HackNowHackNow
O'quv yo'li
Kiberxavfsizlik dunyosiga kirish — hujum va himoya tushunchalari, kasblar va tahdid landshafti.
Kiberxavfsizlik nima va nima uchun muhim?. Bu sinf Cyber Horizons path, Kiberxavfsizlik landshafti moduliga tegishli.
Tarmoq, hujum, himoya, kriptografiya va autentifikatsiya sohasidagi eng muhim terminlar va tushunchalar.
Kiberxavfsizlikdagi kasblar va mansab yo'llari. Bu sinf Cyber Horizons path, Kiberxavfsizlik landshafti moduliga tegishli.
CIA Triadi, AAA Framework, Least Privilege va Defense in Depth tamoyillarini chuqur o'rganish.
7 qatlamli himoya strategiyasi, 3-2-1 backup, amaliy ransomware himoyasi.
Zero Trust tamoyillari, ZTNA vs VPN, Google BeyondCorp, amaliy qo'llanish.
Hujumchi nuqtai nazari — qanday fikrlaydi?. Bu sinf Cyber Horizons path, Kiberxavfsizlik landshafti moduliga tegishli.
Himoyachi nuqtai nazari — qanday himoyalaydi?. Bu sinf Cyber Horizons path, Kiberxavfsizlik landshafti moduliga tegishli.
APT guruhlari, supply chain hujumlari, zero-day zaifliklar va Stuxnet tahlili.
Virus, worm, trojan, ransomware, rootkit, fileless malware va botnet turlarini real voqealar orqali o'rganish.
WannaCry, NotPetya, SolarWinds, Colonial Pipeline, Equifax, Log4Shell, MOVEit — batafsil tahlil.
Internet qatlamlari, Tor tarmog'i, underground forumlar, ransomware leak saytlari, data brokerlari va huquq-tartibot operatsiyalari.
Cyber Kill Chain modeli orqali kiberhujumning 7 bosqichini qadamma-qadam o'rganish: razvedka, qurollantirish, yetkazish, ekspluatatsiya, o'rnatish, C2, maqsadga erishish.
Raqamli, fizik va ijtimoiy hujum yuzalarini chuqur o'rganish. Attack Surface Management va kamaytirish strategiyalari.
Phishing, spear phishing, vishing, pretexting, baiting va boshqa ijtimoiy muhandislik hujum turlarini real voqealar orqali o'rganish va himoyalanish usullari.
Nation-state APT guruhlari, ransomware sindicatlari, hacktivistlar, insayder tahdidlar va threat intelligence vositalari.
SOC turlari, jamoa rollari, texnologiya steki, SOAR, kundalik operatsiyalar va karyera yo'li.
SIEM, IDS/IPS, EDR/XDR, log tahlili, alert triage va monitoring best practices.
NIST IR framework, 4 bosqich, CSIRT, ransomware playbook, post-incident review.
Digital forensics jarayoni, dalil yig'ish, Chain of Custody, vositalar va Windows artefaktlar.
Zero Trust tamoyillari, ZTNA vs VPN, Google BeyondCorp, amaliy qo'llanish.
7 qatlamli himoya strategiyasi, 3-2-1 backup, amaliy ransomware himoyasi.