrid frameworks, moving beyond traditional… - [Why Automation Matters in AI Red Teaming](https://codelivly.com/rooms/why-automation-matters-in-ai-red-teaming) - Advanced, 2 lessons. Understand the critical need for automated AI security testing, contrasting manual red teaming limitations with the… - [Structuring an AI Security Assessment Report](https://codelivly.com/rooms/structuring-an-ai-security-assessment-report) - Advanced, 2 lessons. Learn how to structure, format, and write a professional AI security assessment report that translates complex… - [Building a Structured Attack Scenario Library](https://codelivly.com/rooms/building-a-structured-attack-scenario-library) - Advanced, 2 lessons. Learn to develop, categorize, and maintain a comprehensive library of AI-specific attack scenarios, from prompt… - [Guided Lab: Exploiting Trust Between Two Cooperating Agents](https://codelivly.com/rooms/guided-lab-exploiting-trust-between-two-cooperating-agents) - Advanced, 3 lessons. A comprehensive, hands-on capstone lab where you will execute a multi-stage attack exploiting inter-agent trust to… - [Scoping an AI Red Team Engagement](https://codelivly.com/rooms/scoping-an-ai-red-team-engagement) - Advanced, 2 lessons. Learn how to properly define the boundaries, objectives, rules of engagement, and success metrics for an AI-specific… - [Threat Modeling an AI Application](https://codelivly.com/rooms/threat-modeling-an-ai-application) - Advanced, 2 lessons. Learn to systematically identify, quantify, and mitigate AI-specific risks using structured threat modeling frameworks… - [MCP Server and Tool Permission Attacks](https://codelivly.com/rooms/mcp-server-tool-permission-attacks) - Advanced, 3 lessons. Master techniques for exploiting misconfigured permissions, over-privileged MCP servers, and insecure tool access… - [MCP (Model Context Protocol) Fundamentals](https://codelivly.com/rooms/mcp-model-context-protocol-fundamentals) - Advanced, 2 lessons. Understand the architecture, security model, and attack surface of the Model Context Protocol (MCP) for connecting AI… - [AI Red Team vs Traditional Pentest](https://codelivly.com/rooms/ai-red-team-vs-traditional-pentest) - Advanced, 2 lessons. Understand the fundamental differences between traditional penetration testing and AI red teaming, including the unique… - [Inter-Agent Trust Exploitation](https://codelivly.com/rooms/inter-agent-trust-exploitation) - Advanced, 3 lessons. Master techniques for exploiting trust boundaries between collaborating AI agents, including transitive trust abuse and… - [Multi-Agent System Architecture and Attack Surface](https://codelivly.com/rooms/multi-agent-system-architecture-attack-surface) - Advanced, 2 lessons. Explore the complex architectures of multi-agent AI systems, identifying unique trust boundaries, communication… - [Guided Lab: Hijacking an Autonomous Agent's Task](https://codelivly.com/rooms/guided-lab-hijacking-an-autonomous-agents-task) - Advanced, 3 lessons. A comprehensive, hands-on capstone lab where you will execute a multi-stage hijacking attack against a simulated… - [Privilege Escalation Within Agent Permissions](https://codelivly.com/rooms/privilege-escalation-within-agent-permissions) - Advanced, 2 lessons. Master techniques for escalating privileges within the bounded permissions of an AI agent, exploiting… - [Agent Memory Poisoning and Persistence Attacks](https://codelivly.com/rooms/agent-memory-poisoning-and-persistence-attacks) - Advanced, 3 lessons. Master the techniques of agent memory poisoning and persistence attacks, learning how to embed dormant payloads in… - [Tool Abuse and the Confused Deputy Problem](https://codelivly.com/rooms/tool-abuse-and-the-confused-deputy-problem) - Advanced, 2 lessons. Master the mechanics of tool abuse in AI agents, focusing on the Confused Deputy problem, parameter manipulation, and… - [Agent Hijacking](https://codelivly.com/rooms/agent-hijacking) - Advanced, 3 lessons. Master the offensive mechanics of AI agent hijacking, including tool manipulation, goal redirection, and bypassing… - [Common Agent Framework Overview](https://codelivly.com/rooms/common-agent-framework-overview) - Advanced, 3 lessons. Explore the security architectures of popular AI agent frameworks like LangChain, AutoGen, and CrewAI, identifying… - [Trust Boundaries Between Agent, Tools and Environment](https://codelivly.com/rooms/trust-boundaries-between-agent-tools-and-environment) - Advanced, 2 lessons. Map and secure the critical trust boundaries between autonomous AI agents, their execution tools, and the underlying… - [Agent Architecture](https://codelivly.com/rooms/agent-architecture) - Advanced, 3 lessons. Deconstruct the core components of AI agent architecture, including the LLM brain, memory systems, and tool… - [What is an AI Agent](https://codelivly.com/rooms/what-is-an-ai-agent) - Advanced, 2 lessons. Understand the core architecture of autonomous AI agents, including perception, planning, memory, and tool execution,… - [Guided Lab: Identifying a Poisoned Model Artifact](https://codelivly.com/rooms/guided-lab-identifying-a-poisoned-model-artifact) - Intermediate, 3 lessons. A hands-on guided lab demonstrating how to detect hidden backdoors in AI models using activation clustering and… - [Guided Lab: Poisoning a RAG Pipeline](https://codelivly.com/rooms/guided-lab-poisoning-a-rag-pipeline) - Intermediate, 3 lessons. A hands-on, end-to-end lab where you craft, ingest, and trigger a poisoned document in a simulated RAG environment. - [Cross-Tenant Data Leakage in Shared Vector Stores](https://codelivly.com/rooms/cross-tenant-data-leakage-in-shared-vector-stores) - Intermediate, 3 lessons. Understand how multi-tenant RAG architectures leak data across user boundaries and how to test for metadata isolation… - [Model Supply Chain Attacks](https://codelivly.com/rooms/model-supply-chain-attacks) - Intermediate, 3 lessons. Master the vulnerabilities of the AI supply chain. Learn how attackers compromise model repositories, exploit… - [Poisoning a Knowledge Base for RAG Injection](https://codelivly.com/rooms/poisoning-a-knowledge-base-for-rag-injection) - Intermediate, 3 lessons. Learn how attackers craft and inject malicious documents into RAG pipelines to manipulate model outputs and compromise… - [Backdoored Models](https://codelivly.com/rooms/backdoored-models) - Intermediate, 3 lessons. Understand how attackers distribute and deploy backdoored AI models via supply chain attacks, and learn to detect and… - [Training-Time vs Inference-Time Poisoning](https://codelivly.com/rooms/training-time-vs-inference-time-poisoning) - Intermediate, 3 lessons. Differentiate between training-time and inference-time data poisoning. - [What is Data Poisoning and Its Real-World Impact](https://codelivly.com/rooms/what-is-data-poisoning-its-real-world-impact) - Intermediate, 2 lessons. Understand the fundamentals of data poisoning in machine learning. - [Guided Lab: Hijacking a Tool Call to Access Unauthorized Data](https://codelivly.com/rooms/guided-lab-hijacking-a-tool-call-to-access-unauthorized-data) - Intermediate, 3 lessons. A hands-on guided lab demonstrating how to exploit Broken Object Level Authorization (BOLA) by manipulating an LLM into… - [Vector Database Fundamentals for Attackers](https://codelivly.com/rooms/vector-database-fundamentals-for-attackers) - Intermediate, 3 lessons. Understand the mechanics of vector databases, semantic search, and the unique security models of platforms like… - [What is RAG and Why It Introduces New Risk](https://codelivly.com/rooms/what-is-rag-and-why-it-introduces-new-risk) - Intermediate, 2 lessons. Understand the core components of Retrieval-Augmented Generation and why it fundamentally expands the AI attack surface. - [AI API Rate Limiting, Auth and Abuse Testing](https://codelivly.com/rooms/ai-api-rate-limiting-auth-abuse-testing) - Intermediate, 3 lessons. Master the infrastructure security of LLM APIs. Learn to exploit and defend against token exhaustion, API key leakage,… - [Parameter Injection into Tool Calls](https://codelivly.com/rooms/parameter-injection-into-tool-calls) - Intermediate, 3 lessons. Master how attackers inject malicious payloads into LLM-generated tool arguments, bypassing validation and triggering… - [Abusing