🛡️ IBM Cybersecurity Analyst Professional Certificate Portfolio

🎯 Overview

Welcome to my comprehensive portfolio documenting the completion of the IBM Cybersecurity Analyst Professional Certificate! This repository showcases hands-on labs, projects, and assessments covering the complete cybersecurity analyst workflow - from threat detection and network security to incident response and digital forensics.

🏆 Professional Certificate Details

• Certificate: IBM Cybersecurity Analyst Professional Certificate
• Provider: IBM via Coursera
• Focus Areas: Security Operations, Incident Response, Network Security, Digital Forensics, Compliance
• Skills Acquired: Threat Intelligence, Vulnerability Assessment, Security Monitoring, SIEM, EDR, Firewall Management, Encryption, Penetration Testing

📚 Course Structure & Portfolio Contents

1. 🌐 Introduction to Cybersecurity Tools & Cyberattacks

• Topics Covered: Cybersecurity history, attack types, defense strategies, X-Force Threat Intelligence
• Key Labs:
  • CIPHER/ - Interactive cybersecurity glossary
  • PATHOGEN/ - Malware type identification lab
  • DECEIVER/ - Social engineering attack simulator
  • FORTRESS/ - Security controls classification
  • SENTINEL/ - Insider threat mitigation
  • RKHUNTER LIVE/ - Malware scanning with rkhunter
  • Final Project: Secure Access - TechSolutions Inc. Security Assessment

2. 🔐 Cybersecurity Essentials

• Topics Covered: CIA triad, password management, physical security, data breaches
• Key Labs:
  • Password policy enforcement in Windows
  • Browser security configuration
  • Windows Defender Antivirus management
  • Windows Firewall configuration
  • Windows Update management
  • Interactive Tools: HACKNET/ - Hacker Typer simulation

3. 🏗️ Cybersecurity Architecture

• Topics Covered: Security frameworks (NIST), IAM, endpoint security, network security architecture
• Key Labs:
  • Security architecture diagram creation (Draw.io)
  • X-Force Threat Exchange analysis
  • Jackson Corporation security recommendations
  • Secure network diagram design
  • Final Project: Network Security Improvement Recommendations

4. 📋 Cybersecurity Compliance Framework, Standards & Regulations

• Topics Covered: HIPAA, GDPR, NIST CSF, ISO 27001, COBIT, ITIL, OWASP
• Key Labs:
  • NIST CSF alignment assessment
  • Asset management lifecycle
  • GRC tools evaluation (MetricStream)
  • OWASP use case analysis
  • Global cybersecurity law application

5. 🖥️ Operating Systems: Overview, Administration, and Security

• Topics Covered: Windows & Linux administration, user management, file permissions, containers
• Key Labs:
  • KERNEL/ - Linux command mastery
  • Windows Server feature exploration
  • Linux user & group management
  • File explorer administration
  • Command prompt tools (ipconfig, netstat, chkdsk, sfc)
  • Docker & container security
  • Windows Defender Firewall configuration
  • Final Project: Cyber Secure Inc. - Windows & Linux security tasks

6. 💾 Database Essentials and Vulnerabilities

• Topics Covered: SQL fundamentals, database security, SQL injection attacks
• Key Labs:
  • SELECT, INSERT, UPDATE, DELETE operations
  • COUNT, DISTINCT, LIMIT queries
  • SQL Injection Attack Lab - Authentication bypass, data extraction
  • MySQL user account management
  • Database encryption (AES)
  • Role-based access control

7. 🔬 Penetration Testing, Threat Hunting, and Cryptography

• Topics Covered: Nmap scanning, vulnerability assessment, encryption (AES/RSA), threat intelligence
• Key Labs:
  • Network protocol analysis with Wireshark
  • Port scanning with Nmap (CLI & Zenmap GUI)
  • Google Dorking techniques
  • X-Force threat report analysis
  • Symmetric Encryption with AES-256-CBC
  • Asymmetric Encryption with RSA
  • Nessus vulnerability scanning (credentialed & non-credentialed)
  • Splunk security monitoring & alerting
  • TheHive incident response platform
  • Snyk code repository scanning
  • Cryptanalysis with CrypTool2
  • Final Project: Vulnerability analysis + secure encryption implementation

