Cybersecurity In Focus Training 10 Day Free Trial – ITU Online IT Training
Ready to start learning? Individual Plans →Team Plans →
[ Course ]

Cybersecurity In Focus Training 10 Day Free Trial

Learn essential cybersecurity strategies to protect your business from threats, enhance your security decision-making, and respond effectively to incidents.

156 Hrs 29 Min700 Videos765 QuestionsCertificate of CompletionClosed Captions

Cybersecurity In Focus Training 10 Day Free Trial



Enroll Now

Cybersecurity is not a topic you “get around to” after the network is built and the users are trained. It is the set of decisions that keeps the business running when someone clicks the wrong link, exposes a password, plugs in an unknown USB device, or leaves a cloud service open to the internet. This course is built for that reality. If you have ever looked at a security headline and thought, “That could happen here,” then you already understand why this training matters.

What This Training Series Is Designed to Teach You

This Cybersecurity In Focus is a practical, self-paced introduction to the core ideas, tools, and habits you need to think like a defender. I designed it to help you understand security from the ground up: what attackers target, how defenses are layered, where people make the most expensive mistakes, and how to reduce risk without turning every system into a locked box nobody can use.

You are not just learning definitions. You are learning how to recognize weak points, how to interpret threats in context, and how to respond in a way that protects users, data, and operations. That matters because the real world does not reward textbook security. It rewards clear priorities, good judgment, and repeatable processes.

In this course, you will build familiarity with the major areas that shape day-to-day security work:

  • Security fundamentals and the mindset behind effective defense
  • Threats, vulnerabilities, and common attack methods
  • Identity and access control, including the idea of least privilege
  • Network and endpoint protection
  • Data protection, encryption concepts, and secure handling practices
  • Security monitoring, incident response, and basic recovery planning
  • User awareness and the human side of cybersecurity

That combination gives you more than awareness. It gives you a working foundation you can apply immediately in technical support, operations, administration, or entry-level security roles.

Why This Training Matters in Real Work

Security failures rarely begin with a dramatic movie-style breach. More often, they begin with something small and ordinary: a reused password, an unpatched workstation, an over-permissioned account, a shared admin login, or a staff member who was never taught how phishing really works. The reason security training matters is simple: small mistakes scale quickly when they happen in connected environments.

This course focuses on the kinds of mistakes and decisions that show up in actual organizations. You will see why strong passwords alone are not enough, why multi-factor authentication changes the attacker’s options, why patching is not optional, and why logging only helps if someone actually reviews it. These are not abstract concepts. They are the controls that separate a manageable incident from a costly outage or data exposure.

You will also see that cybersecurity is as much about process as technology. A firewall does not help if nobody knows what should be allowed. An antivirus tool does not help if the endpoint is running outdated software. A policy document does not help if no one understands what it means in practice. Good security is not one tool; it is the discipline of using the right controls in the right places.

If you remember one thing from this course, remember this: most breaches are not caused by a lack of tools. They are caused by a lack of consistent security habits.

Who Should Take This Course

This course is a strong fit if you are moving into cybersecurity for the first time, but it is also useful if you already work in IT and need a sharper security lens. I built it for people who want the fundamentals explained clearly, without hand-waving and without assuming you already know the jargon.

You will benefit from this training if you are one of the following:

  • A help desk or desktop support professional who wants to understand security issues beyond basic troubleshooting
  • A system administrator or network technician who needs better visibility into defensive controls
  • An IT student preparing to specialize in security
  • A career changer exploring entry-level cybersecurity roles
  • A manager or team lead who needs enough security knowledge to make better decisions and ask better questions
  • A small business owner or operations professional who wants to reduce risk without hiring a full security team

In practice, this course helps you speak the language of security with more confidence. That matters in interviews, in team meetings, in incident reviews, and in day-to-day work where someone is asking, “Is this a real risk, or are we overreacting?” You will be in a much better position to answer that question intelligently.

The Core Skills You Will Gain

By the end of this training, you should be able to look at a system, a process, or a user behavior and identify where security risk lives. That is the real goal. Not memorizing buzzwords. Not collecting acronyms. Learning how to spot exposure and make better decisions.

The skills you build here include:

  1. Recognizing common threat types, including malware, phishing, social engineering, insider misuse, and credential attacks
  2. Understanding security controls and how they work together
  3. Applying the principles of authentication, authorization, and accountability
  4. Explaining the importance of secure configuration and patch management
  5. Understanding encryption at a practical level, including why data protection is both technical and procedural
  6. Identifying suspicious activity and knowing the first steps in an incident response process
  7. Supporting basic security awareness for users and non-technical teams

Those skills translate across environments. Whether you work on Windows endpoints, cloud services, network appliances, or mixed enterprise systems, the underlying logic of security remains the same: protect identities, reduce attack surface, monitor for anomalies, and recover quickly when something goes wrong.

I also want to be clear about something important: good cybersecurity training should make you more precise, not more paranoid. The objective is not to assume everything is dangerous. The objective is to understand what is dangerous, why, and what to do about it.

Security Topics You Will Explore in Detail

This course is broad enough to give you a real foundation, but focused enough to stay practical. The material centers on the areas that matter most when you are trying to secure systems in the real world. That means looking at both technology and behavior.

You can expect to spend time with topics such as:

  • Threats and vulnerabilities: how attackers find weak points and how defenders think about exposure
  • Access control: why user rights should be limited, reviewed, and documented
  • Network defense: segmentation, firewalls, and the role of perimeter and internal controls
  • Endpoint security: system hardening, malware prevention, and update discipline
  • Data security: classification, encryption concepts, backups, and safe handling of sensitive information
  • Monitoring and detection: logs, alerts, and the importance of baseline behavior
  • Incident response: what to do when something suspicious is discovered
  • Human factors: phishing, awareness training, and the social engineering techniques attackers rely on

These are the building blocks of nearly every security role. If you later move into a more specialized position, such as security analyst, SOC analyst, or junior security administrator, you will return to these concepts constantly. They do not go out of style because they describe how systems fail and how they are protected.

How This Course Helps You Think Like a Defender

One of the biggest shifts in cybersecurity is learning to ask different questions. Instead of “Does this work?” you start asking, “What happens if this is abused?” Instead of “Can people access it?” you ask, “Who should access it, under what conditions, and how is that access reviewed?” That change in perspective is what this course is meant to develop.