Function Calling for Unauthorized Actions](https://codelivly.com/rooms/abusing-function-calling-for-unauthorized-actions) - Intermediate, 3 lessons. Master how attackers manipulate LLM tool arguments to perform unauthorized actions, escalate privileges, and bypass… - [What is Function/Tool Calling in LLM Apps](https://codelivly.com/rooms/what-is-functiontool-calling-in-llm-apps) - Intermediate, 2 lessons. Understand the mechanics of LLM function calling and how granting AI access to external APIs transforms it from a… - [Guided Lab: Achieving Code Execution via LLM Output](https://codelivly.com/rooms/guided-lab-achieving-code-execution-via-llm-output) - Intermediate, 3 lessons. A hands-on guided lab demonstrating how to bypass blocklists and achieve RCE by tricking an LLM into generating… - [SSRF and Command Injection via Tool-Connected LLMs](https://codelivly.com/rooms/ssrf-and-command-injection-via-tool-connected-llms) - Intermediate, 3 lessons. Master the risks of SSRF and Command Injection in tool-connected LLMs. - [Cross-Site Scripting via LLM Output](https://codelivly.com/rooms/cross-site-scripting-via-llm-output) - Intermediate, 3 lessons. Master the mechanics of Cross-Site Scripting (XSS) via LLM output. - [LLM-to-Code Injection](https://codelivly.com/rooms/llm-to-code-injection) - Intermediate, 3 lessons. Master the mechanics of LLM-to-Code Injection. Learn how attackers trick AI into generating malicious code and defend… - [What is Insecure Output Handling](https://codelivly.com/rooms/what-is-insecure-output-handling) - Intermediate, 2 lessons. Understand the mechanics of Insecure Output Handling (OWASP LLM07). - [Extracting Data from RAG-Connected Knowledge Bases](https://codelivly.com/rooms/extracting-data-from-rag-connected-knowledge-bases) - Intermediate, 3 lessons. Master the techniques for extracting sensitive data from Retrieval-Augmented Generation (RAG) pipelines, including… - [Sensitive Information Disclosure](https://codelivly.com/rooms/sensitive-information-disclosure) - Intermediate, 3 lessons. Master the techniques and defenses against Sensitive Information Disclosure (OWASP LLM06) in AI applications, including… - [Techniques for Extracting Hidden System Prompts](https://codelivly.com/rooms/techniques-for-extracting-hidden-system-prompts) - Intermediate, 4 lessons. Master advanced techniques for extracting hidden system prompts, including continuation attacks, delimiter… - [What is System Prompt Extraction](https://codelivly.com/rooms/what-is-system-prompt-extraction) - Intermediate, 2 lessons. Understand the mechanics of system prompt extraction. Learn why attackers target the "DNA" of AI applications and how… - [Guided Lab: Bypassing a Model's Safety Filter](https://codelivly.com/rooms/guided-lab-bypassing-a-models-safety-filter) - Intermediate, 3 lessons. A hands-on guided lab demonstrating how to chain persona framing and payload obfuscation to bypass strict AI safety… - [Multi-Step and Crescendo Jailbreak Techniques](https://codelivly.com/rooms/multi-step-and-crescendo-jailbreak-techniques) - Intermediate, 3 lessons. Master multi-step and crescendo jailbreaks. Learn how attackers gradually escalate malicious requests across multiple… - [Encoding and Obfuscation Bypass Techniques](https://codelivly.com/rooms/encoding-and-obfuscation-bypass-techniques) - Intermediate, 3 lessons. Master encoding and obfuscation techniques used to bypass AI guardrails, including Base64, leetspeak, homoglyphs, and… - [Roleplay and Persona-Based Jailbreaks](https://codelivly.com/rooms/roleplay-and-persona-based-jailbreaks) - Intermediate, 3 lessons. Master roleplay and persona-based jailbreaks. Learn how attackers use fictional framing to bypass AI safety alignment… - [What is Jailbreaking and How Guardrails Work](https://codelivly.com/rooms/what-is-jailbreaking-and-how-guardrails-work) - Intermediate, 2 lessons. Understand the core mechanics of LLM jailbreaking and the multi-layered guardrail architectures designed to prevent it. - [Guided Lab: Injecting a Chatbot via a Malicious Document](https://codelivly.com/rooms/guided-lab-injecting-a-chatbot-via-a-malicious-document) - Intermediate, 3 lessons. A hands-on lab demonstrating how to weaponize document uploads to perform indirect prompt injection against an… - [Multi-Turn and Context-Building Injection Attacks](https://codelivly.com/rooms/multi-turn-and-context-building-injection-attacks) - Intermediate, 3 lessons. Learn how attackers use multi-turn conversations to gradually bypass AI guardrails through context manipulation and… - [Indirect Prompt Injection](https://codelivly.com/rooms/indirect-prompt-injection) - Intermediate, 4 lessons. Understand how attackers weaponize external data sources to hijack LLMs without ever directly interacting with the chat… - [Direct Prompt Injection](https://codelivly.com/rooms/direct-prompt-injection) - Intermediate, 4 lessons. Master direct prompt injection techniques. Learn how attackers bypass guardrails through persona adoption, delimiter… - [What is Prompt Injection](https://codelivly.com/rooms/what-is-prompt-injection) - Intermediate, 2 lessons. Understand the core mechanics of prompt injection. Learn how the blurring of data and instructions creates the most… - [Mapping an AI App's Full Attack Surface](https://codelivly.com/rooms/mapping-an-ai-apps-full-attack-surface) - Beginner, 3 lessons. Learn a systematic methodology to map, document, and evaluate the complete attack surface of modern AI applications,… - [AI vs Traditional Application Attack Surface](https://codelivly.com/rooms/ai-vs-traditional-application-attack-surface) - Beginner, 3 lessons. Compare the attack surfaces of traditional web applications and modern AI systems. - [OWASP Top 10 for LLM Applications Overview](https://codelivly.com/rooms/owasp-top-10-for-llm-applications-overview) - Beginner, 3 lessons. Explore the OWASP Top 10 for LLM Applications. Learn to identify, categorize, and prioritize the most critical… - [Where Trust Boundaries Exist in AI Systems](https://codelivly.com/rooms/where-trust-boundaries-exist-in-ai-systems) - Beginner, 4 lessons. Map the critical trust boundaries in AI architectures. Learn where untrusted data crosses into trusted systems and how… - [Anatomy of an AI Application](https://codelivly.com/rooms/anatomy-of-an-ai-application) - Beginner, 4 lessons. Deconstruct modern AI applications into their core components: LLMs, vector databases, orchestration layers, and tool… - [Automating Repetitive Attack Payloads](https://codelivly.com/rooms/automating-repetitive-attack-payloads) - Beginner, 4 lessons. Scale your AI red teaming by building dynamic mutation engines. - [Building a Basic Prompt-Testing Script](https://codelivly.com/rooms/building-a-basic-prompt-testing-script) - Beginner, 4 lessons. Learn to build your first automated prompt-testing script. Combine SDKs, datasets, and evaluation logic to measure LLM… - [Using OpenAI/Anthropic-style SDKs for Testing](https://codelivly.com/rooms/using-openaianthropic-style-sdks-for-testing) - Intermediate, 3 lessons. Learn to use official AI SDKs for rapid red teaming. Master client initialization, structured outputs, and know when to… - [Scripting HTTP Requests to LLM Endpoints](https://codelivly.com/rooms/scripting-http-requests-to-llm-endpoints) - Beginner, 4 lessons. Master the mechanics of sending HTTP requests to LLM APIs. Learn to construct payloads, handle streaming responses, and… - [Working with APIs and JSON Payloads](https://codelivly.com/rooms/working-with-apis-and-json-payloads) - Beginner, 3 lessons. Master API interactions and JSON parsing for AI security. Learn to send adversarial payloads, handle rate limits, and… - [Python Fundamentals Refresher for Security Testers](https://codelivly.com/rooms/python-fundamentals-refresher-for-security-testers) - Beginner, 3 lessons. Refresh essential Python skills tailored for cybersecurity. Master data structures, error handling, and API… - [Training Data, Fine-Tuning and RLHF Explained](https://codelivly.com/rooms/training-data-fine-tuning-and-rlhf-explained) - Intermediate, 4 lessons. Understand how LLMs learn. Explore pre-training, fine-tuning, and Reinforcement Learning from Human Feedback (RLHF) and… - [Transformers and Attention Explained Simply](https://codelivly.com/rooms/transformers-and-attention-explained-simply) - Beginner, 