IT'S CURRENTLY A WIP - WORK IN PROGRESS

"Zero to Hero" "No Bull$h1t" em Segurança Cibernética

Cursos para fazer um "Zero to Hero" em Cyber Segurança sem marketing, vai ter que:

• estudar muito (estamos falando de um "Hero" né?)
• estudar coisas "não técnicas" e "não convencionais" (Qualidade = Hard Skills + Soft Skills)
• estudar mais de uma vez a mesma coisa (Saber = Repetir + Repetir + Repetir)

Ponto bom: Único investimento é o seu tempo, é tudo "na faixa", "de grátis", "sem custo de grana".

Básico - 13 materiais

• Inglês
  • Kultivi - Curso de inglês: https://kultivi.com/cursos/idiomas/ingles
• Português
  • EV - Comunicação Escrita: https://www.ev.org.br/cursos/comunicacao-escrita
• Base de Computação
  • Netacad - Get Connected: https://www.netacad.com/courses/os-it/get-connected
  • FIAP - Gestão de Infraestrutura de TI: https://on.fiap.com.br/local/movimentobrasildigital/
• Segurança da informação geral
  • FGV Nic.Br - Segurança Digital: https://educacao-executiva.fgv.br/cursos/online/curta-media-duracao-online/seguranca-digital
  • FGV Nic.Br - Termos de Uso e Políticas de Privacidade: https://educacao-executiva.fgv.br/cursos/online/curta-media-duracao-online/termos-de-uso-e-politicas-de-privacidade
  • Netacad - Introduction to Cybersecurity: https://www.netacad.com/courses/cybersecurity/introduction-cybersecurity
• Sistemas Operacionais Windows
  • MSLearn - Path Microsoft 365 (9 Módulos): https://docs.microsoft.com/en-us/learn/paths/m365-getmodern/
• Sistemas Operacionais Linux
  • Netacad - Linux Unhatched: https://www.netacad.com/courses/os-it/ndg-linux-unhatched
• Desenvolvimento de software
  • Laracasts - PHP for Beginners: https://laracasts.com/series/php-for-beginners
• Bancos de dados
  • Coursera Michigan - Introduction to SQL: https://www.coursera.org/learn/intro-sql
• Soft Skills
  • Coursera DTS - Learning How to Learn: https://www.coursera.org/learn/learning-how-to-learn
  • FM2S - Criatividade: Princípios e Técnicas: https://ead.fm2s.com.br/curso/curso-de-criatividade-principios-e-abordagens/

Iniciante - 15 materiais

• Português
  • EV - Oficina de Gramática: https://www.ev.org.br/cursos/oficina-de-lingua-portuguesa-gramatica
• Base de computação
  • edX Harvard - cs50x: https://www.edx.org/course/introduction-computer-science-harvardx-cs50x
• Base de Redes
  • Netacad - CCNAv7 Introdução às Redes (pelo Nic.Br): https://cursoseventos.nic.br/curso/curso-ccna-intro-cisco-nicbr/
• Segurança da informação geral
  • Netacad - Cybersecurity Essentials: https://www.netacad.com/courses/cybersecurity/cybersecurity-essentials
  • SANS - CyberAces: https://www.sans.org/cyberaces/
• Sistemas Operacionais Windows
  • MSLearn - Windows Deployment (5 Módulos): https://docs.microsoft.com/en-us/learn/paths/plan-your-windows-10-deployment-strategy/
  • MSLearn - Windows Server (5 Módulos): https://docs.microsoft.com/en-us/learn/paths/windows-server-deployment-configuration-administration/
• Sistemas Operacionais Linux
  • Linux Foundation - Introduction to Linux: https://training.linuxfoundation.org/training/introduction-to-linux/
• Sistemas de Firewall
  • Jose Bravo - PFSense (43 Vídeos): https://www.youtube.com/watch?v=aRVJmlqXAdQ&list=PLHh9jhztlMypPs0EIcpHE5R-5sc27r4Bc
• Desenvolvimento de software
  • Netacad - Python: https://www.netacad.com/courses/programming/pcap-programming-essentials-python
• Bancos de dados
  • Coursera Michigan - Database Design PostgreSQL: https://www.coursera.org/learn/database-design-postgresql
• Ciência de dados
  • Data Science Academy - Big Data Fundamentos 3.0: https://www.datascienceacademy.com.br/cursosgratuitos
  • Data Science Academy - Inteligência Artificial Fundamentos 2.0: https://www.datascienceacademy.com.br/cursosgratuitos
  • Data Science Academy - Introdução à Ciência de Dados 3.0: https://www.datascienceacademy.com.br/cursosgratuitos
• Soft Skills
  • EV - Organizacao Pessoal: https://www.ev.org.br/cursos/organizacao-pessoal

