Shrinking Northwind's own external attack surface through an eight-stage funnel lying on its side: discover 620 external assets, inventory the 240 missing from the CMDB, attribute the 440 that had no owner, assess 900 raw findings, prioritize actively exploited KEV entries first, reduce by retiring an unused CRM rather than patching it, monitor the 90 new assets as they appear, and report the true growth to leadership. Above it, a team that believed it had about 40 subdomains finds 210, a payments subdomain surfaces in a public certificate log, and a dangling CNAME is removed; below, prioritization by real exploitation and a rule to assess only what Northwind owns or is authorized to test.

CY-MID-069Mid Level · Attack Surface Management

Attack Surface Management — The Attack Surface Funnel

A hands-on mid-level course that finds and shrinks everything an attacker could reach. Work the attack surface funnel - eight stages: Discover, Inventory, Attribute, Assess, Prioritize, Reduce, Monitor, and Report - continuously finding exposed assets, shadow IT, and risky exposure. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Discover external assets, shadow IT, and forgotten exposure.
Inventory and attribute assets to owners accurately.
Assess and prioritise exposure by real risk.
Reduce the surface and monitor it continuously.

Price:৳8,000