You will learn to look at common scenarios through a defensive lens. For example, if a user reports that they received a strange login prompt, you should be thinking about more than just whether the prompt appeared. You should be considering phishing, credential theft, session hijacking, MFA fatigue attacks, and whether any related accounts need to be checked. That kind of structured thinking is what separates an IT generalist from someone who can contribute meaningfully to security operations.

This course also teaches you that defense is layered. One control fails, and another should catch the problem. A good security posture is rarely about perfection; it is about resilience. When you understand that, you start designing systems and supporting users differently. You stop relying on single points of failure and start building redundancy into your security habits.

Career Value and Job Roles This Training Supports

If you are aiming for a cybersecurity career, this course gives you a practical starting point. It is not designed to pretend you are instantly ready for senior analysis work. That would be nonsense. What it does give you is a solid foundation that supports entry-level and transition-level positions, where employers value awareness, reliability, and a willingness to learn.

Roles that can benefit from this training include:

  • Security Analyst
  • SOC Analyst
  • IT Support Specialist with security responsibilities
  • Junior System Administrator
  • Network Support Technician
  • Cybersecurity Associate
  • IT Operations Analyst

Salary ranges vary by region, employer, and experience, but entry-level cybersecurity and IT security-adjacent roles in the United States often fall somewhere around the mid-$50,000s to low-$90,000s, with growth potential as you gain hands-on experience and specialize. The real value of training like this is that it helps you compete for those first opportunities with a stronger interview story and a clearer understanding of what the work actually involves.

Hiring managers notice when you understand security in operational terms. They notice when you can explain why MFA matters, how a phishing email should be handled, why patching is urgent, and what “least privilege” means without turning it into a lecture. That is the kind of competence this course is meant to build.

Prerequisites and What You Should Know Before Starting

You do not need to arrive as a security expert. In fact, this course is most effective when you come in with curiosity and a basic understanding of how computers, accounts, and networks work. If you have worked with operating systems, user accounts, file permissions, or basic networking concepts, you will be in good shape.

Helpful background includes:

  • Basic computer literacy
  • Familiarity with Windows or another common operating system
  • General understanding of networking concepts such as IP addresses and shared resources
  • Some exposure to IT support, systems, or administration is useful but not required

If you are brand new to IT, you can still take this course, but I would recommend paying close attention to the foundational terms and processes. Security builds on other disciplines. The sooner you become comfortable with basic system behavior, the faster the security concepts will make sense.

What you do not need is prior experience in ethical hacking, digital forensics, or advanced administration. This is a foundation course. Its purpose is to make the rest of the security conversation accessible, not to overwhelm you with complexity before you are ready.

How Self-Paced On-Demand Learning Works for Security Training

Security is one of those subjects where repetition and reflection matter. A self-paced format is a good fit because it gives you room to pause, review, and connect what you are learning to systems you already know. That is especially helpful when a topic involves a chain of logic, such as authentication, access control, or incident handling.

In an on-demand course, you can revisit a lesson when you need to. That matters because the first time you hear a concept like defense in depth or risk tolerance, it may sound simple. The second or third time, after you have thought about it in context, it starts to click. That is normal. Good security knowledge is built by revisiting the same ideas from different angles until they become second nature.

This format also works well for working professionals. If you are balancing support tickets, project deadlines, or shift work, you do not need to wait for a scheduled class. You can fit the training into your week in a way that is realistic and sustainable. That is often the difference between starting a security path and never finding the time to begin.

What Makes This Course Worth Your Attention

I do not believe in security training that only teaches you to repeat slogans. You need more than “be careful” and “use strong passwords.” You need context. You need to understand why a control exists, what weakness it addresses, and where it can fail. That is the standard this course is built around.

What makes this training worth your attention is its focus on usable knowledge. You will come away with a clearer mental model of how organizations defend themselves, how attackers think, and how security fits into the everyday work of IT. That kind of understanding is hard to fake and easy to apply.

Most importantly, you will be better prepared to keep learning. Security is too broad for any single course to cover everything, and I would never tell you otherwise. But the right foundation makes the next step easier. Whether that next step is a certification path, a SOC job, a cloud security role, or a deeper technical specialization, this course gives you the language and habits you need to move forward with confidence.

If you are serious about understanding cybersecurity instead of just collecting terms, this is the place to start.

