This repo contains references & notes for the CBROPS 200-201 exam to gain the Cisco Certified CyberOps Associate certification.

Each directory contains a quick reference PDF copy of key topics & terms from that chapter taken from the official certification guide.

Understanding Cisco Cybersecurity Operations Fundamentals v1.0 (200-201)

Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide

The exam requires familiarity with several tools that relate to monitoring, packet captures, log parsing, & regular expressions.

Wireshark

Sample Packet Captures

Security Onion is a defensive distribution primarily used for Network Security Monitoring.

Security Onion

Regex101

Great reference material to reinforce key concepts & domains.

The-Art-of-Hacking GitHub

regular-expressions.info

NIST SP 800-61r2 - Computer Security Incident Handling Guide

NIST SP 800-37r2 - Risk Management Framework for Information Systems and Organization

NIST SP 800-40r3 - Guide to Enterprise Patch Management Technologies

ODNI - A Guide to Cyber Attribution

Syslog Tutorial: How It Works, Examples, Best Practices, and More

What are Syslog Facilities and Levels?