Kiberxavfsizlik mutaxassisi

2026-yilda kiberxavfsizlik mutaxassisi bo'lish uchun bosqichma-bosqich qo'llanma

0% tugallandi0 / 301 mavzu
Kiberxavfsizlik
Asosiy IT ko'nikmalari
Kompyuter apparat component'lari
Ulanish turlari va ularning vazifasi
OS-Independent Troubleshooting
Mashhur suite'lar asoslari
Kompyuter tarmoqlari asoslari
NFC
WiFi
Bluetooth
Infrared
iCloud
Google Suite
MS Office Suite
CTFs (Capture the Flag)
HackTheBox
TryHackMe
VulnHub
picoCTF
pwn.college
Sertifikatlar
Boshlang'ich sertifikatlar
CompTIA A+
CompTIA Linux+
CompTIA Network+
CCNA
CompTIA Security+
Ilg'or sertifikatlar
CEH
CISA
CISM
GSEC
GPEN
GWAPT
GIAC
OSCP
CREST
CISSP
Operatsion tizimlar
Windows
Linux
MacOS
O'rnatish va sozlash
Turli versiyalar va ularning farqlari
GUI va CLI orqali boshqarish
Permission'larni tushuning
Dasturlar va ilovalarni o'rnatish
Fayllar ustida CRUD amallari
Troubleshooting
Keng tarqalgan buyruqlar
Har biri uchun quyidagilarni o'rganing
Tarmoq bo'yicha bilimlar
OSI modelini tushuning
Keng tarqalgan protokollar va qo'llanilishi
Keng tarqalgan portlar va qo'llanilishi
SSL va TLS asoslari
NAS va SAN asoslari
Subnetting asoslari
Public va private IP manzillar
IP atamalari
localhost
loopback
CIDR
subnet mask
default gateway
Atamalarni tushuning
VLAN
DMZ
ARP
VM
DHCP
DNS
NAT
IP
Router
Switch
VPN
MAN
LAN
WAN
WLAN
Bularni tushuning
DHCP
DNS
NTP
IPAM
Har birining vazifalari
Star
Ring
Mesh
Bus
Tarmoq topologiyalari
SSH
RDP
FTP
SFTP
Tarmoq protokollari
HTTP / HTTPS
SSL / TLS
VMWare
VirtualBox
esxi
proxmox
Keng tarqalgan virtualizatsiya texnologiyalari
Hypervisor
VM
GuestOS
HostOS
Virtualizatsiya asoslari
Troubleshooting vositalari
nslookup
iptables
Packet Sniffers
ipconfig
netstat
Port Scanners
ping
dig
arp
Protocol Analyzers
nmap
route
tcpdump
tracert
Kerberos
LDAP
SSO
RADIUS
Certificates
Local Auth
Autentifikatsiya usullari
Xavfsizlik ko'nikmalari va bilimlari
Keng tarqalgan xakerlik vositalarini tushuning
Keng tarqalgan exploit freymvorklarini tushuning
Defense in Depth konsepsiyasini tushuning
Runbook'lar konsepsiyasini tushuning
Forensics asoslarini tushuning
Threat hunting asoslari va tushunchalari
Vulnerability management asoslari
Reverse engineering asoslari
Penetration testing'dagi Rules of Engagement
Perimeter, DMZ va segmentation
Zero Trust'ning asosiy tushunchalari
Compliance va auditorlarning roli
Risk ta'rifini tushuning
Backup'lar va resiliency'ni tushuning
Cyber Kill Chain
MFA va 2FA
Operating System Hardening
Isolation konsepsiyasini tushuning
IDS va IPS asoslari
Honeypots
Authentication va authorization
Blue / Red / Purple team'lar
False Negative / False Positive
True Negative / True Positive
Threat Intel va OSINT asoslari
Handshake'larni tushuning
CIA Triad'ni tushuning
Privilege Escalation
Web based attack'lar va OWASP10
Malware qanday ishlashi va turlarini o'rganing
Incident response va discovery vositalari
nmap
tracert
nslookup
curl
hping
ping
arp
cat
dd
head
grep
wireshark