CompTIA SecAI+ (CY0-001) : Module 1.0 : Basic AI Concepts Related to Cybersecurity
  • 0.1 Course Intro
  • 1.0 Module Overview
  • 1.1 Types of AI
  • 1.2 Demo – Generative AI vs Traditional Search
  • 1.3 Module Training Techniques
  • 1.4 Demo – Examining Machine Learning
  • 1.5 Prompt Engineering
  • 1.6 Demo – Examining Prompt Engineering Techniques
  • 1.7 Data Processing Security in AI
  • 1.8 Demo – Examining NLP and Language Models
  • 1.9 Data Security in AI
  • 1.10 Demo – Examining Fine-Tuning Concepts
  • 1.11 Examining Security and the AI Lifecycle
  • 1.12 Demo – Examining Data Cleansing with AI
  • 1.13 Module Overview
CompTIA SecAI+ (CY0-001) : Module 2.0 : Securing AI Systems
  • 2.0 Module Overview
  • 2.1 Threat-Modeling AI Systems
  • 2.2 Demo – Threat-Modeling AI Systems
  • 2.3 Security Controls in AI Systems
  • 2.4 Demo – Using Prompt Template for Security Control
  • 2.5 Access Control in AI Systems
  • 2.6 Data Security Controls in AI Systems
  • 2.7 Demo – Data Minimization with Sensitive Information
  • 2.8 Monitoring and Auditing for AI Systems
  • 2.9 Attack Evidence in AI Systems
  • 2.10 Demo – Model Poisoning in AI Systems
  • 2.11 Compensating Controls in AI Systems
  • 2.12 Demo – Implementing Compensating Controls in AI
  • 2.13 – Module Summary
CompTIA SecAI+ (CY0-001) : Module 3.0 : AI Assisted Security
  • 3.0 Module Overview
  • 3.1 Examining AI-enabled Tools for Security
  • 3.2 Demo – AI-Assisted Threat Categorization
  • 3.3 AI Attack Vector Enablement
  • 3.4 Demo – AI-Assisted Reconnaissance Acceleration
  • 3.5 AI Security Automation
  • 3.6 Demo – AI-Assisted Incident Report Summarization
  • 3.7 Module Summary
CompTIA SecAI+ (CY0-001) : Module 4.0 : AI Governance, Risk, and Compliance
  • 4.0 Module Overview
  • 4.1 Organizational Governance Structures Supporting AI
  • 4.2 Demo – AI Decision Authority Mapping
  • 4.3 Examining AI-related risks
  • 4.4 Demo – Internal Policy vs. External Law Conflict
  • 4.5 Examining the Compliance Impact of AI
  • 4.6 Demo – NIST AI RMF Lifecycle Mapping
  • 4.7 Module Summary
  • 4.8 Course Outro
CySA+ (CS0-004) : Module 1 : Security Operations
  • 0.1 Course Intro
  • 1.0 Module Overview
  • 1.1 Logging Concepts
  • 1.2 Demo – Logging in Windows Server
  • 1.3 Demo – Logging in Linux
  • 1.4 Operating System Concepts
  • 1.5 Demo – File Analysis and Pattern Recognition
  • 1.6 Infrastructure and System Architecture
  • 1.7 Demo – Virtualization and the Cloud
  • 1.8 Device Management and Network Architecture
  • 1.9 Demo – Mobile Device Management
  • 1.10 Identity and Access Management
  • 1.11 Data Protection and Encryption
  • 1.12 Critical Infrastructure
  • 1.13 Examining Host-related Indicators
  • 1.14 Examining Network-Related Indicators
  • 1.15 Application-related Indicators
  • 1.16 Cloud-related Indicators
  • 1.17 Demo – Email Header Analysis
  • 1.18 Demo – Using and Analyzing Cloud Logs
  • 1.19 Identity-Related Indicators
  • 1.20 Tools to Determine Malicious Activity
  • 1.21 Demo – Examining Intrustion Detection using Snort
  • 1.22 Demo – Decoding with CyberChef
  • 1.23 Programming Languages and Tools
  • 1.24 Demo – Examining Intrusion Detection using Suricata
  • 1.25 Threat Actors and TTPs
  • 1.26 Demo – Examining MITRE ATT&CK
  • 1.27 Threat Intelligence Collection Methods and Sources
  • 1.28 Demo – Examining Threat Intelligence with MISP
  • 1.29 Indicators of Compromise
  • 1.30 Demo – Domain and IP Reputation
  • 1.31 Threat Modeling and Mapping
  • 1.32 Demo – Examining a Threat Modeling Report
  • 1.33 Process Improvement in Security Operations
  • 1.34 AI in Security Operations
  • 1.35 Module Summary
CySA+ (CS0-004) : Module 2 : Vulnerability Management
  • 2.0 Module Overview
  • 2.1 Planning Vulnerability Scanning
  • 2.2 Vulnerability Scanning Types
  • 2.3 Demo – Passive Scanning with tcpdump and Wireshark
  • 2.4 Demo – Credentialed Scanning using Nessus
  • 2.5 Vulnerability Scanning Tools
  • 2.6 Demo – Metasploit Framework and Metasploitable
  • 2.7 Demo – Active Scanning with nmap and masscan
  • 2.8 Demo – Gathering OSINT using Maltego
  • 2.9 Control Types
  • 2.10 Risk Mitigation Strategies
  • 2.11 Vulnerability Prioritization
  • 2.12 Demo – Examining Vulnerability Prioritization
  • 2.13 Application Security
  • 2.14 Demo – Web Application Testing with Burp Suite
  • 2.15 Vulnerability Mitigation Strategies
  • 2.16 Module Summary
CySA+ (CS0-004) : Module 3 : Incident Response and Management
  • 3.0 Module Overview
  • 3.1 Attack Methodology Frameworks
  • 3.2 Demo – Examining the Cyber Kill Chain Methodology
  • 3.3 Incident Response Processes
  • 3.4 Incident Response Techniques
  • 3.5 Demo – Examining Chain of Custody Documentation
  • 3.6 Module Summary
CySA+ (CS0-004) : Module 4 : Reporting and Communication
  • 4.0 Module Overview
  • 4.1 Vulnerability Reporting and Communication
  • 4.2 Inhibitors to Remediation
  • 4.3 Incident Response Communication Plan
  • 4.4 Metrics and KPIs
  • 4.5 Examining Vulnerability Trends with NVD
  • 4.6 Module Summary
CySA+ (CS0-004) : Module 5 : The Exam
  • 5.1 Identifying Exam Requirements
  • 5.2 Taking the Exam
Module 1: The Role of AI in Cybersecurity
  • 1.1 Understanding AI and ML in the Context of Cybersecurity
  • 1.2 AI Use Cases Threat Detection, Automated Response, and Anomaly Detection
  • 1.3 Benefits and Risks of Embedding AI into Cybersecurity Products
  • 1.4 Emerging Challenges with GenAI Models in Production Environments
Module 2: Evolving Threat Landscape for AI and GenAI Systems
  • 2.1 Unique Threat Vectors in GenAI Environments
  • 2.2 Attack Surfaces in AI Pipelines and ML Model APIs
  • 2.3 Real-World Examples: Exploiting LLMs and Adversarial Input Crafting
