01-recon-osintPassive and active reconnaissance, subdomain enumeration, DNS analysis,
02-vulnerability-scannerDependency auditing, CVE detection, configuration security review, CVSS
03-exploit-developmentProof-of-concept development, payload crafting, shellcode analysis, and
04-reverse-engineeringBinary analysis, assembly interpretation, disassembly, decompilation,
05-malware-analysisStatic and dynamic malware analysis, YARA rule generation, sandbox configuration,
06-threat-huntingIOC extraction, threat intelligence correlation, MITRE ATT&CK mapping,
07-incident-responseIR playbook execution, evidence collection, forensic timeline analysis,
08-network-securityNetwork traffic analysis, PCAP parsing, IDS/IPS rule creation, firewall
09-web-securityOWASP Top 10 testing, injection vulnerability detection, API security
10-cloud-securityAWS/Azure/GCP security auditing, container and Kubernetes hardening,
11-csoc-automationSOC alert triage, incident playbook automation, escalation workflows,
12-log-analysisSecurity log parsing, anomaly detection, SIEM query building, Sigma rule
13-crypto-analysisSSL/TLS auditing, cipher suite analysis, hash algorithm identification,
14-red-team-opsAuthorized red team engagement planning, C2 architecture design, attack
15-blue-team-defenseSystem hardening, detection engineering, security baseline monitoring,
16-ai-llm-securityLLM and AI application security testing — prompt injection, jailbreak
17-mobile-securityAndroid and iOS application security testing — static and dynamic analysis,
18-ot-ics-securityOperational Technology and industrial control system security — Purdue
19-grc-complianceGovernance, risk, and compliance — risk assessment and scoring, control
20-supply-chain-securitySoftware supply chain security — SBOM generation and analysis, dependency
21-threat-intelligenceCyber threat intelligence production — the intelligence cycle, IOC extraction/normalization/enrichment,
22-purple-teamCollaborative purple-team operations — threat-informed adversary emulation