Iniciado - 20 materiais

• Português
  • EV - Técnicas de Redação: https://www.ev.org.br/cursos/tecnicas-de-redacao
• Base de Redes
  • Netacad - CCNAv7 Switching, Routing e Wireless Essentials (pelo Nic.Br): https://cursoseventos.nic.br/curso/curso-ccna-srwe-cisco-nicbr/
• Base de Computação
  • Princeton University Coursera - Computer Architecture: https://www.coursera.org/learn/comparch
• Base de computação em núvem
  • FIAP - Cloud Fundamentals: https://on.fiap.com.br/local/movimentobrasildigital/
• Segurança da informação geral
  • FIAP - Cybersecurity: https://on.fiap.com.br/local/movimentobrasildigital/
  • AacadiTI - Network Defense Essentials: https://acaditi.com.br/essentials-series/#nde
  • Coursera - New York University: https://www.coursera.org/specializations/intro-cyber-security
• Pentest
  • DESEC - Introducao Pentest: https://desecsecurity.com/curso/introducao-pentest
• Segurança Ofensiva
  • AacadiTI - Ethical Hacking Essentials: https://acaditi.com.br/essentials-series/#ehe
  • Portswigger Web Security Academy - Server-side topics (93 Labs): https://portswigger.net/web-security/learning-path
• Forense computacional
  • AcadiTI - Digital Forensics Essentials: https://acaditi.com.br/essentials-series/#dfe
  • BASIS - Intro to DFIR: https://dfir-training.basistech.com/courses/intro-to-divide-and-conquer
• Exercícios de "Capture the Flag"
  • Beco do Exploit - Desafio#2: https://youtube.com/playlist?list=PLHBDBcFA_l_WBcUJWf8cp5BaPsUkquRQU
• Sistemas Operacionais Linux
  • Aurélio - Portal do Shell: https://aurelio.net/shell/
• Sistemas Operacionais Windows
  • MSLearn - PowerShell (6 Módulos): https://docs.microsoft.com/en-us/learn/paths/powershell/
• Desenvolvimento de software
  • Netacad - JavaScript: https://www.netacad.com/courses/programming/pcap-programming-essentials-python
• Caixa de Ferramentas
  • Linux Foundation - Git: https://training.linuxfoundation.org/training/git-for-distributed-software-development-lfd109x/
• Ciência de dados
  • Data Science Academy - Microsoft Power BI Para Data Science, Versão 2.0: https://www.datascienceacademy.com.br/cursosgratuitos
• Soft Skills
  • FIAP - DevOps & Agile Culture: https://on.fiap.com.br/local/movimentobrasildigital/
  • SrgioBuria - XGH Extreme Go Horse (como NÃO resolver as coisas em TI): https://pt.slideshare.net/SrgioBuria/xgh-extreme-go-horse