  • 2.4 Considerations for Securing AI Model Endpoints
Module 3: AI-Powered Security Tools and Platforms
  • 3.1 Intrusion Detection and Anomaly Detection Us
  • 3.2 Threat Intelligence Platforms Powered by ML
  • 3.3 AI in Malware Classification, Phishing Detectioni and Behavioral Analytics
  • 3.4 Overview of Tools: Darktrace, Palo Alto Cortex XSIAM, Microsoft Defender XDR
Module 4: Securing the AI Lifecycle – From Training to Deployment
  • 4.1 Risks in AI/ML Model Lifecycle Stages
  • 4.2 Model Governance and Audit Trails
  • 4.3 Version Control, Drift Detection, and Rollback Strategies
  • 4.4 Safe Deployment Practices for LLMs and Neural Networks
Module 5: Identity, Access, and Data Protection in AI Systems
  • 5.1 Role-Based Access Control and Zero Trust Architecture in AI Pipelines
  • 5.2 Protecting Training and Inference Data
  • 5.3 Identity Threats: Model Abuse, Impersonation Attacks, and Shadow AI
  • 5.4 Integrating IAM into GenAI Workflows
Module 6: Specialized GenAI Cybersecurity Solutions
  • 6.1 AI Firewalls: What They Are and How They Defend GenAI Endpoints
  • 6.2 AI Security Posture Management (SPM) Tools
  • 6.3 Example Solutions_ Protect AI, Robust Intelligence, HiddenLayer
  • 6.4 Integrating Security Tools into Modern MLOps Workflows
Module 7: Governance, Privacy, and Compliance in AI Security
  • 7.1 Compliance Concerns in AI Systems
  • 7.2 Managing Bias, Fairness, and Explainability in AI Systems
  • 7.3 Ethics and Responsible AI Development
  • 7.4 Regulatory Landscape for GenAI and AI-Driven Decision-Making
Module 8: Looking Ahead – The Future of AI in Cybersecurity
  • 8.1 The Rise of Autonomous Security Agents
  • 8.2 AI vs. Adversarial AI: Red Teaming and Simulation
  • 8.3 Building Secure-by-Design GenAI Applications
  • 8.4 The Evolving Role of Security Engineers and AI Developers
Module 9: Operationalizing AI Cybersecurity in the Enterprise
  • 9.1 Building an AI Security Roadmap
  • 9.2 Creating an AI Security Governance Framework
  • 9.3 Embedding AI Security in MLOps Pipelines
  • 9.4 Vendor Evaluation and Procurement Guidelines
  • 9.5 Building a Cross-Functional AI Security Team
  • 9.6 Conducting an Internal AI Threat Modeling Workshop
  • 9.7 Communicating AI Security Risks to Executives
  • 9.8 Course Recap and What is Next
Module 1: Information Security and Ethical Hacking Overview
  • 1.0 Introduction to CEH v13
  • 1.1 Elements of Security
  • 1.2 Cyber Kill Chain
  • 1.3 MITRE ATT&CK Framework
  • 1.3.1 ACTIVITY – Examining MITRE ATT&CK
  • 1.4 Hacking
  • 1.5 Ethical Hacking
  • 1.6 Information Assurance
  • 1.7 Risk Management
  • 1.8 Incident Management
  • 1.9 Information Security Laws and Standards
  • 1.10 Using AI in Ethical Hacking
  • 1.11 Information Security and Ethical Hacking Review
Module 2: Footprinting and Reconnaissance
  • 2.1 Footprinting Concepts
  • 2.2 OSINT Tools
  • 2.2.1 ACTIVITY – Finding Internet-Connected Devices with Shodan
  • 2.2.2 ACTIVITY – Performing OSINT with theHarvester
  • 2.3 Advanced Google Search
  • 2.3.1 ACTIVITY – Google Hacking
  • 2.4 Whois Footprinting
  • 2.4.1 ACTIVITY – Footprinting with WHOIS
  • 2.5 DNS Footprinting
  • 2.5.1 ACTIVITY – Enumerating DNS
  • 2.6 Website Footprinting
  • 2.7 Email Footprinting
  • 2.8 Network Footprinting
  • 2.8.1 ACTIVITY – Tracing a Network Path with Traceroute
  • 2.9 Social Network Footprinting
  • 2.10 Enhanced OSINT
  • 2.11 Footprinting-and-Reconnaissance-Countermeasures
  • 2.12 Footprinting and Reconnaissance Review
Module 3: Scanning Networks
  • 3.1 Scanning Concepts
  • 3.2 Discovery Scans
  • 3.3 Port Scans
  • 3.4 Other Scan Types
  • 3.5 Scanning Tools
  • 3.6 NMAP
  • 3.6.1 ACTIVITY – Port Scanning and Fingerprinting with NMAP
  • 3.7 Firewall and IDS Evasion
  • 3.8 Proxies
  • 3.9 AI Enhanced SCANNING Tools
  • 3.10 Scanning counter-measures
  • 3.11 Scanning Networks Review
Module 4: Enumeration
  • 4.1 Enumeration Overview
  • 4.2 SMB_NetBIOS_Enumeration
  • 4.3 File Transfer Enumeration
  • 4.4 WMI Enumeration
  • 4.5 SNMP Enumeration
  • 4.6 LDAP Enumeration
  • 4.7 DNS Enumeration
  • 4.8 SMTP Enumeration
  • 4.8.1 ACTIVITY – SMTP Enumeration
  • 4.9 Remote Connection Enumeration
  • 4.10 Website Enumeration
  • 4.10.1 ACTIVITY – Enumerating Website Directories
  • 4.11 Local User and Active Directory Enumeration
  • 4.12 Other Enumeration Types
  • 4.13 Enumeration Using AI
  • 4.14 Enumeration Countermeasures and Review
Module 5: Vulnerability Analysis
  • 5.1 Vulnerability Scanning
  • 5.1.1 ACTIVITY – Vulnerability Scanning with OpenVAS
  • 5.2 Vulnerability Assessment
  • 5.3 AI Assisted Vulnerability Assessment
  • 5.4 Vulnerability Analysis Review
Module 6: System Hacking
  • 6.1 System Hacking Concepts
  • 6.2 Common Operating System Exploits
  • 6.3 Buffer Overflows
  • 6.4 System Hacking Tools and Frameworks
  • 6.5 Metasploit
  • 6.5.1 ACTIVITY – Hacking with Metasploit
  • 6.6 Meterpreter
  • 6.6.1 ACTIVITY – Having Fun with Meterpreter
  • 6.7 Keylogging_and_Spyware-
  • 6.8 Netcat
  • 6.8.1 ACTIVITY – Using Netcat
  • 6.9 Windows Exploitation
  • 6.10 Windows Post- Exploitation
  • 6.10.1 ACTIVITY – Windows Post Exploitation with Eternal Blue
  • 6.10.2 ACTIVITY – Escalating Privilege with Token Passing
  • 6.11 Linux Exploitation
  • 6.11.1 ACTIVITY – Pwn a Linux Target from Start to Finish
  • 6.12 Linux Post-Exploitation
  • 6.13 Password Attacks
  • 6.13.1 ACTIVITY – Pass-the-Hash
  • 6.13.2 ACTIVITY – Password Spraying with Hydra
  • 6.14 Linux Password Cracking
  • 6.14.1 ACTIVITY – Password Cracking with Hashcat
  • 6.14.2 ACTIVITY – Brute Forcing with Medusa
  • 6.15 Additional Password Attacks
