Cybersecurity track

    Interactive roadmap

    Cybersecurity roadmap

    Learn to defend systems, networks and data, from the basics to handling a real incident.

    Your progress0% · 0 of 21 topics
    Done In progress Skipped OptionalClick any topic to learn more and mark your progress.
    1. Step 1 · 0/4 done

      Networking and OS fundamentals

      You can only protect what you understand.

    2. Step 2 · 0/5 done

      Security principles and threats

      How attackers think, and the basic rules of defence.

    3. Step 3 · 0/4 done

      Vulnerability management

      Find weaknesses and fix the most important ones first.

    4. Step 4 · 0/4 done

      Monitoring and detection

      Spot attacks while they are happening.

    5. Step 5 · 0/4 done

      Incident response and capstone

      Handle an incident calmly and write it up.

    Learn it all, with a tutor that never sleeps

    Every topic links to LevelUp lessons, practice exercises and the 24/7 AI Tutor. Your progress updates as you master lessons.

    See the Cybersecurity trackShare on LinkedInShare on WhatsApp

    Every topic explained

    Step 1: Networking and OS fundamentals

    IP addresses, ports, TCP/UDP and the layers data passes through.What is the OSI model? (Cloudflare)
    DNS, HTTP(S), SSH and email: how they work and how they get abused.What is DNS? (Cloudflare)
    The shell, users, permissions and logs on the systems most servers run.The Linux command line for beginners (Ubuntu)
    Accounts, Active Directory basics and the event logs analysts read every day.

    Step 2: Security principles and threats

    Confidentiality, integrity and availability: what we are actually protecting.
    Phishing, malware, ransomware, password attacks and web attacks.OWASP Top 10
    Asking "what could go wrong?" for a system before attackers do.Threat Modeling Cheat Sheet (OWASP)
    NIST CSF and MITRE ATT&CK: shared language for defences and attacker techniques.NIST Cybersecurity Framework · MITRE ATT&CK
    (optional)
    Encryption, hashing and certificates, and when each is used.

    Step 3: Vulnerability management

    Using scanners to find missing patches and misconfigurations.
    Reading vulnerability reports and CVSS scores.CVE program
    Fixing what is exposed and actively exploited first, not just what scores highest.Known Exploited Vulnerabilities catalog (CISA)
    Reducing the attack surface with secure settings, least privilege and MFA.

    Step 4: Monitoring and detection

    What systems record, where to find it and what normal looks like.
    Collecting logs in one place and searching them with tools such as Splunk or Microsoft Sentinel.Microsoft Sentinel documentation
    Deciding quickly which alerts are real and which are noise.
    (optional)
    Spotting suspicious traffic with intrusion detection and packet capture.Wireshark user guide

    Step 5: Incident response and capstone

    Prepare, detect, contain, eradicate, recover and learn.Incident response guide (NIST SP 800-61)
    (optional)
    Preserving evidence and building a timeline of what happened.
    Writing a clear report for both technical and non-technical readers.
    Investigate a simulated incident from first alert to final report.