8. 🚨 Incident Response and Digital Forensics

• Topics Covered: NIST/SANS frameworks, evidence handling, forensic tools, log analysis
• Key Labs:
  • Autopsy - Digital forensics investigation
  • FTK Imager - Forensic imaging & evidence acquisition
  • Velociraptor - Endpoint forensics & IR
  • Volatility - Memory forensics analysis
  • KAPE - Triage forensics & evidence collection
  • Cowrie honeypot - Log investigation
  • SecureSync Corporation - Data breach simulation
  • Final Project: Complete incident response & forensics investigation

9. 📡 Computer Networks and Network Security

• Topics Covered: TCP/IP, routing/switching, firewalls, IDS/IPS, DHCP, DNS filtering
• Key Labs:
  • Network structure design (Draw.io)
  • Wireshark traffic analysis (TCP vs UDP)
  • Windows Firewall configuration (inbound/outbound rules)
  • DHCP server installation & configuration
  • DNS filtering implementation
  • Port & protocol exploration
  • Intrusion Detection System activity
  • OpenEDR endpoint protection
  • SOHO network security (WPA3, SSID)
  • Final Project: Network design & security configuration

10. 🧠 Generative AI: Boost Your Cybersecurity Career

• Topics Covered: AI in SOC operations, threat intelligence, incident response automation
• Key Labs:
  • Attack pattern analysis with Watsonx
  • Incident report & playbook generation (ChatGPT)
  • Alert generation & response (Claude AI)
  • Malicious code prevention using AI
  • Training AI with incident data
  • Threat intelligence automation
  • Content filtering with generative AI
  • Final Project: Cybersecurity with Generative AI

11. 📊 Cybersecurity Assessment - CompTIA Security+ & CYSA+

• Topics Covered: Exam preparation, domain mastery, glossary review
• Key Resources:
  • security_plus_all_5_domains.html - Complete Security+ review
  • cysa_plus_all_4_domains.html - Complete CYSA+ review
  • CompTIA certification study guides
  • Practice exam instructions

12. 📚 Cybersecurity Case Studies and Capstone Project

• Topics Covered: Real-world breach analysis, ransomware trends, insider threats
• Case Studies:
  • Target Kill Chain Analysis (2014 breach)
  • Facebook & Google phishing case study
  • Cisco Cyber Threat Trends Report
  • Digital forensics failures
  • Largest cybersecurity fines in history
  • Penetration testing tales
  • Final Project: Analyzing a Data Breach - Comprehensive investigation

13. 💼 Cybersecurity Job Search, Resume, and Interview Prep

• Topics Covered: Career planning, resume writing, interview techniques, STAR method
• Key Resources:
  • cyberprep.html - Interactive career preparation tool
  • Resume & cover letter templates
  • NICE framework career pathways
  • Mock interview critiques
  • Elevator pitch development
  • Professional portfolio creation

14. 🎓 Introduction to Cybersecurity Careers

• Topics Covered: Career paths, certifications, skills mapping, job roles
• Key Labs:
  • Cybersecurity career path exploration (CyberSeek)
  • Skills-to-job role mapping
  • Certification roadmap (CompTIA, ISC2, EC-Council, GIAC)
  • Final Project: Personal cybersecurity career plan

