ExamFinch.com My Study

Study guide

SAL1 study guide

Read a lesson, then practice the ideas you want to remember.

Practice this exam

Lessons

  1. Forward vs Reverse Shells, Beaconing, Metasp
  2. Malware Types, Static vs Dynamic Analysis, L
  3. VMs vs Hosts, Cloud vs Virtual Hosting, SaaS
  4. Encoding, Encryption, Hashing, and Decoding
  5. Web Apps, APIs, JSON/XML, Scripts vs Compile
  6. EDR vs AV, Telemetry, Containment, Remote Sh
  7. Firewall Deployments, Limits, and Log Analys
  8. WAF Capabilities, Limits, and Rule Creation
  9. CIA, Least Privilege, Human Factors, Log4She
  10. Mapping Real Attacks onto ATT&CK Techniques
  11. Navigating MITRE ATT&CK: Tactics, Techniques
  12. Current SAL1 Exam Facts — Free Study Guide 2026
  13. 24-Hour Window, Check-In, and Delivery — Free Study Guide 2026
  14. MCQ Section Strategy — Free Study Guide 2026
  15. Scoring, Retakes, Validity, and Access — Free Study Guide 2026
  16. Cyber Kill Chain Stages vs MITRE ATT&CK
  17. IoC vs IoA and the Pyramid of Pain — Free Study Guide 2026
  18. NIST CSF: Identify, Protect, Detect, Respond
  19. HTTP, TLS, VPN, Web Browsing, and Email Tran
  20. OSI, TCP/IP, Devices, and the Three-Way Hand
  21. Active Directory and Event Logs for Tracing
  22. Windows and Linux Architecture, Auth, Filesy
  23. SIEM Deployments, Parsing, and Raw Logs to A
  24. Alert Management, Threat Hunting, Triage, Re
  25. SOAR Playbooks, Enrichment, and TI Integrati
  26. Escalation Matrix, Urgent Remediation, and C
  27. MTTA, MTTD, MTTR, SLA, and Lookups — Free Study Guide 2026
  28. Case Reports and Investigation Notes — Free Study Guide 2026
  29. Classification and Escalation Scoring — Free Study Guide 2026
  30. Analyst VM, Splunk, and Dynamic Alerts — Free Study Guide 2026
  31. Triage Workflow, Severity, Status, and Verdi
  32. Proactive vs Reactive: FP Remediation, Detec
  33. Blue/Red Teams, Hierarchy, and SOC Roles
  34. Workbooks; Ticket vs Alert vs Detection Rule
  35. DNS Poisoning, ARP Spoofing, Exfiltration, a
  36. Phishing: Impersonation, Typosquatting, Spoo
  37. Port Scanning, DDoS, and Man-in-the-Middle
  38. SPF, DKIM, DMARC, and Email Authentication R
  39. Feeds, Indicators, Classifying IPs, Domains,
  40. External vs Internal, Web vs Network Scannin
  41. YARA and TI Integration with SIEM/SOAR — Free Study Guide 2026
  42. Credential Theft, Mimikatz, Sysmon, and Audi
  43. Initial Access, Persistence, Privilege Escal
  44. Code Injection, Path Traversal, Input Valida
  45. Client vs Server Vulnerabilities, XSS, and S