  • 6.16 Attacking Network Services
  • 6.16.1 ACTIVITY – Cracking Linux Passwords with John-the-Ripper
  • 6.17 Other Methods for Obtaining Passwords
  • 6.18 Network Service Attacks
  • 6.19 Lateral Movement
  • 6.19.1 ACTIVITY – Preparing to Pivot
  • 6.19.2 ACTIVITY – Lateral Movement through Pivoting
  • 6.20 Persistence
  • 6.20.1 ACTIVITY – Creating a Persistent Netcat Back Door
  • 6.20.2 ACTIVITY – APT Persistence
  • 6.21 Hiding Data
  • 6.21.1 ACTIVITY – Hiding Data with Steganography
  • 6.22 Covering Tracks
  • 6.22.1 ACTIVITY – Cover Tracks with Log Tampering
  • 6.23 Side-Channel-Attacks
  • 6.24 AI-Powered Vulnerability Exploitation Tools
  • 6.25 System Hacking Countermeasures
  • 6.26 System Hacking Review
Module 7: Malware Threats
  • 7.1 Malware Overview
  • 7.2 Viruses
  • 7.3 Trojans
  • 7.4 Rootkits
  • 7.5 Other Malware
  • 7.6 Advanced Malware Threats
  • 7.7 Malware Makers
  • 7.7.1 ACTIVITY – Creating a Malware Dropper and Handler
  • 7.8 Malware Deployment
  • 7.9 Malware Detection
  • 7.10 Malware Analysis
  • 7.10.1 ACTIVITY – Analyzing the SolarWinds Orion Hack
  • 7.11 AI and Malware
  • 7.12 Malware Countermeasures
  • 7.13 Malware Threats Review
Module 8: Sniffing and Spoofing
  • 8.1 Network Sniffing
  • 8.2 Sniffing Tools
  • 8.2.1 ACTIVITY – Intercepting Data with Wireshark
  • 8.2.2 ACTIVITY – Capturing Files off the Network
  • 8.3 MAC and ARP Attacks
  • 8.3.1 ACTIVITY – Performing an MITM Attack with Ettercap
  • 8.4 Name Resolution Attacks
  • 8.4.1 ACTIVITY – Spoofing an Authentication Service with Responder
  • 8.5 Other Layer 2 Attacks
  • 8.6 Sniffing and Spoofing Countermeasures
  • 8.7 Sniffing and Spoofing Review
Module 9: Social Engineering
  • 9.1 Social Engineering Concepts
  • 9.2 Social Engineering Techniques
  • 9.3 Social Engineering Tools
  • 9.3.1 ACTIVITY – Phishing for Credentials
  • 9.3.2 ACTIVITY – OMG Cable Baiting
  • 9.4 Social Media, Identity Theft, Insider Threats
  • 9.5 Social Engineering and AI
  • 9.6 Social Engineering Countermeasures
  • 9.7 Social Engineering Review
Module 10: Denial-of-Service
  • 10.1 DoS-DDoS Concepts
  • 10.2 Volumetric Attacks
  • 10.3 Fragmentation Attacks
  • 10.4 State Exhaustion Attacks
  • 10.5 Application Layer Attacks
  • 10.5.1 ACTIVITY – Conducting a Slowloris DDoS Attack
  • 10.6 Other Attacks
  • 10.7 DoS Tools
  • 10.7.1 ACTIVITY – Performing a HOIC DDoS Attack
  • 10.8 DoS Countermeasures
  • 10.9 DoS Review
Module 11: Session Hijacking
  • 11.1 Session Hijacking
  • 11.2 Compromising a Session Token
  • 11.3 XSS
  • 11.3.1 ACTIVITY – Web Session Hijacking with XSS
  • 11.4 CSRF
  • 11.5 Other Web Hijacking Attacks
  • 11.6 Network-Level Session Hijacking
  • 11.7 Session Hijacking Tools
  • 11.8 Session Hijacking Countermeasures
  • 11.9 Session Hijacking Review
Module12: Attack Detection and Prevention
  • 12.1 Types of IDS
  • 12.2 Snort
  • 12.3 Logging and Monitoring
  • 12.4 IDS Considerations
  • 12.5 IDS Evasion
  • 12.6 Firewalls
  • 12.7 Packet Filtering Rules
  • 12.8 Firewall Deployments
  • 12.9 Split DNS
  • 12.10 Firewall Product Types
  • 12.11 Firewall Evasion
  • 12.11.1 ACTIVITY – Busting the DOM for WAF Evasion
  • 12.12 NAC and Endpoint Security
  • 12.13 NAC and EDR Evasion
  • 12.14 Honeypots
  • 12.15 Evasion Countermeasures
  • 12.16 Attack Detection and Prevention Review
Module 13: Hacking Web Servers
  • 13.1 Web Server Operations
  • 13.2 Hacking Web Servers
  • 13.3 Common Web server Attacks
  • 13.4 Webserver Attack Tools
  • 13.5 AI and Webserver Attacks
  • 13.6 Hacking Web Servers Countermeasures
  • 13.7 Hacking Web Servers Review
Module 14: Hacking Web Applications
  • 14.1 Web Application Concepts
  • 14.2 Attacking Web Apps
  • 14.3 A01 Broken Access Control
  • 14.4 A02 Cryptographic Failures
  • 14.5 A03 Injection
  • 14.5.1 ACTIVITY – Command Injection
  • 14.6 A04 Insecure Design
  • 14.7 A05 Security Misconfiguration
  • 14.8 A06 Vulnerable and Outdated Components
  • 14.9 A07 Identification and Authentication Failures
  • 14.10 A08 Software and Data integrity Failures
  • 14.11 A09 Security Logging and Monitoring Failures
  • 14.12 A10 Server-Side Request Forgery
  • 14.13 XSS Attacks
  • 14.14 CSRF
  • 14.15 Parameter Tampering
  • 14.15.1 ACTIVITY – Parameter Tampering with Burp Suite
  • 14.16 Clickjacking
  • 14.16.1 ACTIVITY – Clickjacking with XSS and iFrame Injection
  • 14.17 SQL Injection
  • 14.17.1 ACTIVITY – Using SQL Injection to Steal Sensitive Data
  • 14.18 Insecure Deserialization Attacks
  • 14.19 IDOR
  • 14.19.1 ACTIVITY – IDOR Abuse with Burp Suite
  • 14.20 Directory Traversal
  • 14.20.1 ACTIVITY – Directory Traversal
  • 14.21 Session Management Attacks
  • 14.22 Response Splitting
  • 14.23 Overflow Attacks
  • 14.24 XXE Attacks
  • 14.25 Web App DoS
  • 14.26 Soap Attacks
  • 14.27 AJAX Attacks
  • 14.28 Web API Hacking
  • 14.29 Webhooks and Web Shells
  • 14.30 Web App Hacking Tools
  • 14.31 AI and Web Application Attacks
  • 14.32 Hacking Web Applications Countermeasures
  • 14.33 Hacking Web Applications Review
Module 15: SQL Injection
  • 15.1 SQL Injection Overview
  • 15.2 Basic SQL Injection
  • 15.3 Finding Vulnerable Websites
  • 15.4 Error-based SQL Injection
  • 15.5 Union SQL Injection
  • 15.5.1 ACTIVITY – SQLi on a Live Website – Part 1
  • 15.5.2 ACTIVITY – SQLi on a Live Website – Part 2
  • 15.6 Blind SQL Injection
  • 15.7 SQL Injection Tools
  • 15.8 Evading Detection
  • 15.9 Analyzing SQL Injection
  • 15.10 SQL Injection Countermeasures
  • 15.11 SQL Injection Review
Module 16: Hacking Wireless Networks
  • 16.1 Wireless Concepts
  • 16.2 Wireless Security Standards
  • 16.3 WI-FI Discovery Tools
  • 16.4 Common Wi-Fi Attacks
