threat-*
30 modules — READY TO GRADUATE
shield-threat-apt
Threat Apt
Threat Apt - applet content
shield-threat-ddos
Threat Ddos
Threat Ddos - applet content
shield-threat-mitm
Threat Mitm
Threat Mitm - applet content
shield-threat-rootkits
Threat Rootkits
Threat Rootkits - applet content
shield-threat-supply-chain
Threat Supply Chain
Threat Supply Chain - applet content
shield-threat-zero-day
Threat Zero Day
Threat Zero Day - applet content
shield-threat-buffer-overflow
Buffer Overflow Attack
Threat applet on buffer overflow
shield-threat-dns
DNS Attacks
Threat applet on DNS attacks
shield-threat-insider
Insider Threats
Threat applet on insider threats
shield-threat-phishing
Phishing
Threat applet on phishing
shield-threat-privesc
Privilege Escalation
Threat applet on privilege escalation
shield-threat-ransomware
Ransomware
Threat applet on ransomware
shield-threat-sqli
SQL Injection
Threat applet on SQL injection
shield-threat-runner
Threat Runner
shield-threat-swarm
Threat Swarm
shield-threat-botnets
Threat Botnets
shield-threat-code-injection
Threat Code Injection
shield-threat-cryptojacking
Threat Cryptojacking
shield-threat-dns-attacks
Threat Dns Attacks
shield-threat-google-hacking
Threat Google Hacking
shield-threat-heartbleed
Threat Heartbleed
shield-threat-insider-threats
Threat Insider Threats
shield-threat-iot-threats
Threat Iot Threats
shield-threat-meltdown-spectre
Threat Meltdown Spectre
shield-threat-pen-testing
Threat Pen Testing
shield-threat-privilege-escalation
Threat Privilege Escalation
shield-threat-social-engineering-tactics
Threat Social Engineering Tactics
shield-threat-spoofing
Threat Spoofing
shield-threat-sql-injection
Threat Sql Injection
shield-threat-stuxnet
Threat Stuxnet
crypto-*
20 modules — READY TO GRADUATE
shield-crypto-aes
AES — Shield House
Crypto Aes - applet content
shield-crypto-digital-signatures
Crypto Digital Signatures
Crypto Digital Signatures - applet content
shield-crypto-hashing
Crypto Hashing
Crypto Hashing - applet content
shield-crypto-pki
Crypto Pki
Crypto Pki - applet content
shield-crypto-rsa
Crypto Rsa
Crypto Rsa - applet content
shield-crypto-quiz
Cryptography Quiz
shield-crypto-caesar
Caesar Cipher — Shield House
shield-crypto-crypto-protocols
Cryptographic Protocols — Shield House
shield-crypto-key-exchange
Key Exchange Mechanisms — Shield House
shield-crypto-aes-applet
Crypto Aes Applet
shield-crypto-block-ciphers
Crypto Block Ciphers
shield-crypto-caesar-applet
Crypto Caesar Applet
shield-crypto-diffie-hellman
Crypto Diffie Hellman
shield-crypto-hmac-applet
Crypto Hmac Applet
shield-crypto-key-exchange-applet
Crypto Key Exchange Applet
shield-crypto-steganography
Crypto Steganography
shield-crypto-stream-ciphers
Crypto Stream Ciphers
shield-crypto-symmetric-asymmetric
Crypto Symmetric Asymmetric
shield-crypto-stream-ciphers-applet
Stream Ciphers — Shield House
shield-crypto-symmetric-vs-asymmetric
Symmetric vs Asymmetric Encryption — Shield House
linux-*
15 modules — READY TO GRADUATE
shield-linux-fw
Linux Firewall Builder
shield-linux-audit-drill
Audit Log Drill - Shield House
shield-linux-audit
Mission: Audit Logging - Shield House
shield-linux-file-integrity
Mission: File Integrity Monitoring - Shield House
shield-linux-firewall-drill
Firewall Rules Drill - Shield House
shield-linux-firewall-lab
Mission: Firewall Configuration - Shield House
shield-linux-hardening
Capstone: Full Server Hardening - Shield House
shield-linux-password-policy
Mission: Password Policy - Shield House
shield-linux-perms-drill
Permissions Drill - Shield House
shield-linux-selinux
Mission: SELinux/AppArmor - Shield House
shield-linux-ssh-drill
SSH Hardening Drill - Shield House
shield-linux-ssh-hardening-prep
SSH Hardening Prep - Shield House
shield-linux-ssh-security
Mission: Secure SSH - Shield House
shield-linux-sudo-policy-prep
Sudo Policy Prep - Shield House
shield-linux-sudo
Mission: Privilege Management - Shield House
pbq-*
12 modules — READY TO GRADUATE
shield-pbq-firewall-config
PBQ: Firewall Ruleset Configuration
Security+ performance-based question: configure an ordered DMZ firewall ACL (least privilege, explicit deny).
shield-pbq-control-classification
PBQ: Security Control Classification
Security+ performance-based question: classify controls by type (technical/managerial/operational/physical) and function (preventive/detective/corrective).
