DevSecOps terms

Threats, risks, controls, and the CIA triad in plain language

Recon, exploitation, OWASP risks, and professional reporting

Authentication, sessions, OWASP Top 10, and secure web design

SIEM alerts, log analysis, threat hunting, and incident workflows

Malware families, attacker behavior, and threat indicators

Permissions, SSH, sudo, auditd, and production hardening

Protocols, firewalls, VPNs, and traffic inspection basics

IAM, logging, misconfigurations, and shared responsibility

SOC 2, ISO 27001, controls, evidence, and audit readiness

Containment, forensics, evidence handling, and recovery

Authentication, IAM, MFA, privileged access, and directory security