3 lessons. Demystify the Transformer architecture. Understand self-attention, Query-Key-Value mechanics, and why this… - [How Large Language Models Work](https://codelivly.com/rooms/how-large-language-models-work) - Beginner, 4 lessons. Decode the technology behind modern AI. Learn tokenization, embeddings, and the self-attention mechanism that powers… - [Neural Networks and Deep Learning Basics](https://codelivly.com/rooms/neural-networks-and-deep-learning-basics) - Beginner, 4 lessons. Master the building blocks of modern AI. Understand perceptrons, hidden layers, activation functions, and… - [How Machine Learning Works](https://codelivly.com/rooms/how-machine-learning-works) - Beginner, 4 lessons. Master the core mechanics of machine learning, from data ingestion to model deployment, and understand where security… - [Compromised Account Investigation](https://codelivly.com/rooms/compromised-account-investigation) - Advanced, 3 lessons. Master compromised account investigation. Learn to detect anomalous IAM activity, trace lateral movement, and execute… - [Cloud Forensic Acquisition](https://codelivly.com/rooms/cloud-forensic-acquisition) - Advanced, 3 lessons. Master cloud forensic acquisition. Learn to capture live memory, create immutable disk snapshots, and maintain the… - [Cloud Incident Response Fundamentals](https://codelivly.com/rooms/cloud-incident-response-fundamentals) - Intermediate, 3 lessons. Master the fundamentals of cloud incident response. Learn to adapt traditional IR lifecycles for ephemeral cloud… - [Data Residency and Cross-Region Compliance](https://codelivly.com/rooms/data-residency-and-cross-region-compliance) - Intermediate, 3 lessons. Master cloud data residency. Learn to enforce geographic data restrictions, manage cross-region replication, and ensure… - [Data Loss Prevention (DLP) Controls](https://codelivly.com/rooms/data-loss-prevention-dlp-controls) - Intermediate, 3 lessons. Master cloud DLP controls. Learn to configure detection rules, enforce automated remediation, and prevent unauthorized… - [Data Classification in the Cloud](https://codelivly.com/rooms/data-classification-in-the-cloud) - Beginner, 3 lessons. Master the fundamentals of cloud data classification. Learn to discover, categorize, and label sensitive data to build… - [CDN and Edge Security](https://codelivly.com/rooms/cdn-and-edge-security) - Intermediate, 3 lessons. Master CDN and edge security. Learn to protect origin servers, prevent cache poisoning, and secure edge compute… - [Cloud WAF Configuration](https://codelivly.com/rooms/cloud-waf-configuration) - Intermediate, 3 lessons. Master cloud Web Application Firewall (WAF) configuration. Learn to deploy managed rules, write custom policies, and… - [API Gateway Security](https://codelivly.com/rooms/api-gateway-security) - Intermediate, 3 lessons. Master API Gateway security. Learn to protect cloud-native endpoints, enforce authentication, and mitigate common API… - [Flow Log Analysis and Network Detection](https://codelivly.com/rooms/flow-log-analysis-and-network-detection) - Intermediate, 3 lessons. Master VPC Flow Log analysis. Learn to query network telemetry, detect port scanning, and identify lateral movement and… - [Peering and Transit Gateway Misconfigurations](https://codelivly.com/rooms/peering-and-transit-gateway-misconfigurations) - Advanced, 3 lessons. Master cloud network pivoting. Learn to exploit and defend against VPC peering and Transit Gateway misconfigurations… - [VPC Security Fundamentals](https://codelivly.com/rooms/vpc-security-fundamentals) - Intermediate, 3 lessons. Master Virtual Private Cloud (VPC) security. Learn to identify network misconfigurations, secure subnets, and prevent… - [Post-Exploitation in Cloud Environments](https://codelivly.com/rooms/post-exploitation-in-cloud-environments) - Advanced, 3 lessons. Master post-exploitation techniques in the cloud. Learn to maintain persistence, evade detection, and escalate… - [Cross-Account and Role Assumption Attacks](https://codelivly.com/rooms/cross-account-and-role-assumption-attacks) - Advanced, 4 lessons. Master cross-account IAM attacks. Learn to exploit overly permissive trust policies, abuse STS AssumeRole, and pivot… - [Instance Metadata Service (IMDS) Exploitation](https://codelivly.com/rooms/instance-metadata-service-imds-exploitation) - Advanced, 4 lessons. Master IMDS exploitation techniques. Learn to extract cloud credentials via SSRF, understand IMDSv1 vs IMDSv2, and… - [Cloud Reconnaissance](https://codelivly.com/rooms/cloud-reconnaissance) - Intermediate, 4 lessons. Master cloud reconnaissance techniques. Learn to enumerate assets, map attack surfaces, and gather intelligence without… - [Continuous Monitoring and Alerting](https://codelivly.com/rooms/continuous-monitoring-and-alerting) - Intermediate, 3 lessons. Master continuous cloud monitoring, anomaly detection, and automated alerting to maintain a secure cloud posture in… - [Compliance Frameworks in the Cloud](https://codelivly.com/rooms/compliance-frameworks-in-the-cloud) - Intermediate, 3 lessons. Master cloud compliance frameworks like CIS, NIST, PCI-DSS, and HIPAA. - [CSPM Fundamentals](https://codelivly.com/rooms/cspm-fundamentals) - Beginner, 3 lessons. Master the basics of Cloud Security Posture Management. Learn to gain visibility, detect misconfigurations, and enforce… - [Supply Chain Security](https://codelivly.com/rooms/supply-chain-security) - Advanced, 3 lessons. Master software supply chain security. Learn to generate SBOMs, implement artifact signing, and defend against… - [CI/CD Pipeline Security](https://codelivly.com/rooms/cicd-pipeline-security) - Advanced, 3 lessons. Master the security of CI/CD pipelines. Learn to prevent pipeline poisoning, secure secrets, and protect the software… - [Infrastructure as Code Security](https://codelivly.com/rooms/infrastructure-as-code-security) - Intermediate, 3 lessons. Master the security of Terraform, CloudFormation, and Kubernetes manifests. - [Kubernetes Network Policy and Isolation](https://codelivly.com/rooms/kubernetes-network-policy-and-isolation) - Intermediate, 3 lessons. Master Kubernetes network isolation. Learn to implement Network Policies, enforce zero-trust pod communication, and… - [Container Runtime Security](https://codelivly.com/rooms/container-runtime-security) - Advanced, 3 lessons. Master the defense of active container workloads. Learn to detect container escapes, monitor system calls with eBPF,… - [Kubernetes Architecture and Attack Surface](https://codelivly.com/rooms/kubernetes-architecture-and-attack-surface) - Advanced, 4 lessons. Master the complex security landscape of Kubernetes. Learn to map the control plane, identify API server… - [Container Security Fundamentals](https://codelivly.com/rooms/container-security-fundamentals) - Intermediate, 3 lessons. Master the basics of container security, from building secure, minimal images to understanding runtime isolation and… - [Serverless Security](https://codelivly.com/rooms/serverless-security) - Advanced, 3 lessons. Master the unique security challenges of serverless architectures. - [Encryption at Rest and in Transit](https://codelivly.com/rooms/encryption-at-rest-and-in-transit) - Intermediate, 3 lessons. Master data protection by implementing robust encryption for data at rest (KMS, CMKs) and in transit (TLS/mTLS) across… - [Compute Instance Hardening](https://codelivly.com/rooms/compute-instance-hardening) - Intermediate, 3 lessons. Master the security of cloud compute instances. Learn to secure the Instance Metadata Service (IMDS), enforce… - [Storage Security Misconfigurations](https://codelivly.com/rooms/storage-security-misconfigurations) - Intermediate, 3 lessons. Master the identification and remediation of critical cloud storage misconfigurations, including public buckets, weak… - [Secrets Management](https://codelivly.com/rooms/secrets-management) - Intermediate, 3 lessons. Master cloud secrets management, eliminate hardcoded credentials, and leverage native vaults like AWS Secrets Manager,… - [Federation and Single Sign-On](https://codelivly.com/rooms/federation-and-single-sign-on) - Intermediate, 3 lessons. Master cloud identity federation, SAML 2.0, OIDC, and SSO to securely connect