shield-pbq-attack-identification
PBQ: Attack Identification
Security+ performance-based question: identify attacks (SQLi, phishing, DDoS, XSS, ARP poisoning, privilege escalation) from realistic evidence.
shield-pbq-malware-identification
PBQ: Malware Identification
Security+ performance-based question: identify the malware type (ransomware, worm, trojan, RAT, rootkit, keylogger, logic bomb, spyware) from EDR and forensic evidence.
shield-pbq-social-network-identification
PBQ: Social Engineering & Network Attacks
Security+ performance-based question: identify the social-engineering or network technique (vishing, smishing, spear phishing, whaling, BEC, watering hole, typosquatting, pharming) from real artifacts.
shield-pbq-threat-actor-attribution
PBQ: Threat Actor Attribution
Security+ performance-based question: attribute the threat actor (nation-state/APT, organized crime, hacktivist, insider, script kiddie, shadow IT, competitor) from intelligence briefs.
shield-pbq-change-management
PBQ: Change Management
Security+ performance-based question: classify change-request artifacts by element (impact analysis, backout plan, maintenance window, CAB approval, test results, stakeholder notification, version control, SOP).
shield-pbq-governance-asset
PBQ: Governance & Asset Management
Security+ performance-based question: classify governance documents (policy/standard/procedure/guideline), data roles (owner/custodian/processor), and asset sanitization.
shield-pbq-iam-aaa
PBQ: Identity & Access (AAA)
Security+ performance-based question: classify AAA pillars (authentication/authorization/accounting) and authentication factors (something you know/have/are/somewhere/do).
shield-pbq-design-principles
PBQ: Secure Design & Zero Trust
Security+ performance-based question: classify Zero Trust components (policy engine, PEP, adaptive identity) and secure-design principles (defense in depth, least privilege, separation of duties, deception, fail-secure).
shield-pbq-pki-diagnosis
PBQ: PKI & Certificate Troubleshooting
Security+ performance-based question: diagnose TLS/certificate failures from openssl and browser errors (expired, untrusted root, name mismatch, revoked, broken chain, weak algorithm, not-yet-valid, wrong key usage).
shield-pbq-crypto-selection
PBQ: Cryptographic Solution Selection
Security+ performance-based question: select the correct cryptographic primitive (TLS, AES, RSA, SHA, Diffie-Hellman, PKI) per scenario.
sp-*
9/10 modules — 1 to graduate
shield-sp-blueteam-log-intrusion-hunt
Log Intrusion Hunt (Hands-On Lab)
Engine-driven SOC lab: hunt an SSH brute-force → web shell → lateral movement → exfil intrusion through real logs in a live terminal.
shield-sp-blueteam-siem-triage
SIEM Alert Triage (Hands-On Lab)
Engine-driven SOC lab: triage live SIEM/IDS/netflow alerts and separate real C2 beaconing from false positives.
shield-sp-blueteam-config-audit
System Hardening Audit (Hands-On Lab)
Engine-driven lab: audit sshd, TLS, sudoers, and exposed ports for misconfigurations in a real terminal.
shield-sp-blueteam-vuln-triage
Vulnerability Scan Triage (Hands-On Lab)
Engine-driven lab: prioritize a vulnerability scan by CVSS, internet exposure, and exploitability; spot the false positive.
shield-sp-blueteam-breach-capstone
Breach Response Capstone (Full IR Lab)
Capstone IR lab: work a full Log4Shell breach end-to-end across logs, firewall, IDS, and monitoring.
shield-sp-blueteam-policy-classify
Governance Document Classification (Hands-On Lab)
Engine-driven GRC lab: classify governance documents (policy, standard, procedure, guideline, SLA, NDA) from their content.
shield-sp-blueteam-risk-quant
Quantitative Risk Analysis (Hands-On Lab)
Engine-driven lab: compute SLE, ALE, and safeguard ROI for quantitative risk analysis (SY0-701 Domain 5).
shield-sp-blueteam-risk-register
Risk Register Analysis (Hands-On Lab)
Engine-driven lab: score a qualitative risk register (likelihood × impact), apply risk appetite, and choose treatments.
shield-sp-blueteam-vendor-assessment
Vendor Risk Assessment (Hands-On Lab)
Engine-driven third-party risk lab: assess a vendor via SOC 2 report, MSA, and questionnaire; find the missing control.
sy0-*
4/10 modules — 6 to graduate
shield-sy0-701-practice-exam-1
SY0-701 Practice Exam 1
Full-length, domain-weighted, server-graded CompTIA Security+ SY0-701 practice exam (90 questions).
shield-sy0-701-practice-exam-2
SY0-701 Practice Exam 2
Second full-length, domain-weighted, server-graded CompTIA Security+ SY0-701 practice exam (90 questions).
shield-sy0-701-acronyms
SY0-701 Acronym Reference
Complete CompTIA Security+ SY0-701 acronym list (321 entries) with full expansions — searchable/filterable, sourced verbatim from the official exam objectives appendix.
shield-sy0-701-study-guide
SY0-701 Comprehensive Study Guide
Full CompTIA Security+ SY0-701 study guide — all 5 domains, every objective, comprehensive concept explanations + the 321-acronym list. Printable / downloadable PDF (168 pages).