🛠️ Technical Skills Demonstrated

Security Operations & Monitoring

Network Security

Digital Forensics

Operating Systems

Cryptography

Security Frameworks

📁 Repository Structure

IBM-Cybersecurity-Analyst-Portfolio/
│
├── 📁 Introduction to Cybersecurity Tools & Cyberattacks/
│   ├── 🧪 CIPHER/ - Interactive glossary
│   ├── 🦠 PATHOGEN/ - Malware identification
│   ├── 🎭 DECEIVER/ - Social engineering simulator
│   ├── 🏰 FORTRESS/ - Security controls
│   └── 🎯 Final Project - Secure Access
│
├── 📁 Cybersecurity Essentials/
│   ├── 🔑 Password policy enforcement
│   ├── 🌐 Browser security settings
│   ├── 🛡️ Windows Defender & Firewall
│   └── HACKNET/ - Hacker Typer
│
├── 📁 Cybersecurity Architecture/
│   ├── 📐 Security architecture diagrams
│   ├── 🔍 X-Force Threat Exchange
│   └── 🏢 Jackson Corporation project
│
├── 📁 Compliance Framework & Standards/
│   ├── 📋 NIST CSF alignment
│   ├── 📊 GRC tools evaluation
│   └── 🌍 Global law application
│
├── 📁 Operating Systems Security/
│   ├── 🐧 KERNEL/ - Linux command lab
│   ├── 🪟 Windows Server administration
│   ├── 🐳 Docker containers
│   └── 🎯 Final Project - Cyber Secure Inc.
│
├── 📁 Database Essentials & Vulnerabilities/
│   ├── 📝 SQL fundamentals
│   ├── 💉 SQL injection attacks
│   └── 🔐 Database encryption & access control
│
├── 📁 Penetration Testing & Cryptography/
│   ├── 🔍 Network scanning (Nmap/Wireshark)
│   ├── 🔓 Google Dorking
│   ├── 🔐 AES/RSA encryption
│   ├── 📊 Splunk monitoring
│   ├── 🐛 Nessus vulnerability scanning
│   ├── 🏥 TheHive incident response
│   └── 🎯 Final Project - Vulnerability analysis
│
├── 📁 Incident Response & Digital Forensics/
│   ├── 🔬 Autopsy forensics
│   ├── 💾 FTK Imager
│   ├── 🚀 Velociraptor
│   ├── 🧠 Volatility memory forensics
│   ├── 📦 KAPE triage
│   └── 🎯 Final Project - SecureSync breach
│
├── 📁 Computer Networks & Security/
│   ├── 🌐 Network design (Draw.io)
│   ├── 📡 Wireshark traffic analysis
│   ├── 🔥 Windows Firewall rules
│   ├── 📡 DHCP configuration
│   └── 🎯 Final Project - Network security design
│
├── 📁 Generative AI for Cybersecurity/
│   ├── 🤖 Watsonx attack analysis
│   ├── 💬 ChatGPT playbook generation
│   ├── 🧠 Claude AI incident response
│   └── 🎯 Final Project - Cyber AI
│
├── 📁 CompTIA Security+ & CYSA+/
│   ├── 📚 Security+ 5 domains
│   ├── 📚 CYSA+ 4 domains
│   └── 📝 Exam prep materials
│
├── 📁 Case Studies & Capstone/
│   ├── 📰 Target breach analysis
│   ├── 🔐 Facebook/Google phishing
│   └── 🎯 Final Project - Data breach investigation
│
└── 📁 Career Preparation/
    ├── 💼 cyberprep.html
    ├── 📄 Resume & cover letter templates
    └── 🎤 Interview prep & STAR method

🚀 Key Projects Showcase

🌟 Featured: SecureSync Corporation Data Breach Investigation

• Scope: Complete IR simulation from detection to remediation
• Tools: Autopsy, Velociraptor, Splunk, TheHive
• Outcome: Root cause analysis, containment strategy, forensic report

🌟 Featured: Penetration Testing Lab

• Scope: Full vulnerability assessment of target network
• Tools: Nessus, Nmap, Metasploit (simulated), Wireshark
• Outcome: 40+ vulnerabilities identified, prioritized remediation plan