  • 16.5 Wi-Fi Password Cracking
  • 16.6 WEP Cracking
  • 16.7 WPA,WPA2,WPA3 Cracking
  • 16.7.1 ACTIVITY – WPA2 KRACK Attack
  • 16.8 WPS Cracking
  • 16.9 Bluetooth Hacking
  • 16.10 Other Wireless Hacking
  • 16.11 Wireless Security Tools
  • 16.12 Wireless Hacking Countermeasures
  • 16.13 Hacking Wireless Networks Review
Module 17: Hacking Mobile Platforms
  • 17.1 Mobile Platform Overview
  • 17.2 Mobile Device Attacks
  • 17.3 Android Overview
  • 17.4 Rooting Android
  • 17.5 Android Exploits
  • 17.5.1 ACTIVITY – Pwn a Mobile Device
  • 17.6 Android-based Hacking Tools
  • 17.7 Reverse Engineering an Android App
  • 17.8 Securing Android
  • 17.9 iOS Overview
  • 17.10 Jailbreaking iOS
  • 17.11 IOS Exploits
  • 17.12 iOS-based Hacking Tools
  • 17.13 Reverse Engineering an iOS App
  • 17.14 Securing iOS
  • 17.15 Mobile Device Management
  • 17.16 Hacking Mobile Platforms Countermeasures
  • 17.17 Hacking Mobile Platforms Review
Module 18: IoT Hacking & OT Hacking
  • 18.1 IoT Overview
  • 18.2 IoT Infrastructure
  • 18.3 IoT Vulnerabilities and Threats
  • 18.4 IoT Hacking Methodology and Tools
  • 18.4.1 ACTIVITY – Card Cloning with Flipper Zero
  • 18.5 IoT Hacking Countermeasures
  • 18.6 OT Concepts
  • 18.7 IT-OT Convergence
  • 18.8 OT Components
  • 18.9 OT Vulnerabilities
  • 18.10 OT Attack Methodology and Tools
  • 18.11 OT Hacking Countermeasures
  • 18.12 IoT and OT Hacking Review
Module 19: Cloud Computing
  • 19.1 Cloud Computing Concepts
  • 19.2 Cloud Types
  • 19.3 Cloud Benefits and Considerations
  • 19.4 Cloud Risks and Vulnerabilities
  • 19.5 AWS Hacking
  • 19.5.1 ACTIVITY – AWS S3 Bucket Hacking
  • 19.6 Azure Cloud Hacking
  • 19.7 Google Cloud Hacking
  • 19.8 Container Hacking
  • 19.9 Cloud Threat Countermeasures
  • 19.10 Cloud Computing Review
Module 20: Cryptography
  • 20.1 Cryptography Concepts
  • 20.2 Symmetric Encryption
  • 20.2.1 ACTIVITY – Symmetric Encryption
  • 20.3 Asymmetric Encryption
  • 20.3.1 ACTIVITY – Asymmetric Encryption
  • 20.4 Public Key Exchange
  • 20.5 PKI
  • 20.5.1 ACTIVITY – Generating and Using an Asymmetric Key Pair
  • 20.6 Digital Signatures
  • 20.7 Hashing
  • 20.7.1 ACTIVITY – Calculating Hashes
  • 20.8 Common Encryption Use Cases
  • 20.9 Cryptography Tools
  • 20.10 Cryptography Attacks
  • 20.11 Cryptography Review
  • 20.12 Course Conclusion
Module 21: Challenge Lab
  • 21.1-ACTIVITY-Challenge-Lab-Introduction
  • 21.2-ACTIVITY-Flag 1 – Port Authority, Please!
  • 21.3-ACTIVITY-Flag 2 – Moo-ve Fast and Break Things
  • 21.4-ACTIVITY-Flag 3 – Pixels, Packets & Patient X
  • 21.5-ACTIVITY-Flag 4 – Hexes and Hashes
  • 21.6-ACTIVITY-Flag 5 – APT & the PowerShell Symphony
  • 21.7-ACTIVITY-Flag 6 – Script Kiddie's Revenge
  • 21.8-ACTIVITY-Flag 7 – Oh Mannie, You Shouldn't Have!
  • 21.9-ACTIVITY-Report
Module 1 – Mobile Devices
  • 1.0 CompTIA A+ Course Intro
  • 1.1 Mobile Device Hardware and Components
  • 1.2 Mobile Device Connections and Accessories
  • 1.3 Mobile Device Operating Systems
  • 1.4 Troubleshooting Mobile Devices
  • 1.5 Mobile Device,OS and Application Issues
  • 1.6 Mobile Device,OS and Application Security
  • 1.7 Identifying Connection Settings in Android
  • 1.8 Identifying Connection Settings in iOS
Module 2 – Networking
  • 2.1 Network Architecture
  • 2.2 Ports and Protocols
  • 2.3 Wireless Networking
  • 2.4 Network Hosts and Services
  • 2.5 DNS and DHCP
  • 2.5.1 Demo – Working with DNS and DHCP
  • 2.6 VPNs and VLANs
  • 2.7 Network Devices
  • 2.8 Basic SOHO Configuration
  • 2.9 Internet Connections and Network Types
  • 2.10 Networking Tools
  • 2.11 Networking in Windows
  • 2.11.1 Demo – Configuring Networking in Windows
  • 2.12 Networking Commands
  • 2.12.1 Demo – Working with Networking Commands
  • 2.13 Troubleshooting Network Issues
Module 3 – Hardware
  • 3.1 Display Components and Attributes
  • 3.2 Basic Cables and Connections
  • 3.3 Network Cables and Connections
  • 3.4 Storage Devices and Connections
  • 3.5 Introduction to RAID
  • 3.6 Motherboards and Form Factors
  • 3.7 Motherboard Connections
  • 3.8 BIOS and UEFI
  • 3.9 CPUs and CPU Architecture
  • 3.10 Expansion Cards
  • 3.11 System Cooling
  • 3.12 Power Supply Units
  • 3.13 Printers and Multifunction Devices
  • 3.14 Printer Maintenance
  • 3.15 Troubleshooting Computer Components
  • 3.16 Troubleshooting Storage and RAID Issues
  • 3.17 Troubleshooting Video and Display Issues
  • 3.18 Troubleshooting Printer Issues
Module 4 – Operating Systems
  • 4.1 Workstation Operating Systems
  • 4.2 Common File System Types
  • 4.3 Operating System Installation Types
  • 4.4 Operating System Boot Methods
  • 4.5 Storage Partitioning
  • 4.5.1 Demo – Working with Storage Partitions
  • 4.6 Identifying Windows Editions
  • 4.7 Windows Upgrades
  • 4.8 Windows OS Installations
  • 4.9 Using Windows Task Manager
  • 4.9.1 Demo – Working with Windows Task Manager
  • 4.10 MMC Snap-ins
  • 4.10.1 Demo – Working with MMC Snap-ins
  • 4.11 Windows Operating System Tools
  • 4.12 Microsoft Command Line Tools
  • 4.12.1 Demo – Working with Microsoft Command Prompt
  • 4.13 Configuring Microsoft Windows Settings
  • 4.14 Configuring Windows Power Options
  • 4.14.1 Demo – Working with Windows Power Options
  • 4.15 Windows File Explorer
  • 4.15.1 Demo – Working with File Explorer
  • 4.16 Windows Domains vs Workgroups
  • 4.17 macOS System Configuration
  • 4.17.1 Demo – macOS Features and Tools
  • 4.18 Linux Components
  • 4.19 Linux Tools
  • 4.20 Common Application Installation
Module 5 – Virtualization and Cloud Computing
  • 5.1 Virtualization Concepts
  • 5.1.1 Demo – Working with Virtual Machines
  • 5.2 Cloud Computing
  • 5.2.1 Demo – Working with the Cloud
