| Bonus Resources.txt | 102.4 B | ||
| Get Bonus Downloads Here.url | 204.8 B | ||
| ~Get Your Files Here ! | |||
| 1 - Introduction | |||
| 1. Introduction.mp4 | 109.9 MB | ||
| 10 - Module 9 Reliability, Observability, and SecOps Mobilization | |||
| 100. Lab 90 Complete the Operational Reliability Review.html | 46.7 KB | ||
| 11 - Module 10 Sovereign Deployment, Decentralized Research, and Capstone | |||
| 101. Sovereign Deployment, Decentralized Research, and Capstone.mp4 | 116.6 MB | ||
| 102. Lab 91 Design Data Classification and Retention.html | 43.3 KB | ||
| 103. Lab 92 Add Encryption and Secret Handling Plan.html | 33.9 KB | ||
| 104. Lab 93 Create Tenant and Region Isolation Model.html | 29.1 KB | ||
| 105. Lab 94 Add Audit Log Table.html | 5.5 KB | ||
| 106. Lab 95 Build an Air-Gapped Data Import Pattern.html | 47.7 KB | ||
| 107. Lab 96 Create Decentralized Vulnerability Research Notes.html | 34.9 KB | ||
| 108. Lab 97 Add AI-Assisted Governance Boundaries.html | 31.1 KB | ||
| 109. Lab 98 Package the Sovereign Deployment Blueprint.html | 29.1 KB | ||
| 110. Lab 99 Run the Full CTEM Platform Readiness Assessment.html | 43.9 KB | ||
| 111. Lab 100 Capstone Build a Sovereign CTEM Risk Prioritization Platform.html | 49.7 KB | ||
| 12 - Conclusion | |||
| 112. Conclusion.mp4 | 117.5 MB | ||
| 2 - Module 1 Foundations, Local Environment Setup, and Initial Success | |||
| 10. Lab 8 Add a Minimal CTEM API.html | 28.2 KB | ||
| 11. Lab 9 Create the First Risk Query.html | 29.4 KB | ||
| 12. Lab 10 Initial Success Milestone Produce the First CTEM Priority Report.html | 33.7 KB | ||
| 2. Foundations, Local Environment Setup, and Initial Success.mp4 | 76.9 MB | ||
| 3 - Module 2 Asset Inventory and Exposure Discovery | |||
| 13. Asset Inventory and Exposure Discovery.mp4 | 70 MB | ||
| 14. Lab 11 Model Internet Exposure as a First-Class Signal.html | 32.1 KB | ||
| 15. Lab 12 Import Nmap Discovery Output.html | 31.3 KB | ||
| 16. Lab 13 Store Network Services in PostgreSQL.html | 36.1 KB | ||
| 17. Lab 14 Add Asset Ownership and SLA Metadata.html | 38.1 KB | ||
| 18. Lab 15 Build an Asset Deduplication Rule.html | 32.1 KB | ||
| 19. Lab 16 Add Cloud Resource Identity Fields.html | 35 KB | ||
| 20. Lab 17 Create an Asset Criticality Rubric.html | 30.6 KB | ||
| 21. Lab 18 Import External Attack Surface Seeds.html | 29.4 KB | ||
| 22. Lab 19 Build an Exposure Completeness Dashboard Query.html | 27.9 KB | ||
| 23. Lab 20 Establish the Discovery-to-Inventory Control Loop.html | 27.5 KB | ||
| 4 - Module 3 Vulnerability Intelligence and Open Data | |||
| 24. Vulnerability Intelligence and Open Data.mp4 | 106 MB | ||
| 25. Lab 21 Create a Vulnerability Intelligence Table.html | 30.9 KB | ||
| 26. Lab 22 Load Sample CVE Intelligence.html | 30.7 KB | ||
| 27. Lab 23 Enrich Findings with Vulnerability Intelligence.html | 30.2 KB | ||
| 28. Lab 24 Add KEV-First Prioritization Logic.html | 32.6 KB | ||
| 29. Lab 25 Implement EPSS Threshold Buckets.html | 5.5 KB | ||
| 30. Lab 26 Track Vulnerability Data Freshness.html | 33.2 KB | ||
| 31. Lab 27 Build an OSV Query Client Skeleton.html | 32.7 KB | ||
| 32. Lab 28 Normalize Package Vulnerability Records.html | 34.8 KB | ||
| 33. Lab 29 Add Intelligence Source Attribution.html | 31.2 KB | ||
| 34. Lab 30 Build the Vulnerability Intelligence Refresh Workflow.html | 26.9 KB | ||
| 5 - Module 4 Risk Scoring and Prioritization Engine | |||
| 35. Risk Scoring and Prioritization Engine.mp4 | 103.7 MB | ||
| 36. Lab 31 Design the Composite Risk Formula.html | 36.6 KB | ||
| 37. Lab 32 Implement Risk Score Calculation in SQL.html | 22.3 KB | ||
| 38. Lab 33 Add Configurable Risk Weights.html | 30.2 KB | ||
| 39. Lab 34 Create Priority Bands from Risk Scores.html | 26.1 KB | ||
| 40. Lab 35 Add SLA Due Dates Based on Priority.html | 33.1 KB | ||
| 41. Lab 36 Implement Risk Acceptance Fields.html | 26.1 KB | ||