🌟 Featured: SQL Injection Attack Lab

• Scope: Hands-on exploitation of vulnerable database
• Techniques: Authentication bypass, data extraction, blind SQLi
• Outcome: Complete attack chain documentation & defensive measures

📈 Key Achievements

✅ Completed 14-course professional certificate
✅ 150+ hands-on cybersecurity labs
✅ Mastered SIEM tools (Splunk, QRadar)
✅ Performed digital forensics with industry tools
✅ Conducted vulnerability assessments (Nessus, Nmap)
✅ Implemented encryption (AES-256, RSA)
✅ Responded to simulated breaches (IR lifecycle)
✅ Earned CompTIA Security+ & CYSA+ preparation

🎯 Learning Outcomes

• Security Operations - Monitor, detect, and respond to security incidents
• Network Defense - Configure firewalls, IDS/IPS, and secure network architecture
• Threat Intelligence - Analyze threat reports and IoCs from X-Force Exchange
• Vulnerability Management - Scan, assess, and remediate system weaknesses
• Digital Forensics - Acquire, analyze, and report on digital evidence
• Incident Response - Execute NIST/SANS IR frameworks end-to-end
• Compliance - Apply HIPAA, GDPR, NIST, ISO standards
• Cryptography - Implement symmetric/asymmetric encryption
• Penetration Testing - Perform authorized security assessments
• Cloud Security - Secure containers (Docker) and cloud environments

---

🎯 Core Competencies

Domain	Skills
Network Security	Wireshark, Nmap, Windows Firewall, DHCP, DNS filtering, IDS/IPS
Vulnerability Management	Nessus, Nmap/Zenmap, Google Dorking, vulnerability assessment
Security Monitoring	Splunk, TheHive, OpenEDR, SIEM analysis
Digital Forensics	Autopsy, FTK Imager, Volatility, KAPE, Velociraptor
Incident Response	NIST/SANS frameworks, log analysis, Cowrie honeypot
Cryptography	AES-256-CBC, RSA, OpenSSL, cryptanalysis with CrypTool2
Compliance	NIST CSF, HIPAA, GDPR, ISO 27001, OWASP
Operating Systems	Windows Server, Linux (Kali/Ubuntu), Docker containers

---

📸 Lab Evidence Portfolio

🌐 Network Security & Traffic Analysis

TCP vs UDP Traffic Analysis with Wireshark

Captured and analyzed live network traffic to understand protocol behavior

Evidence	Analysis
	Action: Installed Wireshark from official source
	Action: Initiated packet capture on network interface
	Finding: Identified TCP 3-way handshake (SYN, SYN-ACK, ACK) establishing connection
	Finding: UDP packets showing connectionless transmission without handshake
	Finding: Examined UDP header structure (source/dest ports, length, checksum)

🛠️ Tools: Wireshark, Windows Command Prompt 📝 Summary: Successfully distinguished TCP (connection-oriented, reliable) vs UDP (connectionless, faster) protocols through live traffic capture and analysis.

---

DNS Filtering Implementation

Configured Windows Firewall to block DNS traffic to specific domains

Evidence	Analysis
	Action: Created outbound rule blocking UDP port 53 (DNS) for google.com
	Finding: nslookup google.com failed - DNS resolution blocked
	Finding: After disabling rule, DNS resolution restored
	Action: Executed ipconfig /flushdns to clear cache

🛠️ Tools: Windows Defender Firewall with Advanced Security, nslookup 📝 Summary: Implemented DNS-layer filtering to block domain resolution, demonstrating content filtering capabilities at the network level.

---

Port Scanning with Nmap (CLI & Zenmap GUI)

Discovered open ports, running services, and OS fingerprinting

Evidence	Analysis
	Action: Verified Nmap installation (nmap --version)
	Finding: Basic scan revealed open ports on target
	Finding: -A flag enabled OS detection, version detection, and traceroute
	Finding: Zenmap GUI displaying port states (open/filtered/closed) with service versions
	Finding: Visual network topology mapping of discovered hosts

🛠️ Tools: Nmap CLI, Zenmap, Kali Linux container (Docker) 📝 Summary: Performed comprehensive network reconnaissance including SYN scans, service version detection, and OS fingerprinting on test targets (scanme.nmap.org).