on-premises directories with AWS, Azure,… - [Privilege Escalation in Cloud IAM](https://codelivly.com/rooms/privilege-escalation-in-cloud-iam) - Advanced, 4 lessons. Master cloud IAM privilege escalation techniques, from overly permissive roles to PassRole exploits, and learn to… - [IAM Fundamentals](https://codelivly.com/rooms/iam-fundamentals) - Beginner, 3 lessons. Master the core concepts of Identity and Access Management, including users, roles, policies, and the Principle of… - [Cloud Billing and Resource Governance](https://codelivly.com/rooms/cloud-billing-and-resource-governance) - Beginner, 3 lessons. Master cloud cost management, resource tagging, and governance controls to prevent billing shocks and enforce… - [GCP Core Services](https://codelivly.com/rooms/gcp-core-services) - Beginner, 3 lessons. Master foundational GCP services including Compute Engine, Cloud Storage, VPC, and IAM, and understand their core… - [Azure Core Services](https://codelivly.com/rooms/azure-core-services) - Beginner, 4 lessons. Master the foundational Azure services including Virtual Machines, Blob Storage, Virtual Networks, and Microsoft Entra… - [AWS Core Services](https://codelivly.com/rooms/aws-core-services) - Beginner, 4 lessons. Master the foundational AWS services including EC2, S3, VPC, and IAM, and understand their core security implications… - [Cloud Computing Fundamentals](https://codelivly.com/rooms/cloud-computing-fundamentals) - Beginner, 4 lessons. Master the core concepts of cloud computing, including IaaS, PaaS, SaaS, and deployment models to build a strong… - [Batch Sample Triage Pipelines](https://codelivly.com/rooms/batch-sample-triage-pipelines) - Advanced, 3 lessons. Master high-volume malware triage. Learn to build concurrent, multi-stage Python pipelines integrating static, dynamic,… - [Automated IOC Extraction](https://codelivly.com/rooms/automated-ioc-extraction) - Intermediate, 3 lessons. Master automated IOC extraction. Learn to use Python and regex to extract IPs, domains, hashes, and URLs from malware… - [Python for Malware Analysts](https://codelivly.com/rooms/python-for-malware-analysts) - Intermediate, 3 lessons. Master essential Python libraries for malware analysis. Learn to parse PE files with pefile, unpack binary data with… - [Threat Intelligence Sharing](https://codelivly.com/rooms/threat-intelligence-sharing) - Intermediate, 3 lessons. Master the art of sharing actionable threat intelligence. Learn STIX/TAXII, MISP, and best practices for anonymizing… - [YARA Rule Writing](https://codelivly.com/rooms/yara-rule-writing) - Intermediate, 4 lessons. Master the art of writing high-fidelity YARA rules. Learn YARA syntax, string modifiers, and best practices to detect… - [Malware Family Classification](https://codelivly.com/rooms/malware-family-classification) - Intermediate, 3 lessons. Master the art of grouping malware into distinct families. Learn to identify shared code, infrastructure, and… - [Obfuscation and Code Protection](https://codelivly.com/rooms/obfuscation-and-code-protection) - Advanced, 3 lessons. Master advanced code obfuscation techniques. Learn to defeat control flow flattening, opaque predicates, junk code, and… - [Anti-Debugging and Anti-VM Techniques](https://codelivly.com/rooms/anti-debugging-and-anti-vm-techniques) - Advanced, 4 lessons. Master the identification and bypass of advanced malware evasion. - [Packers and Unpacking Fundamentals](https://codelivly.com/rooms/packers-and-unpacking-fundamentals) - Advanced, 4 lessons. Learn how malware packers hide executable code and how analysts identify, analyze, and unpack protected Windows… - [Persistence Mechanism Analysis](https://codelivly.com/rooms/persistence-mechanism-analysis) - Advanced, 3 lessons. Master the identification and eradication of malware persistence. - [API Call and Behavioral Monitoring](https://codelivly.com/rooms/api-call-and-behavioral-monitoring) - Advanced, 4 lessons. Master the mechanics of API hooking and behavioral monitoring. - [Sandbox Instrumentation](https://codelivly.com/rooms/sandbox-instrumentation) - Intermediate, 4 lessons. Master dynamic malware analysis environments. Learn to configure isolated sandboxes, deploy monitoring tools like… - [Advanced Static Analysis Techniques](https://codelivly.com/rooms/advanced-static-analysis-techniques) - Advanced, 4 lessons. Master advanced static analysis to dissect heavily obfuscated malware, reconstruct control flow, and identify hidden… - [Control Flow and Algorithm Recognition](https://codelivly.com/rooms/control-flow-and-algorithm-recognition) - Advanced, 3 lessons. Master advanced reverse engineering by reconstructing complex control flow graphs and identifying cryptographic,… - [Debugger-Driven Analysis](https://codelivly.com/rooms/debugger-driven-analysis) - Advanced, 4 lessons. Master dynamic malware analysis using debuggers. Learn to set breakpoints, trace execution, bypass anti-debugging, and… - [Static Disassembly](https://codelivly.com/rooms/static-disassembly) - Intermediate, 5 lessons. Master static disassembly for malware analysis. Learn to use Ghidra and IDA Pro to translate machine code into readable… - [PE File Format Internals](https://codelivly.com/rooms/pe-file-format-internals) - Intermediate, 4 lessons. Master the Windows Portable Executable (PE) file format. Learn to parse headers, sections, imports, and exports for… - [Assembly Language Fundamentals](https://codelivly.com/rooms/assembly-language-fundamentals) - Beginner, 5 lessons. Master the basics of x86/x64 assembly language. Learn CPU registers, instructions, memory addressing, and how… - [Expert Witness and Report Writing](https://codelivly.com/rooms/expert-witness-and-report-writing) - Intermediate, 4 lessons. Master expert witness testimony and forensic report writing. Learn to translate technical findings into clear,… - [Legal Foundations for Digital Evidence](https://codelivly.com/rooms/legal-foundations-for-digital-evidence) - Intermediate, 4 lessons. Master the legal foundations of digital evidence. Learn chain of custody, admissibility standards, and search/seizure… - [Anti-Forensics Detection](https://codelivly.com/rooms/anti-forensics-detection) - Advanced, 4 lessons. Master anti-forensics detection. Learn to identify and overcome attacker techniques like timestomping, log wiping, and… - [Cross-Source Artifact Correlation](https://codelivly.com/rooms/cross-source-artifact-correlation) - Advanced, 4 lessons. Master cross-source artifact correlation. Learn to link endpoint, network, and cloud logs to expose advanced threats… - [Timeline Analysis Fundamentals](https://codelivly.com/rooms/timeline-analysis-fundamentals) - Intermediate, 4 lessons. Master timeline analysis fundamentals. Learn to extract, normalize, and merge disparate forensic artifacts into a… - [SaaS and Collaboration Platform Investigations](https://codelivly.com/rooms/saas-and-collaboration-platform-investigations) - Intermediate, 3 lessons. Master SaaS and collaboration platform investigations. Learn to analyze M365, Google Workspace, and Slack logs for data… - [Email Header and Metadata Analysis](https://codelivly.com/rooms/email-header-and-metadata-analysis) - Intermediate, 4 lessons. Master email header analysis. Learn to trace email origins, analyze SMTP routing, and extract metadata for phishing and… - [Cloud Forensics Fundamentals](https://codelivly.com/rooms/cloud-forensics-fundamentals) - Beginner, 4 lessons. Master the basics of cloud forensics. Learn the differences between IaaS, PaaS, and SaaS, acquisition challenges, and… - [Mobile App Data Recovery](https://codelivly.com/rooms/mobile-app-data-recovery) - Intermediate, 4 lessons. Master mobile app data recovery. Learn to extract, decrypt, and analyze data from third-party apps like WhatsApp,… - [iOS Artifact Analysis](https://codelivly.com/rooms/ios-artifact-analysis) - Intermediate, 4 lessons. Master iOS artifact analysis. Learn to extract and parse critical data from iOS backups, including SMS, call logs, app… - [Android Artifact Analysis](https://codelivly.com/rooms/android-artifact-analysis) - Intermediate, 5 lessons. Master Android artifact analysis. Learn to extract and parse SMS, call logs, app data, and location history from… - [Mobile Forensics Fundamentals](https://codelivly.com/rooms/mobile-forensics-fundamentals) - Beginner, 