Identifying Security Operations Fundamentals
Core concepts of cybersecurity operations, SOC workflows, governance, and foundational threat detection strategies
CompTIA Cybersecurity Analyst (CySA+ CS0-004) is an intermediate-level, vendor-neutral 5-day training program designed for professionals responsible for detecti… CompTIA Cybersecurity Analyst (CySA+ CS0-004) is an intermediate-level, vendor-neutral 5-day training program designed for professionals responsible for detecting, analyzing, and responding to cybersecurity threats in real-world environments. Reflecting the latest CySA+ V4 evolution, this course validates applied skills across threat detection, vulnerability management, incident response, and AI in security operations
CompTIA Cybersecurity Analyst (CySA+) is an intermediate-level, vendor-neutral certification designed for professionals responsible for detecting, analyzing, and responding to cybersecurity threats in real-world environments.
This 5-day course covers CySA+ V4 (Exam CS0-004), reflecting the latest evolution in security operations. It validates hands-on, applied skills across the full security operations lifecycle: from threat detection and vulnerability management, to incident response and stakeholder communication. The certification emphasizes real-world job performance through scenario-based skills, including the use of modern industry-standard tools (such as SIEM and EDR platforms), automation, and security frameworks.
New in CySA+ V4 is expanded coverage of Artificial Intelligence (AI) in security operations, addressing both its practical use in threat detection and the unique security risks it introduces. Overall, CySA+ prepares professionals to work effectively in modern environments that span cloud, hybrid infrastructure, identity-based systems, and evolving threat landscapes.
This course is ideal for cybersecurity professionals in roles such as:
Security Analyst
SOC Analyst (Level 2)
Threat Intelligence Analyst
Vulnerability Analyst
Incident Response Analyst
Security Engineer
Network+ and Security+ certifications or equivalent knowledge.
Approximately 4 years of hands-on experience in a SOC, security analyst, or vulnerability management role
Setelah mengikuti pelatihan ini, peserta diharapkan mampu:
Comprehensive 14-module curriculum aligned with CompTIA CySA+ V4 (CS0-004), covering security operations, threat intelligence and hunting, network and application vulnerability assessment, incident response execution, and security automation.
Core concepts of cybersecurity operations, SOC workflows, governance, and foundational threat detection strategies
Risk identification, assessment methodologies, threat modeling frameworks, and risk-based prioritization.
Attack surface management, system hardening, and secure configuration practices across enterprise environments.
Evaluating security implications across modern network, cloud, dan hybrid infrastructure architectures.
Identity-based systems, access control models, endpoint security management, and authentication protections.
Analyzing threat actor tactics, leveraging threat intelligence sources, and conducting proactive threat hunting across environments.
Vulnerability scanning, analyzing network exposures, prioritizing remediation, and mitigating infrastructure risks.
Log management, incident escalation procedures, stakeholder reporting, dashboards, and post-incident review metrics.
Applying structured incident response processes and real-world containment, eradication, and recovery techniques.
Investigating suspicious activity and Indicators of Compromise (IoCs) across networks, endpoints, and cloud environments using SIEM and EDR platforms.
Utilizing scripting fundamentals, security analytics, pattern recognition, and AI-driven threat detection tools.
Security orchestration, automation, tool integration, and evaluating the operational benefits and risks of AI in security operations.
Identifying, analyzing, and prioritizing vulnerabilities across web, cloud, and enterprise software applications.
Implementing secure software development practices and mitigating application-level attacks and vulnerabilities.