---

🔥 Firewall Configuration & Access Control

Windows Firewall with Advanced Security

Created granular inbound/outbound rules with scope restrictions

Evidence	Analysis
	Action: Created custom firewall rule (not using presets)
	Finding: Restricted rule scope to specific remote IP addresses
	Action: Added specific IP addresses to rule scope
	Finding: Configured rule to block rather than allow traffic
	Finding: ICMP ping to blocked IP address failed - rule successfully enforced

🛠️ Tools: Windows Defender Firewall with Advanced Security, ping, Control Panel 📝 Summary: Created scope-restricted firewall rules demonstrating principle of least privilege at network level.

---

SOHO Network Security Configuration

Secured home/small office router with WPA3 encryption

Evidence	Analysis
	Action: Accessed Linksys E7350 router configuration interface
	Finding: Configured WPA3 Personal encryption (latest standard)
	Action: Set strong passphrase for wireless authentication
	Finding: Changed default administrator credentials

🛠️ Tools: Linksys E7350 emulator, VULTR 📝 Summary: Hardened SOHO network configuration including WPA3 encryption, strong passphrases, and administrative password change.

---

🦠 Vulnerability Assessment & Penetration Testing

Nessus Vulnerability Scanning (Credentialed & Non-Credentialed)

Performed authenticated vulnerability scan on Windows target

Evidence	Analysis
	Action: Installed Tenable Nessus Essentials on Windows
	Action: Configured credentialed scan with Windows credentials
	Finding: Credentialed scan identified 41 vulnerabilities on Windows VM
	Finding: Multiple critical severity vulnerabilities requiring immediate patching
	Finding: SSL/TLS certificate vulnerability identified

🛠️ Tools: Tenable Nessus Essentials, VirtualBox, Windows Target VM 📝 Summary: Demonstrated difference between credentialed (more accurate, 41 findings) vs non-credentialed scanning. Identified specific CVEs and provided remediation priorities.

---

Google Dorking for OSINT

Used advanced Google search operators for security reconnaissance

Evidence	Analysis
	Action: filetype:pdf "confidential" - Found sensitive PDF documents
	Finding: Discovered exposed PDF files with sensitive content
	Action: site:gov "security assessment" filetype:pdf
	Finding: Located exposed admin login portals via intitle:"admin panel"

🛠️ Tools: Google Chrome, Google search operators 📝 Summary: Demonstrated OSINT capabilities using legal Google Dorking techniques. Identified exposed admin panels, sensitive file types, and directory listings.

---

🔐 Cryptography Implementation

Symmetric Encryption with AES-256-CBC

Implemented file encryption using industry-standard AES

Evidence	Analysis
	Action: Verified OpenSSL 3.x installation
	Action: Generated 256-bit encryption key
	Action: openssl enc -aes-256-cbc -salt -in file.txt -out file.enc
	Finding: Encrypted output appears as unreadable binary data
	Finding: Successfully decrypted using -d flag and same key

🛠️ Tools: OpenSSL CLI, Windows Terminal 📝 Summary: Implemented AES-256-CBC encryption for files, including key generation, salting, and secure decryption. Demonstrated both password-based and key-file encryption methods.

---

Asymmetric Encryption with RSA

Public/private key pair generation and hybrid encryption

Evidence	Analysis
	Action: openssl genrsa -out private.pem 2048 - Generated 2048-bit RSA private key
	Action: openssl rsa -in private.pem -pubout -out public.pem
	Finding: Encrypted file using recipient's public key (only private key can decrypt)

🛠️ Tools: OpenSSL CLI 📝 Summary: Created RSA key pair, distributed public key, encrypted files for intended recipient only. Demonstrated asymmetric encryption for secure key exchange.