  • 5.3 Cloud Productivity Tools
Module 6 – Security
  • 6.1 Physical Security
  • 6.2 Physical Access Security
  • 6.3 Logical Security
  • 6.4 Windows Security – Firewalls and Antivirus
  • 6.4.1 Demo – Working with the Windows Firewalls and Antivirus
  • 6.5 Windows Security Users and Groups
  • 6.6 Windows Security – NTFS and Share Permissions
  • 6.6.1 Demo – Working with NTFS and Share Permissions
  • 6.7 Windows Security – Active Directory
  • 6.8 Windows Security – Data Encryption
  • 6.9 Wireless Security
  • 6.10 Malware Types
  • 6.11 Malware Detection and Prevention
  • 6.12 Social Engineering
  • 6.13 Security Threats
  • 6.13.1 Demo – Security Vulnerabilities
  • 6.14 Malware Removal Process
  • 6.15 Workstation Security
  • 6.16 Data Destruction Concepts
  • 6.17 SOHO Network Security
  • 6.18 Browser Security Settings
  • 6.19 Troubleshooting PC Security Issues
Module 7 – Operational Procedures
  • 7.1 Ticketing Systems
  • 7.2 Asset Management
  • 7.3 Document Types
  • 7.4 Change Management
  • 7.5 Workstation Backup and Recovery
  • 7.6 Common Safety Procedures
  • 7.7 Environmental Impact and Controls
  • 7.8 Licensing and Policy Concepts
  • 7.9 Communication and Professionalism
  • 7.10 Basics of Scripting
  • 7.11 Remote Access Technologies
  • 7.12 Basics of Artificial Intelligence
  • 7.13 Troubleshooting Methodology
  • 7.14 CompTIA A+ Course Closeout
Module 1 – SY0-701 General Security Concepts
  • 1.0 Introduction to the Course
  • 1.1 Fundamental Security Concepts
  • 1.2 Zero Trust
  • 1.3 Deception and Disruption
  • 1.3.1 ACTIVITY – Testing a Honeypot
  • 1.4 Security Controls
  • 1.5 Change Management and Security
  • 1.6 Cryptography Basics
  • 1.6.1 ACTIVITY – Examining Symmetric Encryption
  • 1.7 Asymmetric Encryption
  • 1.7.1 ACTIVITY – Exploring Asymmetric Encryption
  • 1.8 Hashing
  • 1.8.1 ACTIVITY – Verifying Integrity with Hashing
  • 1.9 Digital Certificates
  • 1.10 Public Key Infrastructure
  • 1.11 Data and Keys
  • 1.12 Crypto Implementations
  • 1.13 Blockchain
  • 1.14 Non-Cryptographic Data Protection
Module 2 – SY0-701 Threats, Vulnerabilities, and Mitigations
  • 2.1 Threat Actors and Motivations
  • 2.2 Threat Vectors
  • 2.2.1 ACTIVITY – O.MG Cable Baiting
  • 2.2.2 O.MG-No Cable
  • 2.3 Social Engineering
  • 2.4 Operating System Vulnerabilities and Attacks
  • 2.5 Application Vulnerabilities and Attacks
  • 2.5.1 ACTIVITY – Performing a Buffer Overflow
  • 2.6 Web-based Vulnerabilities and Attacks
  • 2.6.1 ACTIVITY – Abusing Unsanitized Input
  • 2.6.2 ACTIVITY – Grabbing Passwords with SQL Injection
  • 2.6.3 ACTIVITY – Swiping a Token with XSS
  • 2.7 Other Vulnerabilities
  • 2.8 Common Malicious Activity Indicators
  • 2.9 Insider Threat Indicators
  • 2.10 Social Engineering Indicators
  • 2.10.1 ACTIVITY – Capturing Credentials through Social Engineering
  • 2.11 Malware Activity Indicators
  • 2.12 Operating System Attack Indicators
  • 2.13 Application Attack Indicators
  • 2.13.1 ACTIVITY – Recognizing Directory Traversal
  • 2.14 Physical Attack Indicators
  • 2.14.1 ACTIVITY – Quickly Cloning an RFID Badge
  • 2.15 Network Attack Indicators
  • 2.15.1 ACTIVITY – Crashing a Target with DoS
  • 2.16 Cryptographic Attack Indicators
  • 2.17 Password Attack Indicators
  • 2.17.1 ACTIVITY – Password Cracking
  • 2.18 Network Segmentation
  • 2.19 Access Control
  • 2.20 Enterprise Device Hardening
Module 3 – SY0-701 Security Architecture
  • 3.1 Network Segmentation
  • 3.1.1 ACTIVITY – Segementing a Network
  • 3.2 High Availability
  • 3.3 Virtualization
  • 3.3.1 ACTIVITY – Deploying Docker Containers
  • 3.4 Cloud
  • 3.5 Serverless Computing
  • 3.6 IoT
  • 3.7 ICS SCADA
  • 3.7.1 ACTIVITY – Operating a SCADA System
  • 3.8 RTOS and Embedded Systems
  • 3.9 Reducing the Attack Surface
  • 3.10 Firewalls
  • 3.11 IDS IPS.mp4
  • 3.12 Secure Communications – Access
  • 3.13 Port Security
  • 3.14 SD-WAN and SASE
  • 3.15 Data Classifications
  • 3.16 Protecting Data Types
  • 3.17 Data Considerations
  • 3.18 Redundancy
  • 3.19 Alternate Sites
  • 3.20 Multiple Platforms
  • 3.21 Business Continuity
Module 4 – SY0-701 Security Operations
  • 4.1 Secure Baselines
  • 4.2 Attack Surface Reduction
  • 4.3 Wireless Installation
  • 4.4 Wireless Security Settings
  • 4.5 Mobile Solutions
  • 4.5.1 ACTIVITY – Pwning a Mobile Device
  • 4.6 Application Security Management
  • 4.7 Asset Management
  • 4.8 Vulnerability Management
  • 4.9 Monitoring Activities
  • 4.10 Monitoring Tools
  • 4.10.1 ACTIVITY – Scanning a Network for Vulnerabilities
  • 4.11 Firewall Configuration
  • 4.11.1 ACTIVITY – Configuring Firewall Rules
  • 4.12 Intrusion Detection Configuration
  • 4.13 Web Traffic Filtering
  • 4.14 Operating System Policy
  • 4.14.1 ACTIVITY – Examining Windows Group Policy
  • 4.15 Network Service Security
  • 4.16 Data Loss Protection
  • 4.16.1 ACTIVITY – Checking File Integrity
  • 4.17 Network Access Control
  • 4.17.1 ACTIVITY – Require Multifactor Authentication
  • 4.18 Identity Management
  • 4.19 Access Management
  • 4.19.1 ACTIVITY – Implementing Access Control
  • 4.20 Security Automation
  • 4.21 Incident Response
  • 4.22 Digital Forensics
Module 5 – SY0-701 Security Program Management and Oversight
  • 5.1 Elements of Effective Security Governance
  • 5.2 Elements of the Risk Management Process
  • 5.3 Third Party Risk Assessment and Management
  • 5.3.1 ACTIVITY – Analyzing the Solar Winds Supply Chain Failure
  • 5.4 Effective Security Compliance
  • 5.5 Audits and Assessments
  • 5.5.1 ACTIVITY – Conducting OSINT
  • 5.5.2 ACTIVITY – Performing Active Reconnaissance
  • 5.6 Security Awareness Practices
  • 5.7 Course Outro

