cyber-security: add hands-on exercises to nine topics (#10287)

* cyber-security: add hands-on exercises to seven topics

Claude-Session: https://claude.ai/code/session_01N4UCQWsmoH6URE6YjxPWgX

* cyber-security: add office exercises to dumpster diving and shoulder surfing

Claude-Session: https://claude.ai/code/session_01N4UCQWsmoH6URE6YjxPWgX
This commit is contained in:
Dmytro Koziatynskyi
2026-09-09 09:38:37 +02:00
committed by GitHub
parent 54d4c993d6
commit 3031197f64
9 changed files with 16 additions and 4 deletions
@@ -5,4 +5,5 @@ Compliance in cybersecurity refers to the adherence to laws, regulations, standa
Visit the following resources to learn more:
- [@article@What is Cyber Security Compliance?](https://www.comptia.org/content/articles/what-is-cybersecurity-compliance)
- [@article@Cyber Security Compliance 101](https://sprinto.com/blog/cyber-security-compliance/)
- [@article@Cyber Security Compliance 101](https://sprinto.com/blog/cyber-security-compliance/)
- [@course@GDPR and EU AI Act Compliance Exercises](https://ransomleak.com/catalogue/privacy-compliance/)
@@ -6,4 +6,5 @@ Visit the following resources to learn more:
- [@article@Dumpster Diving](https://www.techtarget.com/searchsecurity/definition/dumpster-diving)
- [@article@What is Dumpster Diving](https://powerdmarc.com/dumpster-diving-in-cybersecurity/)
- [@course@Secure Document Disposal: Interactive Office Exercise](https://ransomleak.com/exercises/secure-document-disposal/)
- [@video@Dumpster Diving for Sensitive Information](https://www.youtube.com/watch?v=Pom86gq4mk4)
@@ -1,3 +1,7 @@
# Malware Analysis and Types
Malware, short for malicious software, refers to any program or code designed to harm, disrupt, or gain unauthorized access to computer systems, networks, or devices. This encompasses various forms like viruses that replicate themselves, worms that self-propagate across networks, Trojans disguised as legitimate software, ransomware that encrypts data for extortion, spyware that secretly monitors user activity, and adware that displays unwanted advertisements. Understanding the mechanisms and characteristics of different malware types is essential for effective detection, prevention, and mitigation of cyber threats.
Malware, short for malicious software, refers to any program or code designed to harm, disrupt, or gain unauthorized access to computer systems, networks, or devices. This encompasses various forms like viruses that replicate themselves, worms that self-propagate across networks, Trojans disguised as legitimate software, ransomware that encrypts data for extortion, spyware that secretly monitors user activity, and adware that displays unwanted advertisements. Understanding the mechanisms and characteristics of different malware types is essential for effective detection, prevention, and mitigation of cyber threats.
Visit the following resources to learn more:
- [@course@Ransomware: Interactive Attack Walkthrough](https://ransomleak.com/exercises/ransomware/)
@@ -5,4 +5,5 @@ Multi-factor authentication (MFA) is an authentication method that requires the
Visit the following resources to learn more:
- [@article@What is MFA?](https://www.onelogin.com/learn/what-is-mfa)
- [@article@What is 2FA?](https://www.microsoft.com/en-gb/security/business/security-101/what-is-two-factor-authentication-2fa)
- [@article@What is 2FA?](https://www.microsoft.com/en-gb/security/business/security-101/what-is-two-factor-authentication-2fa)
- [@course@MFA Fatigue Attack: Interactive Exercise](https://ransomleak.com/exercises/mfa-fatigue-attack/)
@@ -6,5 +6,6 @@ Visit the following resources to learn more:
- [@article@How to Recognize and Avoid Phishing Scams](https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams)
- [@article@Recognize and Report Phishing](https://www.cisa.gov/secure-our-world/recognize-and-report-phishing)
- [@course@Phishing: Hands-on Exercise in a Simulated Inbox](https://ransomleak.com/exercises/phishing/)
- [@video@Protect yourself from phishing](https://support.microsoft.com/en-us/windows/protect-yourself-from-phishing-0c7ea947-ba98-3bd9-7184-430e1f860a44)
- [@video@Phishing attacks are SCARY easy to do!! (let me show you!)](https://www.youtube.com/watch?v=u9dBGWVwMMA)
@@ -6,4 +6,5 @@ Visit the following resources to learn more:
- [@article@What is Shoulder Surfing, and How can you avoid it?](https://nordvpn.com/blog/shoulder-surfing/?srsltid=AfmBOorl5NPpW_Tnhas9gB2HiblorqwXyK0NJae7uaketrnDwbjJmiYV)
- [@article@What is Shoulder Surfing?](https://www.mcafee.com/learn/what-is-shoulder-surfing/)
- [@article@What is Shoulder Surfing? 9 ways to protect yourself](https://www.bigrock.in/blog/products/security/what-is-shoulder-surfing-9-ways-to-protect-yourself-from-shoulder-surfing/)
- [@article@What is Shoulder Surfing? 9 ways to protect yourself](https://www.bigrock.in/blog/products/security/what-is-shoulder-surfing-9-ways-to-protect-yourself-from-shoulder-surfing/)
- [@course@Clean Desk Basics: Interactive Office Exercise](https://ransomleak.com/exercises/clean-desk-basics/)
@@ -5,4 +5,5 @@ Social Engineering is a manipulation technique that exploits human psychology to
Visit the following resources to learn more:
- [@article@What Is Social Engineering?](https://www.cisco.com/c/en/us/products/security/what-is-social-engineering.html)
- [@course@Social Engineering: Interactive Pretexting Exercise](https://ransomleak.com/exercises/social-engineering/)
- [@video@Social Engineering Explained](https://www.youtube.com/shorts/DdCSraNCxhs)
@@ -6,4 +6,5 @@ Visit the following resources to learn more:
- [@article@What Is Cloud Security? - Google Cloud](https://cloud.google.com/learn/what-is-cloud-security)
- [@article@Cloud Security](https://www.checkpoint.com/cyber-hub/cloud-security/what-is-cloud-security/)
- [@course@Cloud Security Labs: S3, IAM, Metadata, Containers](https://ransomleak.com/catalogue/cloud-security/)
- [@video@What is cloud security](https://www.youtube.com/watch?v=jI8IKpjiCSM)
@@ -6,4 +6,5 @@ Visit the following resources to learn more:
- [@official@OWASP Top Ten](https://owasp.org/www-project-top-ten/)
- [@official@OWASP Vulnerable Web Applications Directory (VWAD)](https://vwad.owasp.org/)
- [@course@OWASP Top 10 Exploit-then-Fix Labs](https://ransomleak.com/catalogue/application-security/)
- [@video@OWASP Top Ten](https://youtube.com/playlist?list=PLyqga7AXMtPOguwtCCXGZUKvd2CDCmUgQ&si=ZYRbcDSRvqTOnDOo)