Start here · primary course
CompTIA CySA+ (CS0-004)
Security operations break down when every analyst investigates, prioritizes, and escalates differently. This **CompTIA Cybersecurity Analyst CySA+ (CS0-004)** course gives IT Directors and Security Team Leads a shared analyst playbook for detection, vulnerability management, and incident response, aligned to the CySA+ certification. It is built for SOC analysts, vulnerability management staff, incident responders, and infrastructure practitioners moving into security operations. Learners work through logging architecture, OS hardening, and enterprise access controls, then move into malicious activity indicators, malware and script analysis, regex, threat intelligence and hunting, vulnerability scoring and reporting, structured incident response, and after-action review. A dedicated module covers AI in security operations, including prompt injection, data and model poisoning, and AI usage policies. At roughly 20 hours of video across 23 skills, the course can be assigned over several weeks without pulling analysts off shift for full days. Training Managers can use CBT Nuggets playlists to sequence modules by role and team reporting to track progress across the security team.