---

🚨 SIEM & Security Monitoring

Splunk Security Monitoring & Alerting

Ingested security logs, created dashboards, configured alerts

Evidence	Analysis
	Action: Deployed Splunk Enterprise locally, accessed web interface
	Action: Ingested BOTS v3 dataset (pre-captured security data)
	Action: Created custom security monitoring dashboard
	Finding: Detected failed login attempts >10 from same source - brute force pattern
	Action: Configured alert for privilege escalation events
	Finding: Mapped login attempts by geolocation to identify anomalous access

🛠️ Tools: Splunk Enterprise, BOTS v3 dataset 📝 Summary: Built complete SIEM workflow: data ingestion → searching → dashboarding → alerting. Detected brute force attacks, privilege abuse, and lateral movement patterns.

---

💾 Digital Forensics & Incident Response

Autopsy Digital Forensics Investigation

Analyzed disk image, recovered deleted files, generated forensic report

Evidence	Analysis
	Action: Created new forensic case in Autopsy
	Action: Loaded disk image (.E01 format) as evidence
	Finding: Located deleted files recoverable from unallocated space
	Finding: Extracted email artifacts with timestamps and content
	Finding: Created chronological timeline of file system events
	Action: Generated comprehensive HTML forensic report

🛠️ Tools: Autopsy, FTK Imager, NPS-2010-emails.E01 evidence file 📝 Summary: Conducted complete disk forensics investigation including file carving, metadata extraction, email analysis, and timeline reconstruction.

---

Memory Forensics with Volatility

Analyzed memory dump for running processes, network connections, and malware artifacts

Evidence	Analysis
	Action: Installed Volatility 3 for memory analysis
	Action: Acquired memory dump from target VM
	Finding: Identified correct OS profile for memory dump

🛠️ Tools: Volatility 3, VirtualBox, Windows memory dump 📝 Summary: Performed memory forensics to identify rogue processes, hidden network connections, and potential malware persistence mechanisms.

---

Cowrie Honeypot Log Investigation

Analyzed attacker interaction logs from SSH honeypot

Evidence	Analysis
	Finding: Multiple failed login attempts from same source IP
	Finding: Attacker executed reconnaissance commands (cat /etc/passwd, uname -a)
	Finding: Attempted download of suspicious payload from external server

🛠️ Tools: Cowrie honeypot logs, terminal analysis 📝 Summary: Analyzed real attacker behavior in safe honeypot environment, documenting TTPs including credential brute forcing and privilege escalation attempts.

---

🗄️ Database Security & SQL Injection

SQL Injection Attack Lab

Exploited vulnerable database to bypass authentication and extract data

Evidence	Analysis
	Action: Created MySQL database with intentionally vulnerable login form
	Finding: ' OR '1'='1 payload bypassed login without valid credentials
	Finding: Used UNION attack to extract user table data
	Finding: Boolean-based blind injection to enumerate database schema

🛠️ Tools: MySQL, phpMyAdmin, custom vulnerable web app 📝 Summary: Successfully demonstrated authentication bypass, data extraction, and schema enumeration. Documented defensive measures including parameterized queries and least privilege.

---

MySQL User Access Control & Encryption

Implemented role-based access control and column-level encryption

Evidence	Analysis
	Action: Created restricted MySQL user account
	Action: Granted SELECT-only access on specific tables
	Finding: Implemented AES_ENCRYPT() for sensitive PII columns

🛠️ Tools: MySQL, phpMyAdmin 📝 Summary: Implemented defense-in-depth database security including account management, RBAC, and data-at-rest encryption.