Intermediário - 26 materiais

• Base de Redes
  • Nic.Br - Curso Básico IPv6: https://cursoseventos.nic.br/curso/curso-basico-ipv6-ead/
• Monitoramento de ambientes
  • Elastic - Observability Fundamentals: https://www.elastic.co/training/observability-fundamentals
  • Elastic - Kibana Fundamentals: https://www.elastic.co/training/kibana-fundamentals
• Segurança Ofensiva
  • GoHacking - EHC2: https://www.youtube.com/watch?v=bUqu8fh7xUg
  • Beco do Exploit - Hacking Dojo: https://becodoexploit.com/HackingDojo/
  • Portswigger Web Security Academy - Client-side topics (93 Labs): https://portswigger.net/web-security/learning-path
• Sistemas de SIEM
  • Jose Bravo - What is a SIEM? (5 Vídeos): https://www.youtube.com/watch?v=MtqFMe4zSpQ&list=PLHh9jhztlMyp8lyKXt9orVM57ygW_ihPS
  • Cybrary - AlienVault OSSIM: https://www.cybrary.it/course/alienvault-ossim/
  • Elastic - SIEM Fundamentals: https://www.elastic.co/training/elastic-security-fundamentals-siem
• Sistemas de Firewall
  • Checkpoint edX - Network Security: https://www.edx.org/course/jump-start-network-security
  • Checkpoint edX - Product Deployment: https://www.edx.org/course/jump-start-product-deployment
• Exercícios de "Capture the Flag"
  • Over the Wire - Wargames: https://overthewire.org/wargames/
• Desenvolvimento de Software
  • Hackaflag Papo Binário - Programação moderna em C: https://hackaflag.com.br/academy.html
• Base de engenharia reversa
  • Hackaflag Papo Binário - Curso de Engenharia Reversa Online: https://hackaflag.com.br/academy.html
• Auditoria de segurança em Sistemas Operacionais
  • IPPSec - Linux Logging with Auditd: https://www.youtube.com/watch?v=lc1i9h1GyMA
  • Jose Bravo - Sysmon (36 Vídeos): https://www.youtube.com/watch?v=Xl31zNp4YUY&list=PLHh9jhztlMyrlWsozcrUEOvByfLJvRBDy
• Organização pessoal e postura
  • EV - Comunicacao Empresarial: https://www.ev.org.br/cursos/comunicacao-empresarial
• Legislação
  • ENAP SERPRO - Lei Brasileira de Proteção de Dados Pessoais: https://www.escolavirtual.gov.br/curso/603
• Caixa de Ferramentas
  • Linux Foundation - Linux Tools: https://training.linuxfoundation.org/training/linux-tools-for-software-development-lfd108x/
• Introduçao a eletrônica digital
  • Georgia Tech Coursera - Introduction to Electronics: https://www.coursera.org/learn/electronics
  • Georgia Tech Coursera - Linear Circuits DC: https://www.coursera.org/learn/linear-circuits-dcanalysis
  • Georgia Tech Coursera - Linear Circuits AC: https://www.coursera.org/learn/linear-circuits-ac-analysis
  • UAB Coursera - Digital Systems: From Logic Gates to Processors: https://www.coursera.org/learn/digital-systems
• Soft Skills
  • ENAP - Habilidades de Resolução de Problemas: https://www.escolavirtual.gov.br/curso/600
  • Prime Cursos - Noções basicas de PNL: https://www.primecursos.com.br/nocoes-basicas-de-pnl/
  • Cybrary - Social Engineering: https://www.cybrary.it/course/social-engineering/