winhex
memdump
FTK Imager
autopsy
dig
tail
ipconfig
Kriptografiya asoslari
Salting
Hashing
Key Exchange
PKI
Private va public key'lar
Obfuscation
Freymvorklarni tushuning
ATT&CK
Kill Chain
Diamond Model
Keng tarqalgan standartlarni tushuning
ISO
NIST
RMF
CIS
CSF
Quyidagilarni tushuning
SIEM
SOAR
Xakerlik uchun mashhur distributivlar
ParrotOS
Kali Linux
LOLBAS
Vositalardan ko'zda tutilmagan maqsadlarda foydalanish
Bu log'larni topish va ulardan foydalanishni o'rganing
Event Logs
syslogs
netflow
Packet Captures
Firewall Logs
Hardening konsepsiyalarini tushuning
MAC-based
NAC-based
Port Blocking
Group Policy
ACLs
Sinkholes
Patching
Jump Server
Endpoint Security
Xavfsiz va xavfsiz bo'lmagan protokollar
FTP va SFTP
SSL va TLS
IPSEC
DNSSEC
LDAPS
SRTP
S/MIME
Quyidagi atamalarni tushuning
Antivirus
Antimalware
EDR
DLP
ACL
Firewall va Nextgen Firewall
HIPS
NIDS
NIPS
Host Based Firewall
Sandboxing
EAP va PEAP
WPS
WPA, WPA2, WPA3 va WEP
Incident response jarayonini tushuning
Preparation
Identification
Containment
Eradication
Recovery
Lessons Learned
Threat'lar tasnifini tushuning
Zero Day
Known va unknown
APT
Keng tarqalgan vositalarni tushuning
VirusTotal
Joe Sandbox
any.run
urlvoid
urlscan
WHOIS
Hujum turlari va farqlari
Phishing
Whishing
Whaling
Smishing
Spam va spim
Shoulder Surfing
Dumpster Diving
Tailgating
Zero day
Social Engineering
Reconnaissance
Impersonation
Watering Hole Attack
Drive by Attack
Typo Squatting
Brute force va password spray
Keng tarqalgan hujumlar
DoS va DDoS
MITM
Spoofing
Evil Twin
DNS Poisoning
Deauth Attack
VLAN Hopping
Rogue Access Point
Buffer Overflow
Memory Leak
XSS
SQL Injection
CSRF
Replay Attack
Pass the Hash
Directory Traversal
Auditoriyani tushuning
Stakeholders
HR
Yuridik bo'lim
Compliance
Rahbariyat
Bulut ko'nikmalari va bilimlari
Bulutdagi xavfsizlik konsepsiyasini tushuning
Bulutda deploy qilish asoslari va umumiy jarayonini tushuning
Bulut va on-premises o'rtasidagi farqlarni tushuning
Infrastructure as Code konsepsiyasini tushuning
Serverless konsepsiyasini tushuning
SaaS
PaaS
IaaS
Bulut xizmatlarini tushuning
Bulut modellari
Private
Public
Hybrid
AWS
GCP
Azure
Keng tarqalgan bulut muhitlari
S3
Dropbox
Box
OneDrive
Google Drive
iCloud
Keng tarqalgan cloud storage'lar
Dasturlash ko'nikmalari
Python
Go
JavaScript
C++
Bash
Power Shell
O'rganishda davom eting
GTFOBINS
WADCOMS
Ushbu yo'l xaritasining batafsil versiyasini va boshqa shunga o'xshash yo'l xaritalarini toping
roadmap.sh

Yo'l xaritalariQo'llanmalarFAQYouTube

yo'lxaritaroadmap.shasosida

Hamjamiyat tomonidan yaratilgan yo'l xaritalari, eng yaxshi amaliyotlar, loyihalar, maqolalar, manbalar va yo'nalishlar — o'z yo'lingizni tanlash va kasbingizda o'sish uchun.

© yo'lxarita·Shartlar·Maxfiylik·

roadmap.sh

Barcha kontent roadmap.sh loyihasidan olingan (© Kamran Ahmed) va shaxsiy o'rganish uchun o'zbek tiliga tarjima qilinmoqda.

Qidiruv

Yo'l xaritalari, loyihalar va savollarni qidiring