---

📊 Network Design & Security Architecture

Network Diagram Creation (Draw.io)

Designed secure network architectures with DMZ, firewalls, and segmentation

Evidence	Analysis
	Action: Used Draw.io for network topology design
	Finding: Created hierarchical network showing core, distribution, access layers
	Finding: Designed perimeter router feeding internal switch infrastructure

🛠️ Tools: Draw.io, Lucidchart-style diagramming 📝 Summary: Created professional network diagrams including DMZ segmentation, firewall placement, and security zones.

---

TechSafe Ltd. Network Design (Final Project)

Complete network security configuration with access controls

Evidence	Analysis
	Action: Designed complete corporate network with segmented VLANs
	Finding: Calculated CIDR subnets for each department (HR, Finance, Engineering)
	Action: Created firewall rule restricting RDP (3389) to authorized subnets only

🛠️ Tools: Draw.io, Windows Firewall, subnet calculators 📝 Summary: Architected secure network from scratch including IP scheme, VLAN segmentation, and restrictive firewall policies.

---

🎓 Interactive Security Simulators (Custom HTML Tools)

Simulator	Purpose	Live Demo
HACKNET	Hacker Typer simulation for security awareness	Click to Hack →
RKHUNTER LIVE	Malware detection with rkhunter	Click to Scan →
DECEIVER	Social engineering attack simulator	Click to Deceive →
PATHOGEN	Malware type identification lab	Click to Infect →
FORTRESS	Security controls classification	Click to Fortify →
SENTINEL	Insider threat mitigation scenarios	Click to Monitor →
NEXUS	Security assessment tool	Click to Assess →
CYBERSEC	Cybersecurity glossary with flashcards	Click to Decode →
KERNEL	Linux command interactive lab	Click to Terminal →
VAULT	Authentication methods explorer	Click to Authenticate →
STRATOS	Cloud container security simulator	Click to Deploy →
CyberPrep	Career preparation toolkit	Click to Prepare →

---

🛡️ Security Tools Mastered

Category	Tools
SIEM	Splunk, IBM QRadar
Firewall	Windows Defender Firewall, pfSense
IDS/IPS	Snort, OpenEDR
Forensics	Autopsy, FTK Imager, Volatility, KAPE, Velociraptor
Network Analysis	Wireshark, Nmap, Zenmap
Vulnerability Scanning	Nessus, Snyk
Endpoint Security	Velociraptor, Windows Defender
Encryption	OpenSSL (AES, RSA)
IR Platform	TheHive, Cowrie
Compliance	MetricStream GRC

🚀 Getting Started

Prerequisites

• Windows 10/11 or Linux (Ubuntu/Kali)
• VirtualBox (for VM-based labs)
• Docker Desktop
• Python 3.8+
• Modern web browser

Setup Instructions

1. Clone the repository:

   git clone https://github.com/Willie-Conway/IBM-Cybersecurity-Analyst-Portfolio.git

2. Navigate to specific lab directories
3. Follow individual lab README files
4. Launch HTML-based simulators directly in browser
5. For VM labs, import OVA files into VirtualBox

📜 Certifications Preparation

This portfolio includes comprehensive preparation materials for:

• CompTIA Security+ (SY0-701)
• CompTIA Cybersecurity Analyst (CYSA+) (CS0-003)

Interactive study tools:

• security_plus_all_5_domains.html - All 5 domains with flashcards
• cysa_plus_all_4_domains.html - All 4 domains with practice scenarios

🤝 Contributing

This portfolio is a personal showcase of my cybersecurity learning journey. Feedback and suggestions for improvement are welcome!

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

📧 Contact

Willie Conway

• GitHub: @Willie-Conway
• LinkedIn: Willie Conway
• Email: hire.willie.conway@gmail.com

---

⭐ If this portfolio helps your cybersecurity journey, please give it a star! ⭐

---

Last Updated: May 2026 Status: 🟢 Active Development
Certification Status: ✅ Completed

---

"The art of cybersecurity is not just about building walls - it's about understanding how to find the doors, windows, and hidden passages before the adversary does."