This page is a map, not a textbook. The CCT study notes (threats, attacks, malware, social engineering, network, application, wireless and cryptography attacks) were reorganised by topic: the explanations now live in basics/ and offensive/, shared with the other certifications. Use this page to find the right page for each CCT topic.
This map follows the topics covered in these notes, not the official CCT domain list. Check the current EC-Council exam blueprint for the authoritative domains.
Threats, Vulnerabilities, and Risk
Attacks and Methodologies
| CCT topic | Topic pages |
|---|
| Attack classification, hacking phases, Cyber Kill Chain, TTPs, MITRE ATT&CK, Diamond Model | Information Security Attacks — Methodologies and Frameworks |
| Social engineering | Social Engineering |
| Malware: types, components, delivery | Malware |
| Network attacks: recon, DNS, sniffing, MITM, ARP spoofing | Network Attacks, macof, Cain and Abel |
| Application attacks: injection, XSS, CSRF, SSRF, traversal | Application Attacks, OWASP Top 10 |
| Wireless attacks: rogue AP, evil twin, Bluetooth, RFID | Wireless Attacks, Wireless Network Security |
| Cryptography attacks | Cryptography Attacks, Cryptography Fundamentals |
Defence
| CCT topic | Topic pages |
|---|
| Network security fundamentals and controls | Networking Fundamentals, Firewalls and IDS/IPS, Network Segmentation, Security Technologies |
| Identity and access | Identity and Access Management |
| Network traffic monitoring and log analysis | Wireshark, tcpdump, SIEM and Log Management |
| Incident response and forensics | Incident Response Process, Digital Forensics |
| Business continuity and recovery | Business Continuity, Backup and Disaster Recovery |
| Application, cloud, and endpoint security | Secure Software Development, Cloud Security, Endpoint Security |
Gaps to fill
Network troubleshooting, mobile/IoT/OT security, and virtualisation do not yet have dedicated pages.