Praticante - 21 materiais

• Exercícios de "Capture the Flag"
  • Try Hack Me: https://tryhackme.com
  • Hack The Box: https://www.hackthebox.eu
• Analise de vulnerabilidades
  • Rapid7 - Fundamentals Vulnerability Risk Management: https://www.rapid7.com/fundamentals/vulnerabilities-exploits-threats/
  • Tenable - Introduction to Tenable.sc: https://university.tenable.com/pubaccess/learn/course/internal/view/elearning/333/introduction-to-tenablesc
• Segurança ofensiva em ambientes web
  • Stanford - CS253 Web Security: https://web.stanford.edu/class/cs253/ (Vídeos das aulas: https://www.youtube.com/playlist?list=PL1y1iaEtjSYiiSGVlL1cHsXN_kvJOOhu-)
  • Portswigger Web Security Academy - Advanced topics (93 Labs): https://portswigger.net/web-security/learning-path
• Ferramentas para Segurança Ofensiva
  • Offensive Security - Metasploit Unleashed: https://www.offensive-security.com/metasploit-unleashed/
• Sistemas de SIEM
  • IPPSec - PowerSIEM Analyzing Sysmon Events with PowerShell: https://www.youtube.com/watch?v=MvfhIydxFmw
  • Jose Bravo - QRadar (38 Vídeos): https://www.youtube.com/watch?v=P90e4iEJ32s&list=PLHh9jhztlMyqRRmj64BcVyNBkhApa_LIn
• Tecnologias de internet das coisas
  • Netacad - Introduction to IoT: https://www.netacad.com/courses/iot/introduction-iot
• Base de Containers
  • LINUXtips Descomplicando o Docker (50 vídeos): https://youtube.com/playlist?list=PLf-O3X2-mxDn1VpyU2q3fuI6YYeIWp5rR
• Base de computação em núvem
  • Skills Builder - AWS: https://explore.skillbuilder.aws/learn/course/external/view/elearning/134/aws-cloud-practitioner-essentials
  • Coursera Google - GCP: https://www.coursera.org/learn/gcp-fundamentals
  • Oracle Academy - OCI: https://mylearn.oracle.com/learning-path/become-an-oci-foundations-associate/98057
  • MSLearn - Azure Fundamentals (6 Learning Paths):
    • https://docs.microsoft.com/pt-br/learn/paths/az-900-describe-cloud-concepts/
    • https://docs.microsoft.com/pt-br/learn/paths/az-900-describe-core-azure-services/
    • https://docs.microsoft.com/pt-br/learn/paths/az-900-describe-core-solutions-management-tools-azure/
    • https://docs.microsoft.com/pt-br/learn/paths/az-900-describe-general-security-network-security-features/
    • https://docs.microsoft.com/pt-br/learn/paths/az-900-describe-identity-governance-privacy-compliance-features/
    • https://docs.microsoft.com/pt-br/learn/paths/az-900-describe-azure-cost-management-service-level-agreements/
• Soft Skills
  • FM2S - Introdução ao Lean: https://ead.fm2s.com.br/curso/introducao-ao-lean/

Especialista - 14 materiais

• Tecnologias de internet das coisas
  • UCI Coursera - Introduction to Programming the Internet of Things (4 Cursos): https://www.coursera.org/specializations/iot
• Sistemas de firewall
  • Network Direction - Palo Alto Firewalls (8 Vídeos): https://www.youtube.com/playlist?list=PLDQaRcbiSnqFM4qcMEskn2k48LsUGKFga
  • Network Direction - CISCO ASA Firewalls (8 Vídeos): https://www.youtube.com/playlist?list=PLDQaRcbiSnqHXo_r1scHZook0BAED5-YN
• Sistemas de SIEM
  • Splunk (8 cursos)
    • Splunk - What is Splunk?: https://education.splunk.com/course/what-is-splunk
    • Splunk - Intro to Splunk: https://education.splunk.com/course/intro-to-splunk-elearning
    • Splunk - Using Fields: https://education.splunk.com/course/using-fields
    • Splunk - Scheduling Reports & Alerts: https://education.splunk.com/course/scheduling-reports-alerts-elearning
    • Splunk - Visualizations: https://education.splunk.com/course/visualizations-elearning
    • Splunk - Search Under the Hood: https://education.splunk.com/course/search-under-the-hood-elearning
    • Splunk - Intro to Knowledge Objects: https://education.splunk.com/course/intro-to-knowledge-objects-elearning
    • Splunk - Intro to Dashboards: https://education.splunk.com/course/intro-to-dashboards-eLearning
• Desenvolvimento de software
  • Miguel Grinberg - Flask Mega Tutorial: https://blog.miguelgrinberg.com/post/the-flask-mega-tutorial-part-i-hello-world
  • Oracle Academy - Java Explorer: https://learn.oracle.com/ols/learning-path/java-explorer/40805/79726
  • Cybrary - Secure Coding: https://www.cybrary.it/course/secure-coding/

