Your Map of the Territory

You now hold the foundations: what assets are and the three promises made about them, how attackers think and the stages their intrusions follow, the three principles that shape defense, and how a SOC turns noise into decisions. The rest of this academy is a guided tour of the city, one district at a time.

The seven domains are not arbitrary. They are asset classes — the same way of thinking popularized by the Cyber Defense Matrix (covered in its own track here): you cannot claim coverage until you know every category of thing you own and have defenses standing over each. Network is the roads and gates. Devices are the houses themselves — laptops, servers, phones. Users are the residents, with their identities and their very human susceptibility to a convincing story. Data is the valuables in the vaults. Application is the machinery the city runs on — the software you build and buy. Cloud is the districts you lease in someone else's city, with shared responsibility for the locks. And AI DR — AI Detection and Response — is the newest district and the fastest-changing one: defending with AI, and defending against attackers who now use it too.

Study them in any order, but remember the thread that connects them: real attacks do not respect domain boundaries. A phish (Users) drops malware on a laptop (Devices) that moves across the network (Network) to reach a cloud database (Cloud, Data). The defender who understands every district sees the whole story; the one who knows only their own sees a fragment.

Each domain track ends in a badge. Earn all seven and the Vijilan Certified Defender capstone unlocks — the academy's statement that you can see the whole board. Welcome to the city. Pick your first district.