[ FAQ ]

Frequently Asked Questions.

What topics are covered in the Cybersecurity In Focus Training course?

The Cybersecurity In Focus Training course covers essential topics such as threat identification, risk management, network security, and incident response. Participants learn about common cyber threats like phishing, malware, and social engineering, along with best practices for mitigating these risks.

The course also delves into security policies, user awareness, and the importance of layered defense strategies. Practical scenarios and case studies help reinforce the concepts, making it suitable for both beginners and IT professionals seeking to strengthen their cybersecurity knowledge.

Is this course suitable for beginners with no prior cybersecurity experience?

Yes, the Cybersecurity In Focus Training is designed to be accessible to learners with little or no prior experience in cybersecurity. The course starts with foundational concepts, gradually progressing to more advanced topics, ensuring a comprehensive understanding regardless of your background.

Participants will learn through practical examples, real-world scenarios, and interactive lessons, making complex topics approachable. This makes it an ideal starting point for anyone interested in building a career in cybersecurity or enhancing their organization’s security posture.

Will this course prepare me for any cybersecurity certifications or exams?

While the Cybersecurity In Focus Training provides a solid foundation in cybersecurity principles, it is not specifically aligned with any official certification exams. However, the knowledge gained can serve as a valuable supplement to certification preparation and help you understand core concepts.

If you’re planning to pursue certifications like CompTIA Security+ or Certified Information Systems Security Professional (CISSP), this course can reinforce your understanding of key topics and improve your confidence in exam settings. Always consider combining this training with dedicated exam prep courses for optimal results.

How does this course address real-world cybersecurity challenges faced by businesses?

The course emphasizes practical decision-making and risk assessment, equipping learners with skills to handle common cybersecurity incidents. It covers real-world scenarios such as responding to data breaches, managing insider threats, and securing cloud services.

Participants explore how to implement security policies, train users, and develop incident response plans tailored to their organizational needs. This practical focus helps learners understand how to protect their business assets effectively and react promptly to emerging threats.

What makes this Cybersecurity In Focus Training course unique compared to other online security courses?

This course stands out because it emphasizes decision-making in real-world security situations rather than just theory. It is designed to be highly relevant, focusing on issues that businesses face daily, such as user errors and cloud security vulnerabilities.

Additionally, the 10-day free trial allows learners to explore the content without commitment, providing a taste of the practical, scenario-based learning approach. The course’s focus on actionable insights makes it particularly valuable for organizations aiming to enhance their security posture quickly and effectively.

Ready to start learning? Individual Plans →Team Plans →
Cybersecurity In Focus - Free Trial