Avançado - 5 materiais

• Tecnologias de rede
  • Juniper - CCNA to JNCIA-Junos: https://learningportal.juniper.net/juniper/user_activity_info.aspx?id=EDU-JUN-WBT-JOL-CCNA-JNCIA-JUNOS
  • Juniper - Security, Associate (JNCIA-SEC): https://learningportal.juniper.net/juniper/user_activity_info.aspx?id=EDU-JUN-WBT-JOL-JNCIA-SEC
  • Network Direction - Voice Networks (VoIP): https://www.youtube.com/playlist?list=PLDQaRcbiSnqG0b2hevMJlEx62o8RnC41l
• Sistemas de SIEM
  • ArcSight (2 séries/paylists de vídeos)
    • Paul Brettle - What is Series: https://youtube.com/playlist?list=PL_JhopV-r9zLigctFEOzic-af0sEuHZ-x
    • Paul Brettle - ArcSight ESM 101: https://youtube.com/playlist?list=PL_JhopV-r9zIXDz0pX2dmSJvBGVkczF5y

Mestre - 5 materiais

• Tecnologias de plataforma industrial
  • CISA VLP - 210W-03 Common ICS Components: https://ics-training.inl.gov/learn/course/internal/view/elearning/60/210w-03-common-ics-components
  • CISA VLP - 210W-02 Influence of IT Components on Industrial Control Systems: https://ics-training.inl.gov/learn/course/internal/view/elearning/47/210w-02-influence-of-it-components-on-industrial-control-systems
  • CISA VLP - 100W Cybersecurity Practices for Industrial Control Systems: https://ics-training.inl.gov/learn/course/internal/view/elearning/45/100w-cybersecurity-practices-for-industrial-control-systems
• Tecnologias de plataforma alta (Mainframe)
  • IBM Z Enterprise Computing Kickstart: https://www.ibm.com/academic/topic/ibm-z
  • Introduction to the Mainframe: https://www.ibm.com/academic/topic/ibm-z

"Hero" - 7 materiais

• Tecnologias de plataforma industrial
  • CISA VLP - 210W-04 Cybersecurity Within IT and ICS Domains (FY21): https://ics-training.inl.gov/learn/course/internal/view/elearning/162/210w-04-cybersecurity-within-it-and-ics-domains-fy21
  • CISA VLP - 210W-10 Mapping IT Defense-In-Depth Security Solutions to ICS - Part I: https://ics-training.inl.gov/learn/course/internal/view/elearning/51/210w-10-mapping-it-defense-in-depth-security-solutions-to-ics-part-i
  • CISA VLP - 210W-11 Mapping IT Defense-In_Depth Security Solutions to ICS - Part II: https://ics-training.inl.gov/learn/course/internal/view/elearning/52/210w-11-mapping-it-defense-indepth-security-solutions-to-ics-part-ii
  • CISA VLP - 210W-09 Attack Methodologies in IT & ICS: https://ics-training.inl.gov/learn/course/internal/view/elearning/58/210w-09-attack-methodologies-in-it-ics
• Tecnologias de plataforma alta (Mainframe)
  • z/OS Introduction: https://www.ibm.com/academic/topic/ibm-z
  • Introduction to the Cobol Language: https://www.ibm.com/academic/topic/ibm-z
  • Linux on IBM Z: https://www.ibm.com/academic/topic/ibm-z