4 lessons. Master the basics of mobile device forensics. Learn acquisition methods, chain of custody, and foundational analysis of… - [Stakeholder Reporting](https://codelivly.com/rooms/stakeholder-reporting) - Intermediate, 3 lessons. Master stakeholder reporting in DFIR. Learn to translate complex technical findings into clear, actionable briefs for… - [Evidence Summarization](https://codelivly.com/rooms/evidence-summarization) - Intermediate, 3 lessons. Master evidence summarization in DFIR. Learn to distill complex forensic data into clear, actionable summaries for… - [Case Management Fundamentals](https://codelivly.com/rooms/case-management-fundamentals) - Beginner, 3 lessons. Master the basics of DFIR case management. Learn to track incidents, maintain chain of custody, and organize forensic… - [Indicators of Compromise (IOCs)](https://codelivly.com/rooms/indicators-of-compromise-iocs) - Intermediate, 3 lessons. Master extracting and utilizing Indicators of Compromise (IOCs). - [Dynamic Analysis](https://codelivly.com/rooms/dynamic-analysis) - Intermediate, 4 lessons. Master dynamic malware analysis. Learn to safely execute malware in an isolated sandbox, monitor behavior with Procmon… - [Static Analysis](https://codelivly.com/rooms/static-analysis) - Intermediate, 4 lessons. Master static malware analysis. Learn to extract strings, analyze PE headers, calculate entropy, and identify packers… - [Introduction to Malware Analysis](https://codelivly.com/rooms/introduction-to-malware-analysis) - Beginner, 4 lessons. Learn the core concepts of malware analysis, the difference between static and dynamic analysis, and how to safely set… - [Exfiltration Detection](https://codelivly.com/rooms/exfiltration-detection) - Advanced, 4 lessons. Master detecting data exfiltration. Learn to identify DNS tunneling, covert channels, and anomalous data transfers in… - [Protocol-Level Investigation](https://codelivly.com/rooms/protocol-level-investigation) - Intermediate, 4 lessons. Deep-dive into core network protocols (DNS, HTTP, SMB) to uncover hidden attacks, lateral movement, and data… - [Packet Analysis With Wireshark](https://codelivly.com/rooms/packet-analysis-with-wireshark-2) - Intermediate, 4 lessons. Master Wireshark for network forensics. Learn to apply complex display filters, reconstruct TCP streams, and extract… - [Network Forensics Fundamentals](https://codelivly.com/rooms/network-forensics-fundamentals) - Intermediate, 3 lessons. Master the basics of network forensics, PCAP analysis, and traffic capture using industry-standard tools like Wireshark… - [Registry and Credential Extraction from Memory](https://codelivly.com/rooms/registry-and-credential-extraction-from-memory) - Advanced, 4 lessons. Extract Windows credentials from RAM. Learn to dump NTLM hashes, LSA secrets, DPAPI keys, and registry hives directly… - [Code Injection Detection](https://codelivly.com/rooms/code-injection-detection) - Advanced, 4 lessons. Master detecting code injection in memory. Learn to identify process hollowing, DLL injection, and extract injected… - [Process and Network Artifact Analysis](https://codelivly.com/rooms/process-and-network-artifact-analysis) - Intermediate, 5 lessons. Master memory analysis of processes and network connections. Learn to detect hidden processes, process injection, and… - [Memory Forensics Fundamentals](https://codelivly.com/rooms/memory-forensics-fundamentals) - Beginner, 4 lessons. Master the basics of volatile memory (RAM) forensics, the Order of Volatility, and live acquisition techniques for DFIR… - [Registry and Windows Artifact Analysis](https://codelivly.com/rooms/registry-and-windows-artifact-analysis) - Advanced, 4 lessons. Master Windows Registry forensics. Learn to parse hives, uncover malware persistence, track user activity via… - [File System Metadata Analysis](https://codelivly.com/rooms/file-system-metadata-analysis) - Intermediate, 4 lessons. Master file system metadata analysis. Learn to detect timestomping, parse MACB timestamps, uncover Alternate Data… - [Deleted File Recovery](https://codelivly.com/rooms/deleted-file-recovery) - Intermediate, 4 lessons. Master the techniques to recover deleted files. Learn file carving, magic numbers, and unallocated space analysis for… - [Partition and Volume Analysis](https://codelivly.com/rooms/partition-and-volume-analysis) - Intermediate, 4 lessons. Master partition tables and volume analysis. Learn to analyze MBR/GPT structures, uncover hidden partitions, and map… - [File System Fundamentals](https://codelivly.com/rooms/file-system-fundamentals) - Beginner, 4 lessons. Understand how operating systems store data. Learn the basics of NTFS, FAT, MFT, inodes, and clusters for digital… - [Forensic Workstation Setup](https://codelivly.com/rooms/forensic-workstation-setup) - Beginner, 3 lessons. Learn how to build and configure a secure, isolated, and forensically sound workstation for digital investigations. - [Forensic Imaging](https://codelivly.com/rooms/forensic-imaging) - Intermediate, 5 lessons. Master forensic imaging. Learn to create bit-for-bit copies of digital evidence using write-blockers, understand image… - [Chain of Custody Basics](https://codelivly.com/rooms/chain-of-custody-basics) - Beginner, 3 lessons. Master the foundational principles of the Chain of Custody in digital forensics, ensuring evidence remains legally… - [Evidence Handling Principles](https://codelivly.com/rooms/evidence-handling-principles) - Beginner, 4 lessons. Master the foundational rules of digital evidence handling, including chain of custody, order of volatility,… - [Introduction to Digital Forensics](https://codelivly.com/rooms/introduction-to-digital-forensics) - Beginner, 4 lessons. Discover the core principles of digital forensics, including the investigative process, chain of custody, and evidence… - [Wireless Security](https://codelivly.com/rooms/wireless-security) - Intermediate, 4 lessons. Master wireless security protocols, from legacy WEP vulnerabilities to modern WPA3-Enterprise, and learn to defend… - [Wireless Architecture and Controllers](https://codelivly.com/rooms/wireless-architecture-and-controllers) - Intermediate, 4 lessons. Understand the evolution from autonomous to controller-based wireless architectures, CAPWAP protocols, and the… - [Wi-Fi Standards and RF Basics](https://codelivly.com/rooms/wi-fi-standards-and-rf-basics) - Beginner, 4 lessons. Understand the physics of Radio Frequency (RF) and the evolution of IEEE 802.11 Wi-Fi standards from legacy protocols… - [Systematic Troubleshooting Methodology](https://codelivly.com/rooms/systematic-troubleshooting-methodology) - Beginner, 4 lessons. Master the foundational, step-by-step methodology for diagnosing and resolving network issues efficiently and… - [Flow-Based Monitoring (NetFlow/sFlow)](https://codelivly.com/rooms/flow-based-monitoring-netflowsflow) - Intermediate, 3 lessons. Master flow-based network monitoring using NetFlow and sFlow to analyze traffic patterns, detect anomalies, and… - [SNMP Monitoring](https://codelivly.com/rooms/snmp-monitoring) - Intermediate, 4 lessons. Master Simple Network Management Protocol (SNMP) for proactive network monitoring, telemetry collection, and secure… - [Packet Analysis with Wireshark](https://codelivly.com/rooms/packet-analysis-with-wireshark) - Intermediate, 5 lessons. Master network packet analysis using Wireshark to capture, filter, and decode traffic for troubleshooting, forensics,… - [Network APIs and NETCONF/RESTCONF](https://codelivly.com/rooms/network-apis-and-netconfrestconf) - Advanced, 4 lessons. Master modern network automation using RESTCONF and NETCONF to interact with structured data models, bypass CLI… - [Infrastructure as Code with Ansible](https://codelivly.com/rooms/infrastructure-as-code-with-ansible) - Advanced, 5 lessons. Master Infrastructure as Code (IaC) using Ansible to automate network configuration, enforce security baselines, and… - [Python for Network Engineers](https://codelivly.com/rooms/python-for-network-engineers) - Intermediate, 5 lessons. Master Python scripting for network automation using Netmiko, NAPALM, and YAML to eliminate manual CLI errors and scale… - [Device Hardening Best Practices](https://codelivly.com/rooms/device-hardening-best-practices) - Intermediate, 