| 42. Lab 37 Suppress False Positives with Evidence.html | 40.2 KB | ||
| 43. Lab 38 Create a Remediation Owner Queue.html | 30.5 KB | ||
| 44. Lab 39 Add Risk Trend Snapshots.html | 5.5 KB | ||
| 45. Lab 40 Publish the First Risk-Based Prioritization API Endpoint.html | 31.6 KB | ||
| 6 - Module 5 AppSec and Supply Chain Signals | |||
| 46. AppSec and Supply Chain Signals.mp4 | 94.9 MB | ||
| 47. Lab 41 Generate a CycloneDX SBOM with Syft.html | 26.3 KB | ||
| 48. Lab 42 Scan the SBOM with Grype.html | 22.7 KB | ||
| 49. Lab 43 Scan Container Images with Trivy.html | 23.3 KB | ||
| 50. Lab 44 Normalize Scanner Findings into One Schema.html | 31.5 KB | ||
| 51. Lab 45 Run Semgrep for SAST Signals.html | 36.3 KB | ||
| 52. Lab 46 Run Gitleaks for Secret Exposure.html | 30.9 KB | ||
| 53. Lab 47 Import AppSec Findings into CTEM.html | 36.6 KB | ||
| 54. Lab 48 Add VEX Status Handling.html | 39.1 KB | ||
| 55. Lab 49 Create CI Security Gates.html | 37.9 KB | ||
| 56. Lab 50 Build the Supply Chain Risk Rollup.html | 38.6 KB | ||
| 7 - Module 6 Cloud-Native and Infrastructure Exposure | |||
| 57. Cloud-Native and Infrastructure Exposure.mp4 | 107.1 MB | ||
| 58. Lab 51 Scan Kubernetes Manifests with Trivy.html | 34.7 KB | ||
| 59. Lab 52 Add Kubernetes Asset Types.html | 36.3 KB | ||
| 60. Lab 53 Install a Local Kind Cluster.html | 32.3 KB | ||
| 61. Lab 54 Deploy the CTEM API to Kubernetes.html | 40.7 KB | ||
| 62. Lab 55 Enforce Kubernetes Labels with OPA Gatekeeper.html | 36.3 KB | ||
| 63. Lab 56 Add Terraform or OpenTofu IaC Scanning.html | 26.9 KB | ||
| 64. Lab 57 Map IaC Findings to Cloud Assets.html | 40.1 KB | ||
| 65. Lab 58 Add Cloud Control Exceptions.html | 32.4 KB | ||
| 66. Lab 59 Create a Kubernetes Exposure Report.html | 5.5 KB | ||
| 67. Lab 60 Build the Cloud-Native Risk Review.html | 37.2 KB | ||
| 8 - Module 7 Validation and Attack Path Confirmation | |||
| 68. Validation and Attack Path Confirmation.mp4 | 91.2 MB | ||
| 69. Lab 61 Define Safe Validation Rules of Engagement.html | 35 KB | ||
| 70. Lab 62 Validate Reachability with HTTP Checks.html | 31.5 KB | ||
| 71. Lab 63 Store Validation Evidence.html | 35.1 KB | ||
| 72. Lab 64 Use Nuclei for Template-Based Safe Checks.html | 28.8 KB | ||
| 73. Lab 65 Model Validation Confidence.html | 28.6 KB | ||
| 74. Lab 66 Boost Risk with Validated Reachability.html | 27.8 KB | ||
| 75. Lab 67 Track Compensating Controls.html | 29.9 KB | ||
| 76. Lab 68 Reduce Risk with Current Controls.html | 25.7 KB | ||
| 77. Lab 69 Create a Validation Evidence Report.html | 34.7 KB | ||
| 78. Lab 70 Build the Validation-to-Prioritization Review.html | 36.5 KB | ||
| 9 - Module 8 Orchestration, Data Engineering, and APIs | |||
| 79. Orchestration, Data Engineering, and APIs.mp4 | 87.4 MB | ||
| 80. Lab 71 Create Idempotent Import Jobs.html | 34.2 KB | ||
| 81. Lab 72 Add JSON Schema Validation for Imports.html | 37.4 KB | ||
| 82. Lab 73 Build Bulk Import API Endpoint.html | 36.4 KB | ||
| 83. Lab 74 Add API Pagination.html | 29.4 KB | ||
| 84. Lab 75 Add OpenAPI Documentation Review.html | 31 KB | ||
| 85. Lab 76 Schedule Refresh Jobs with Airflow.html | 31.7 KB | ||
| 86. Lab 77 Create a Lightweight Cron Alternative.html | 32.3 KB | ||
| 87. Lab 78 Add Job Run Tracking.html | 5.5 KB | ||
| 88. Lab 79 Add Event-Driven Queue Design.html | 50.4 KB | ||
| 89. Lab 80 Build the Data Engineering Control Plane Review.html | 42.4 KB | ||
| 3. Lab 1 Build the CTEM Workstation Baseline.html | 29.9 KB | ||
| 4. Lab 2 Create the Course Repository Structure.html | 31.9 KB | ||
| 5. Lab 3 Add a Docker Compose Runtime.html | 30.3 KB | ||
| 6. Lab 4 Install the Python CTEM CLI Skeleton.html | 27.8 KB | ||
| 7. Lab 5 Build the First Asset Inventory Schema.html | 31.2 KB | ||
| 8. Lab 6 Seed Business-Critical Assets.html | 30.5 KB | ||
