A shared foundational course that introduces learners to business IT environments, endpoints, operating systems, servers, virtual machines, networking, identity, cloud resources, logs, and essential cybersecurity concepts needed before progressing into analyst or technician pathways.

​

​

• Business IT environment basics

• Systems, networking, and user accounts

• Logs, troubleshooting, and cloud basics

• Security hygiene, identity, and vulnerabilities

​

Introduces learners to security monitoring and alert review across endpoint, network, identity, cloud, email, vulnerability, and log sources. Learners begin using security information to determine what happened, which systems or identities are involved, and whether further investigation is needed.

• Security telemetry and monitoring

• Alert review and initial triage

• Endpoint, network, identity, and cloud events

• Log analysis and case documentation

​

Develops the learner's ability to investigate suspicious activity by collecting, comparing, and correlating evidence while applying threat context. Learners examine threat actors, threat vectors, vulnerabilities, TTPs, threat tools, indicators, and investigative evidence without overstating attribution.

• Evidence collection and correlation

• Threat actors, vectors, vulnerabilities, and TTPs

• Threat tools and indicators

• Investigation timelines and analytical conclusions​​​

Prepares learners to assess the severity, scope, risk, and potential impact of cybersecurity events and support appropriate defensive action. Learners practice authorized containment, escalation, evidence preservation, incident documentation, reporting, and operational handoffs.

• Incident severity and scope assessment

• Vulnerability and threat context

• Containment, escalation, and response actions

• Incident reporting, handoffs, and practical capstone​