4 lessons. Master device hardening techniques to reduce attack surfaces, secure configurations, and prevent unauthorized access… - [Network Access Control (NAC)](https://codelivly.com/rooms/network-access-control-nac) - Advanced, 3 lessons. Master Network Access Control (NAC), 802.1X authentication, RADIUS integration, and device posture assessment to… - [Network Segmentation and Zero Trust](https://codelivly.com/rooms/network-segmentation-and-zero-trust) - Intermediate, 4 lessons. Master network segmentation, microsegmentation, and Zero Trust Architecture (ZTA) to minimize breach blast radius and… - [Firewall Fundamentals and Stateful Inspection](https://codelivly.com/rooms/firewall-fundamentals-and-stateful-inspection) - Intermediate, 5 lessons. Master firewall architectures, packet filtering, stateful inspection, and zone-based security to defend enterprise… - [Cloud Networking Fundamentals](https://codelivly.com/rooms/cloud-networking-fundamentals) - Intermediate, 5 lessons. Master cloud networking concepts including VPCs, subnets, routing tables, and security groups across AWS and Azure… - [Site-to-Site and Remote Access VPNs](https://codelivly.com/rooms/site-to-site-and-remote-access-vpns) - Intermediate, 5 lessons. Master VPN architectures including IPsec site-to-site tunnels and SSL/TLS remote access. - [WAN Technologies and Edge Security](https://codelivly.com/rooms/wan-technologies-and-edge-security) - Intermediate, 4 lessons. Master Wide Area Network (WAN) fundamentals, including MPLS, leased lines, and broadband, and learn to secure… - [Load Balancing and Proxies](https://codelivly.com/rooms/load-balancing-and-proxies) - Intermediate, 5 lessons. Master load balancing and proxy architectures. Learn to configure reverse proxies, exploit SSRF and cache poisoning,… - [NTP and Time Synchronization](https://codelivly.com/rooms/ntp-and-time-synchronization) - Beginner, 3 lessons. Master Network Time Protocol (NTP) fundamentals, understand time synchronization mechanics, and learn to secure NTP… - [DHCP Administration and Security](https://codelivly.com/rooms/dhcp-administration-and-security) - Beginner, 5 lessons. Master the DHCP DORA process, scope configuration, and learn to defend against rogue DHCP servers and starvation… - [DNS Administration & Security](https://codelivly.com/rooms/dns-administration-security) - Intermediate, 5 lessons. Master DNS architecture, record types, zone transfers, and learn how to secure DNS against reconnaissance and tunneling… - [Capacity Planning and Documentation](https://codelivly.com/rooms/capacity-planning-and-documentation) - Beginner, 4 lessons. Master the fundamentals of network capacity planning and technical documentation to build scalable, resilient, and… - [Network Redundancy Protocols](https://codelivly.com/rooms/network-redundancy-protocols) - Intermediate, 4 lessons. Master HSRP, VRRP, and GLBP to ensure high availability and secure network redundancy against failover and MITM attacks. - [IP Addressing Strategy and VLSM](https://codelivly.com/rooms/ip-addressing-strategy-and-vlsm) - Intermediate, 5 lessons. Master efficient IP allocation using VLSM, CIDR, and route summarization to optimize enterprise network design and… - [Hierarchical Network Design](https://codelivly.com/rooms/hierarchical-network-design) - Intermediate, 4 lessons. Master the industry-standard Three-Tier and Collapsed Core network models to build scalable, resilient enterprise… - [EIGRP and Redistribution](https://codelivly.com/rooms/eigrp-and-redistribution) - Beginner, 5 lessons. Master Enhanced Interior Gateway Routing Protocol (EIGRP) and multi-protocol redistribution. - [BGP Fundamentals](https://codelivly.com/rooms/bgp-fundamentals) - Beginner, 5 lessons. Master the Border Gateway Protocol (BGP). Learn Autonomous Systems, eBGP vs. - [OSPF Fundamentals](https://codelivly.com/rooms/ospf-fundamentals) - Beginner, 6 lessons. Learn how OSPF discovers neighbors, builds a link-state database, and calculates shortest paths, and how misconfigured… - [Static & Default Routing](https://codelivly.com/rooms/static-default-routing) - Beginner, 5 lessons. Learn how routers forward traffic using static and default routes, and why misconfigured routing is a goldmine for… - [Client Debrief & Retesting Process](https://codelivly.com/rooms/client-debrief-retesting-process) - Intermediate, 5 lessons. Close the loop. Learn how to deliver findings to stakeholders, handle technical pushback, and conduct verification… - [Executive Summary vs Technical Findings](https://codelivly.com/rooms/executive-summary-vs-technical-findings) - Intermediate, 4 lessons. Master the two audiences of every pentest report. Learn to translate technical exploits into business risk for… - [Writing a Professional Pentest Report](https://codelivly.com/rooms/writing-a-professional-pentest-report) - Intermediate, 6 lessons. The report is the product. Learn to structure executive summaries, technical findings, risk ratings, and remediation… - [Evidence Collection During a Test](https://codelivly.com/rooms/evidence-collection-during-a-test) - Beginner, 5 lessons. Master the art of capturing bulletproof pentest evidence. Learn to hash artifacts, structure proof folders, and… - [Scoping & Rules of Engagement](https://codelivly.com/rooms/scoping-rules-of-engagement) - Beginner, 5 lessons. Master the most critical phase of any pentest. Learn how to define scope, draft rules of engagement, and secure legal… - [PTES Overview](https://codelivly.com/rooms/ptes-overview) - Beginner, 4 lessons. Walk through all seven phases of the Penetration Testing Execution Standard, from pre-engagement scoping to final… - [Spanning Tree Protocol (STP)](https://codelivly.com/rooms/spanning-tree-protocol-stp) - Beginner, 5 lessons. Master Spanning Tree Protocol (STP), root bridge election, RSTP convergence, and Layer 2 security features like BPDU… - [Switching Concepts & VLANs](https://codelivly.com/rooms/switching-concepts-vlans) - Beginner, 6 lessons. Master Ethernet switching, MAC address tables, VLAN segmentation, 802.1Q trunking, and inter-VLAN routing with hands-on… - [API Security Testing Basics](https://codelivly.com/rooms/api-security-testing-basics) - Intermediate, 6 lessons. Master REST API penetration testing. Discover hidden endpoints, exploit BOLA and Mass Assignment, and bypass API rate… - [Insecure Deserialization](https://codelivly.com/rooms/insecure-deserialization) - Intermediate, 5 lessons. Exploit insecure deserialization across PHP, Java, Python, and .NET to achieve remote code execution using gadget… - [XML External Entity (XXE) Injection](https://codelivly.com/rooms/xml-external-entity-xxe-injection) - Intermediate, 5 lessons. Master XXE injection attacks, from basic local file reading to blind out-of-band exfiltration and SSRF chaining. - [SSRF (Server-Side Request Forgery)](https://codelivly.com/rooms/ssrf) - Beginner, 6 lessons. Master Server-Side Request Forgery (SSRF). Learn to exploit URL parameters, access internal services, dump cloud… - [File Upload Vulnerabilities](https://codelivly.com/rooms/file-upload-vulnerabilities) - Intermediate, 6 lessons. Master file upload vulnerabilities. Learn to bypass client-side validation, extension filters, and magic bytes to… - [Authentication & Session Management Flaws](https://codelivly.com/rooms/authentication-session-management-flaws) - Intermediate, 7 lessons. Master web authentication and session management vulnerabilities. - [Social Engineering Toolkit (SET)](https://codelivly.com/rooms/social-engineering-toolkit-set) - Intermediate, 5 lessons. Master social engineering attacks using SET. Learn to clone websites, craft spear-phishing campaigns, create infectious… - [Aircrack-ng Suite & Wireless Attacks](https://codelivly.com/rooms/aircrack-ng-suite-wireless-attacks) - Advanced, 6 lessons. Master wireless penetration testing using the Aircrack-ng suite. - [Windows Privilege Escalation](https://codelivly.com/rooms/windows-privilege-escalation) - Advanced, 5 lessons. Master Windows privilege escalation techniques including WinPEAS enumeration, token impersonation, unquoted service… - [Linux Privilege Escalation](https://codelivly.com/rooms/linux-privilege-escalation) - Advanced, 6 lessons. Master Linux privilege