Cyber Wiki Learning Path
Endpoint and Operating System Security
Harden operating systems, endpoints, hypervisors, boot chains, storage, services, and administrative workflows.
Recommended Sequence
39 connected entries
AI Model Serving Security
AI model serving security protects inference endpoints, runtimes, dependencies, model access, scaling, and operational telemetry.
Security operations practice · IntermediateAntivirus, EDR, and XDR
Antivirus, EDR, and XDR is a cybersecurity concept used to describe, protect, analyze, or operate an important part of a modern information environment.
Execution control · IntermediateApplication Allowlisting
Application allowlisting permits only approved executables, scripts, libraries, installers, or other code to run under defined rules.
Systems security concept · IntermediateBIOS and UEFI Security
BIOS and UEFI Security concerns the secure design, configuration, operation, monitoring, or recovery of computing platforms and connected devices.
Provisioning security · IntermediateBare-Metal Provisioning Security
Bare-metal provisioning security protects installation media, firmware settings, deployment networks, bootstrap credentials, hardware identity, and the first configuration applied to a physical server.
Threat and attack concept · IntermediateBootkits
Bootkits describes an adversary technique, campaign pattern, or malicious capability. Defenders study the conditions that make it possible, the behaviors it produces, and the controls that can prevent, detect, contain, and recover from it.
Software supply-chain control · IntermediateCloud Image Security
Cloud image security protects virtual-machine and container images from vulnerable packages, malware, embedded secrets, untrusted changes, and unauthorized distribution.
Network architecture · IntermediateCloud Private Connectivity
Cloud private connectivity creates controlled paths between users, data centers, cloud networks, and managed services without exposing traffic directly through public endpoints.
Database security · IntermediateDatabase Configuration Hardening
Database configuration hardening reduces unnecessary functions, insecure defaults, exposed interfaces, weak authentication, and excessive privileges in a database platform.
Investigative discipline · IntermediateDigital Forensics
Digital forensics applies repeatable methods to identify, preserve, collect, examine, analyze, and communicate evidence from digital systems and services.
Systems security concept · IntermediateEndpoint Application Control
Endpoint Application Control concerns the secure design, configuration, operation, monitoring, or recovery of computing platforms and connected devices.
Detection platform · IntermediateEndpoint Detection and Response
Endpoint detection and response collects endpoint activity, identifies suspicious behavior, supports investigation, and provides response actions such as isolation or process termination.
Security practice · BeginnerEndpoint Hardening
Endpoint hardening reduces unnecessary exposure on workstations, laptops, servers, and mobile devices through secure configuration and controlled functionality.
Operational technology security · AdvancedEngineering Workstation Hardening
Engineering workstation hardening protects systems that configure controllers, logic, firmware, safety parameters, and other high-impact OT assets.
Filesystem security · IntermediateFilesystem Mount Hardening
Filesystem mount hardening uses mount boundaries and options to reduce executable content, device access, privilege transitions, and unsafe write behavior on selected filesystems.
Platform security practice · AdvancedFirmware Security
Firmware security protects the low-level code and configuration that initialize and control hardware through trusted update, integrity verification, access control, inventory, monitoring, and recovery.
Cryptography and trust concept · IntermediateFull-Disk Encryption
Full-Disk Encryption is a cryptographic or trust-management mechanism used to provide confidentiality, integrity, authenticity, non-repudiation, or secure key establishment.
Image security · IntermediateGolden Image Security
Golden image security establishes a versioned, patched, scanned, minimally configured, and reproducible template for deploying servers or virtual machines without carrying hidden state forward.
Hardware security concept · AdvancedHardware Root of Trust
A hardware root of trust provides protected functions and measurements used to establish device identity, key custody, boot integrity, attestation, or isolated execution.
Virtualization security · IntermediateHypervisor Management-Plane Security
Hypervisor management-plane security protects the privileged interfaces, APIs, accounts, consoles, networks, and automation that can create, inspect, move, or control virtual workloads.
Secure design principle · FoundationalLeast Functionality
Least functionality limits systems to the services, features, protocols, software, accounts, and permissions required for their intended purpose.
Defensive assurance practice · IntermediateMalware Defense Validation
Malware defense validation tests whether prevention, detection, isolation, and response controls work against relevant behaviors without exposing production systems to uncontrolled risk.
Systems security concept · IntermediateOperating System Fundamentals
Operating System Fundamentals concerns the secure design, configuration, operation, monitoring, or recovery of computing platforms and connected devices.
Cloud network security · AdvancedPrivate Link and Service-Endpoint Security
Private-link and service-endpoint security governs private access to managed cloud services, including DNS, identity, routing, policy, and data-exfiltration boundaries.
Generative AI security · AdvancedRAG Security Controls
RAG security controls protect source ingestion, indexing, retrieval, context assembly, and grounded response generation.
Operational technology security · IntermediateRemovable Media Controls for OT
Removable media controls for OT govern authorization, sourcing, scanning, transfer, use, custody, sanitization, and evidence for portable storage that crosses trust boundaries.
Systems security concept · IntermediateRemovable Media Security
Removable Media Security is a cybersecurity concept used to describe, protect, analyze, or operate an important part of a modern information environment.
Hardening practice · IntermediateSOC Technology Hardening
SOC technology hardening protects the monitoring and response stack with least privilege, segmentation, secure configuration, audit logging, resilient access, and controlled administration.
Remote-access security · IntermediateSSH Server Hardening
SSH server hardening limits remote administrative exposure through strong cryptography, controlled authentication, restricted forwarding, explicit access rules, logging, and timely maintenance.
Systems security concept · IntermediateSecure Boot
Secure Boot concerns the secure design, configuration, operation, monitoring, or recovery of computing platforms and connected devices.
Platform security · IntermediateSecure Boot and Trusted Start
Secure boot and trusted start protect the earliest stages of system startup by checking firmware, boot components, and configuration before the operating system assumes control.
Control practice · BeginnerSecurity Baselines
A security baseline defines the minimum approved configuration and protection level for a class of systems, services, accounts, or devices.
Operational control · IntermediateSecurity Configuration Management
Security configuration management defines, applies, monitors, and changes configuration baselines so that systems remain understandable and defensible.
Systems security concept · IntermediateSystem Hardening
System Hardening concerns the secure design, configuration, operation, monitoring, or recovery of computing platforms and connected devices.
Systems security concept · IntermediateType 1 and Type 2 Hypervisors
Type 1 and Type 2 Hypervisors concerns the secure design, configuration, operation, monitoring, or recovery of computing platforms and connected devices.
Systems security concept · IntermediateVirtual Machine Security
Virtual Machine Security concerns the secure design, configuration, operation, monitoring, or recovery of computing platforms and connected devices.
Virtualization security · IntermediateVirtual Machine Snapshot Security
Virtual machine snapshot security governs point-in-time state copies that may contain memory, credentials, sensitive data, vulnerable software, and configuration that later returns during rollback.
Platform concept · IntermediateVirtualization and Containers
Virtualization and containers isolate workloads and share underlying resources through hypervisors, operating-system controls, images, and orchestration platforms.
Service hardening · Intermediatesystemd Service Hardening
systemd service hardening uses unit-level sandboxing, identity, filesystem, capability, namespace, and resource controls to reduce what a Linux service can do if it fails or is compromised.