| 9. Lab 7 Define the Exposure Data Model.html | 35.2 KB | ||
| 90. Reliability, Observability, and SecOps Mobilization.mp4 | 94.9 MB | ||
| 91. Lab 81 Add Structured JSON Logging.html | 33 KB | ||
| 92. Lab 82 Expose Prometheus-Style Metrics.html | 27.4 KB | ||
| 93. Lab 83 Add OpenTelemetry Design Hooks.html | 30 KB | ||
| 94. Lab 84 Create Backup and Restore Scripts.html | 39.8 KB | ||
| 95. Lab 85 Add Disaster Recovery Runbook.html | 31.4 KB | ||
| 96. Lab 86 Model Ticket Creation Workflow.html | 48.8 KB | ||
| 97. Lab 87 Add Remediation Status Sync.html | 5.5 KB | ||
| 98. Lab 88 Build SLA Breach Reporting.html | 31.9 KB | ||
| 99. Lab 89 Create Executive Risk Reduction Metrics.html | 38.8 KB |
CTEM & Risk-Based Vulnerability Management Bootcamp
https://WebToolTip.com
Published 9/2026
Created by Bayt Al Hikmah
MP4 | Video: h264, 1280x720 | Audio: AAC, 44.1 KHz, 2 Ch
Level: Intermediate | Genre: eLearning | Language: English | Duration: 112 Lectures ( 21h 18m ) | Size: 1.2 GB
From severity-score guesswork to evidence-validated remediation — a full CTEM platform, built and scored end-to-end.
What you'll learn
⚡ Architect a full CTEM data platform in PostgreSQL and FastAPI — asset inventory, findings, vulnerability intelligence, and risk scoring.
⚡ Engineer a composite risk-scoring formula that combines CVSS, EPSS, KEV, asset criticality, and internet exposure into a governed, config-driven model.
⚡ Ingest and normalize scanner output from Trivy, Grype, Syft, Semgrep, Gitleaks, and Nuclei into one unified exposure schema, with SBOM/VEX handling built in.
⚡ Validate exploitability safely — HTTP reachability checks, template-based Nuclei scans, and confidence-scored evidence — against owned lab targets onlly.
⚡ Govern risk acceptance, false-positive suppression, and compensating controls with expiration dates, approvers, and full audit trails instead of silent ticket.
⚡ Automate the remediation lifecycle — SLA due dates by priority band, owner queues, ticket creation, and SLA-breach reporting that engineering teams.
⚡ Deploy the platform on Kubernetes with OPA Gatekeeper policy enforcement, IaC scanning (Terraform/OpenTofu), and GitOps-style change control.
⚡ Operate it like production: structured JSON logging, Prometheus-style metrics, backup/restore drills, and a documented disaster-recovery runbook.
⚡ Design for sovereignty and compliance — data classification, tenant/region isolation, audit logging, and governed AI-assisted triage with strict human-approval.
⚡ Deliver a capstone-grade sovereign CTEM platform: a final risk queue, validated evidence, SLA reporting, and a compliance-ready governance blueprint.
Requirements
❗ Knowledge: Basic comfort with a terminal and copy-pasting commands. No prior vulnerability management, SQL, or security tooling experience required — every lab starts from a pre-flight check and builds up. Basic SQL reading ability helps but isn't required; every query is explained in plain language before you run it. No prior DevSecOps, cloud, or Kubernetes background needed — Modules 6 and 9 build those skills from a local, disposable Kind cluster. Software (all free/open-source): Docker and Docker Compose, Git, Make, Python 3.10+, curl. PostgreSQL (run via the provided Docker Compose file — no separate install needed). Open-source scanning tools used via containers: Trivy, Grype, Syft, Semgrep, Gitleaks, Nuclei (all pulled automatically in labs — no license or account required). Optional for Modules 6/9: kind and kubectl for local Kubernetes labs (a lightweight local cluster, not a cloud account). Hardware: 20GB+ free disk space and at least 8GB RAM recommended (PostgreSQL + scanner containers + optional Kind cluster running together). No cloud account, no paid scanner licenses, and no access to real production infrastructure required — every lab uses seeded/synthetic asset and vulnerability data.
All Comments