escalation techniques including SUID/SGID abuse, cron job exploitation, kernel exploits, and… - [Lateral Movement Techniques](https://codelivly.com/rooms/lateral-movement-techniques) - Advanced, 6 lessons. Master post-exploitation lateral movement using Pass-the-Hash, Pass-the-Ticket, PsExec, WMI, and WinRM to navigate… - [BloodHound: Active Directory Attack Path Mapping](https://codelivly.com/rooms/bloodhound-active-directory-attack-path-mapping) - Advanced, 5 lessons. Learn to map and exploit hidden Active Directory relationships using BloodHound and SharpHound to find the shortest… - [Mimikatz & Credential Dumping](https://codelivly.com/rooms/mimikatz-credential-dumping) - Advanced, 5 lessons. Master the ultimate Windows credential extraction tool. Learn to bypass AV/EDR, dump LSASS memory, and execute stealthy… - [Active Directory Fundamentals](https://codelivly.com/rooms/active-directory-fundamentals) - Intermediate, 5 lessons. Master the crown jewel of enterprise networks. Understand AD architecture, core protocols (Kerberos, LDAP, NTLM), and… - [Hydra & Online Brute Forcing](https://codelivly.com/rooms/hydra-online-brute-forcing) - Intermediate, 6 lessons. Master the art of online credential attacks. Learn to configure Hydra, evade account lockouts, and systematically… - [John the Ripper](https://codelivly.com/rooms/john-the-ripper) - Intermediate, 5 lessons. Master the ultimate field-testing Swiss Army Knife. Learn to auto-detect obscure hashes, crack encrypted archives (ZIP,… - [Hashcat](https://codelivly.com/rooms/hashcat) - Intermediate, 6 lessons. Master the world's fastest password cracker. Learn to identify hashes, configure GPU-accelerated attacks, and crack… - [IDOR & Broken Access Control](https://codelivly.com/rooms/idor-broken-access-control) - Intermediate, 5 lessons. Master the #1 OWASP vulnerability. Learn to map authorization models, exploit IDORs, and bypass broken access controls… - [Cross-Site Scripting (XSS)](https://codelivly.com/rooms/cross-site-scripting-xss) - Beginner, 5 lessons. Master the art of client-side injection. Learn to identify, exploit, and weaponize Reflected, Stored, and DOM-based XSS… - [SQL Injection](https://codelivly.com/rooms/sql-injection) - Intermediate, 6 lessons. Master the art of database manipulation. Learn to identify, exploit, and extract data from SQL injection… - [Burp Suite Fundamentals](https://codelivly.com/rooms/burp-suite-fundamentals) - Beginner, 7 lessons. Master the industry-standard web proxy. Learn to intercept, manipulate, and automate web traffic to uncover hidden… - [Metasploit Framework](https://codelivly.com/rooms/metasploit-framework) - Intermediate, 7 lessons. Transition from reconnaissance to exploitation. Master the Metasploit Framework to weaponize vulnerabilities, generate… - [DNS Enumeration](https://codelivly.com/rooms/dns-enumeration) - Intermediate, 5 lessons. Master the Domain Name System. Learn to extract zone data, analyze DNS records, and weaponize subdomain discovery to… - [SMB Enumeration](https://codelivly.com/rooms/smb-enumeration) - Intermediate, 5 lessons. Master the Server Message Block protocol. Learn to extract users, shares, and passwords, and exploit misconfigurations… - [Gobuster & Directory Enumeration](https://codelivly.com/rooms/gobuster-directory-enumeration) - Beginner, 6 lessons. Stop just looking at the homepage. Master the art of directory enumeration to uncover hidden admin panels, backup… - [Reconnaissance Methodology](https://codelivly.com/rooms/reconnaissance-methodology) - Beginner, 5 lessons. Master the art of the footprint. Differentiate passive and active recon, leverage OSINT, enumerate subdomains, and… - [Nmap Fundamentals](https://codelivly.com/rooms/nmap-fundamentals) - Beginner, 7 lessons. Master the ultimate network x-ray machine. Go beyond basic port scanning to understand TCP packet mechanics, OS… - [DFIR Tools Intro](https://codelivly.com/rooms/dfir-tools-intro) - Intermediate, 4 lessons. Master the modern DFIR stack. Deploy Velociraptor for deep endpoint forensics at scale and orchestrate the entire… - [Sysmon + Sigma in Practice](https://codelivly.com/rooms/sysmon-sigma-in-practice) - Intermediate, 3 lessons. Master the ultimate endpoint detection combo. Configure Sysmon for deep telemetry, write platform-agnostic Sigma rules,… - [Wazuh Open-Source SOC Stack](https://codelivly.com/rooms/wazuh-open-source-soc-stack) - Intermediate, 4 lessons. Deploy and configure a production-grade, open-source XDR/SIEM stack. - [SIEM Hands-on Lab](https://codelivly.com/rooms/siem-hands-on-lab) - Intermediate, 5 lessons. Deploy a practice SIEM environment, ingest raw log data, write complex correlation queries, and build actionable… - [Incident Reporting & Communication](https://codelivly.com/rooms/incident-reporting-communication) - Intermediate, 3 lessons. Master the art of translating technical chaos into clear executive reports. - [Evidence Handling & Chain of Custody](https://codelivly.com/rooms/evidence-handling-chain-of-custody) - Intermediate, 5 lessons. Master the legal and technical rigor of digital forensics. Learn to preserve evidence integrity, manage the chain of… - [The Incident Response Lifecycle](https://codelivly.com/rooms/the-incident-response-lifecycle) - Intermediate, 6 lessons. Master the 6 phases of Incident Response, from proactive preparation and surgical containment to eradication and… - [Beaconing & C2 Traffic Identification](https://codelivly.com/rooms/beaconing-c2-traffic-identification) - Advanced, 4 lessons. Master the detection of Command and Control channels. Learn to identify rhythmic beaconing, calculate jitter, and hunt… - [Network Traffic Analysis](https://codelivly.com/rooms/network-traffic-analysis) - Advanced, 4 lessons. Master the art of analyzing network wire data. Learn to detect C2 beaconing, DNS tunneling, lateral movement, and data… - [IDS/IPS Fundamentals](https://codelivly.com/rooms/idsips-fundamentals) - Intermediate, 5 lessons. Master network-level defense. Learn the architecture of Intrusion Detection and Prevention Systems, analyze… - [Process Trees & Command Line Analysis](https://codelivly.com/rooms/process-trees-command-line-analysis) - Advanced, 5 lessons. Master the most critical endpoint telemetry. Learn to analyze parent-child process lineage, decode obfuscated command… - [EDR/XDR & Endpoint Telemetry](https://codelivly.com/rooms/edrxdr-endpoint-telemetry) - Advanced, 4 lessons. Master the microscope of the SOC. Learn to leverage EDR/XDR platforms, analyze deep endpoint telemetry, and build… - [ATT&CK Mapping in Practice](https://codelivly.com/rooms/attck-mapping-in-practice) - Advanced, 4 lessons. Translate theory into action. Learn how to map SOC detections to MITRE ATT&CK, visualize coverage using ATT&CK… - [OSINT & Threat Intel Sources](https://codelivly.com/rooms/osint-threat-intel-sources) - Advanced, 5 lessons. Master the art of gathering cyber intelligence. Explore Open-Source Intelligence (OSINT) methodologies, commercial… - [Introduction to Threat Hunting](https://codelivly.com/rooms/introduction-to-threat-hunting) - Advanced, 4 lessons. Shift from reactive alert triage to proactive cyber defense. Master the fundamentals of hypothesis-driven threat… - [Detection Logic & Rule Engineering](https://codelivly.com/rooms/detection-logic-rule-engineering) - Advanced, 5 lessons. Master the technical core of the SOC. Translate threat intelligence into high-fidelity SIEM and EDR correlation rules,… - [IOCs, IOAs & TTPs](https://codelivly.com/rooms/iocs-ioas-ttps) - Advanced, 4 lessons. Understand the hierarchy of threat detection. Explore Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and… - [Escalation, Documentation & Ticketing](https://codelivly.com/rooms/escalation-documentation-ticketing) - Intermediate, 4 lessons. Master the operational backbone of incident handling. Explore escalation matrices, professional SOC documentation… - [False Positives & False Negatives](https://codelivly.com/rooms/false-positives-false-negatives) - Intermediate, 4 lessons. Master the accuracy of security detection. Explore the concepts of false positives, false negatives, true positives,… - [Alert Lifecycle & Severity](https://codelivly.com/rooms/alert-lifecycle-severity) - Intermediate, 4 lessons. Master the journey of a security alert. Explore alert triage, severity classification, the lifecycle of an incident,… - [Log Sources Across the Stack](https://codelivly.com/rooms/log-sources-across-the-stack) - Intermediate, 4 lessons. Understand the critical telemetry required for a SIEM. Explore log sources across the network, endpoint, identity,… - [SIEM Fundamentals](https://codelivly.com/rooms/siem-fundamentals) - Intermediate, 4 lessons. Master the brain of the SOC. Explore Security Information and Event Management (SIEM) architecture, log ingestion,… - [SOC Essentials: Roles & Workflows](https://codelivly.com/rooms/soc-essentials-roles-workflows) - Intermediate, 4 lessons. Understand the Security Operations Center (SOC). Explore the People, Process, and Technology triad, Tier 1/2/3 roles,… - [MITRE ATT&CK & Cyber Kill Chain](https://codelivly.com/rooms/mitre-attck-cyber-kill-chain) - Beginner, 3 lessons. Understand how attackers operate. Explore the 7 stages of the Cyber Kill Chain, the MITRE ATT&CK framework, TTPs, and… - [Security Frameworks Overview](https://codelivly.com/rooms/security-frameworks-overview) - Beginner, 4 lessons. Understand how organizations structure their security programs. - [Cryptography Essentials](https://codelivly.com/rooms/cryptography-essentials) - Beginner, 5 lessons. Master the math that secures the internet. Explore symmetric and asymmetric encryption, hashing, PKI, TLS/SSL… - [Authentication & Access Control](https://codelivly.com/rooms/authentication-access-control) - Beginner, 4 lessons. Master the gatekeepers of cybersecurity. Explore authentication vs. - [Attack Surface & Security Controls](https://codelivly.com/rooms/attack-surface-security-controls) - Beginner, 5 lessons. Master the strategic side of cybersecurity. Explore attack surfaces, defense in depth, least privilege, zero trust, and… - [CIA Triad & Risk Fundamental](https://codelivly.com/rooms/cia-triad-risk-fundamental) - Beginner, 4 lessons. Master the core principles of information security. Explore the CIA triad, risk assessment, and real-world breach case… - [Linux Logging, Journaling, and Auditing](https://codelivly.com/rooms/linux-logging-journaling-and-auditing) - Beginner, 3 lessons. Master Linux log management. Explore syslog, the systemd journal, and auditd to track attacker activity, detect… - [Cron, At, and Timed Execution](https://codelivly.com/rooms/cron-at-and-timed-execution) - Beginner, 3 lessons. Master Linux task scheduling. Explore cron jobs, the at daemon, and how attackers abuse scheduled tasks for stealthy… - [SSH (Secure Shell) Architecture & Security](https://codelivly.com/rooms/ssh-secure-shell-architecture-security) - Beginner, 3 lessons. Master Linux remote administration. Explore SSH daemon hardening, key management, and how attackers abuse SSH for… - [Systemd & Service Management](https://codelivly.com/rooms/systemd-service-management) - Beginner, 3 lessons. Master the modern Linux init system. Explore systemd architecture, manage services with systemctl, and learn how… - [Processes, Memory, and the /proc Filesystem](https://codelivly.com/rooms/processes-memory-and-the-proc-filesystem) - Beginner, 3 lessons. Master Linux process management and memory analysis. Explore PIDs, the virtual /proc filesystem, and how attackers use… - [Identity, Permissions, and Privilege Escalation](https://codelivly.com/rooms/identity-permissions-and-privilege-escalation) - Beginner, 3 lessons. Master Linux Discretionary Access Control (DAC). Decode file permissions, understand special bits like SUID, and learn… - [Bash, Pipes, and Text Processing](https://codelivly.com/rooms/bash-pipes-and-text-processing) - Beginner, 3 lessons. Master the Linux command line pipeline. Learn to chain commands with pipes, redirect standard streams, and use grep,… - [The Linux Filesystem Hierarchy & Storage](https://codelivly.com/rooms/the-linux-filesystem-hierarchy-storage) - Beginner, 3 lessons. Master the Linux filesystem structure. Explore the FHS, understand inodes and links, and learn to use advanced… - [Introduction to Linux](https://codelivly.com/rooms/introduction-to-linux) - Beginner, 3 lessons. Master the foundations of Linux. Explore the kernel architecture, popular distributions, and essential command-line… - [PowerShell for Security](https://codelivly.com/rooms/powershell-for-security) - Beginner, 4 lessons. Master PowerShell for cybersecurity. Learn to write scripts for threat hunting, parse event logs, automate incident… - [Sysmon (System Monitor)](https://codelivly.com/rooms/sysmon-system-monitor) - Beginner, 3 lessons. Master Sysinternals Sysmon for deep system telemetry. Explore its architecture, critical event IDs for threat hunting,… - [Microsoft Defender & AV Logs](https://codelivly.com/rooms/microsoft-defender-av-logs) - Beginner, 3 lessons. Master Microsoft Defender Antivirus logging. Explore Defender architecture, Attack Surface Reduction (ASR) rules, and… - [Event Viewer & Windows Security Logs](https://codelivly.com/rooms/event-viewer-windows-security-logs) - Beginner, 4 lessons. Master Windows logging and monitoring. Explore Event Viewer architecture, critical Security Event IDs, PowerShell… - [Services, Scheduled Tasks & Startup](https://codelivly.com/rooms/services-scheduled-tasks-startup) - Beginner, 3 lessons. Master Windows persistence and automation mechanisms. Explore Windows Services, Scheduled Tasks, and Startup locations,… - [Users & Groups](https://codelivly.com/rooms/users-groups) - Beginner, 4 lessons. Master Windows identity and access management. Explore local accounts, the SAM database, NTLM vs. - [The Windows Registry](https://codelivly.com/rooms/the-windows-registry) - Beginner, 3 lessons. Explore the central configuration database of Windows. Understand registry hives, critical keys for malware… - [File System (NTFS)](https://codelivly.com/rooms/file-system-ntfs) - Beginner, 4 lessons. Master the NTFS file system. Explore the Master File Table (MFT), Alternate Data Streams (ADS), file permissions, and… - [Windows Architecture](https://codelivly.com/rooms/windows-architecture) - Beginner, 7 lessons. Explore the core foundations of the Windows OS. Understand User vs. - [DNS Deep Dive & Packet Analysis](https://codelivly.com/rooms/dns-deep-dive-packet-analysis) - Beginner, 5 lessons. Uncover the internet's phonebook and master the analyst's toolkit. - [Network Infrastructure & Routing](https://codelivly.com/rooms/network-infrastructure-routing) - Beginner, 5 lessons. Master the hardware and architecture of the network. Explore switches, routers, NAT, VLANs, VPNs, and firewalls to… - [Essential Ports & Protocols](https://codelivly.com/rooms/essential-ports-protocols) - Beginner, 4 lessons. Decode the language of the internet. Master the essential ports and protocols that power web traffic, email, remote… - [Network Addressing & Transport](https://codelivly.com/rooms/network-addressing-transport) - Beginner, 4 lessons. Master the math and logic of the network. Explore MAC addresses, ARP, IPv4/IPv6, ICMP, and the battle between reliable… - [Network Basics](https://codelivly.com/rooms/network-basics) - Beginner, 4 lessons. Understand how networks are structured and how data moves. Explore LANs, WANs, the 7 layers of the OSI model, and the… - [Virtualization](https://codelivly.com/rooms/virtualization) - Beginner, 4 lessons. Master the foundation of modern cyber labs and cloud infrastructure. - [Command Line](https://codelivly.com/rooms/command-line) - Beginner, 3 lessons. Ditch the GUI and master the hacker's native tongue. Learn essential Linux Bash and Windows PowerShell commands to… - [Operating Systems](https://codelivly.com/rooms/operating-systems) - Beginner, 5 lessons. Understand the core of computing. Explore how operating systems manage hardware, processes, and memory, and learn the… - [Binary & Hexadecimal](https://codelivly.com/rooms/binary-hexadecimal) - Beginner, 6 lessons. Master the language of machines. Learn how computers use binary and hexadecimal to represent data, and why these number… - [How Computers Work](https://codelivly.com/rooms/how-computers-work) - Beginner, 7 lessons. Understand computer architecture fundamentals. Learn how CPUs, RAM, and storage work together to form the foundation of… ## Related - [Learning paths](https://codelivly.com/learning-paths)