Know what you're trying to understand? Search every JoeLearns written guide and series lesson in one place. Filter by topic, difficulty, or certification relevance. Everything is sorted A–Z.
Learn AD DS forests, domains, OUs, sites, service discovery, authentication, replication, SYSVOL, FSMO roles and troubleshooting through a three-case directory evidence explorer.
Event-driven access re-evaluation, location/IP diagnostics, context-based step-up, privileged protected actions, report-only templates and four Northstar decision cases.
What started as a routine switch replacement turned into a deeper troubleshooting situation involving assumptions, cabling, and finding the real source of the problem.
Independent final IT automation project with eight browser scenarios, complete inventory validation and an optional six-file local Python starter with 12 unit tests.
Learn argparse, typed CLI options, settings precedence and exit codes with a live command builder, local sample and eight independent Python exercises.
Safely transform local CSV and JSON with pathlib, UTF-8, validation, duplicate detection and staged output; includes an editable pipeline explorer and eight Python coding challenges.
Make Python automation testable and trustworthy with named logging, safe event context, unittest, mocked failures, bounded retries and a local operator runbook.
Move from simple scripts to local Python projects: virtual environments, pip targeting, requirements, entry points and repeatable setup, with six in-browser coding challenges.
Learn HTTP contracts, 401 versus 403, OAuth concepts, request encoding, pagination, throttling and reliable read-only API reporting with an interactive request explorer and localhost Python lab.
Operate unattended Python jobs with scheduler context, UTC maintenance windows, scoped approvals, idempotency, safe plans and a fictional offline runner.
Passkeys, Temporary Access Pass, Authenticator, SSPR, password protection, registration campaigns and evidence-based risk investigation with four Northstar scenarios.
Full and incremental backup chains, RPO/RTO, retention, immutability, Veeam/Datto examples and an interactive restore-dependency explorer.
Inbound/outbound cross-tenant access, B2B synchronization, SAML/WS-Fed external federation, staged AD FS migration and Connect Health troubleshooting with interactive Northstar investigations.
Prepare for a full Northstar incident investigation using five-phase assessment goals, read-only evidence, safe approvals and verified business/security acceptance.
Trace data at rest, in transit and in use with beginner encryption, hashing, HMAC, certificates, key management, safe sharing and recoverable backups across five Northstar flows.
Shadow IT discovery, cloud app catalog, SaaS API connectors, OAuth app governance, Conditional Access App Control and original Northstar investigations.
Preventive, detective, corrective, and recovery controls across identities, endpoints, networks and data; zero trust, NIST CSF 2.0 and an interactive scenario explorer.
Prioritize a mixed security queue, inspect evidence, distinguish vendor severity from business urgency and route alert decisions to authorized owners.
DHCP DORA, DNS resolution, common failures, and the read-only diagnostic workflow behind getting clients online.
Encryption, hashing, key exchange, digital signatures, certificate chains, TLS and an interactive trust explorer.
Build layered protection around workstations, servers, internal zones, privileged access and backup management. Test five interactive Northstar control designs.
On-prem web publishing with private connectors, My Apps collections, exposed app roles, and Terms of Use enforcement via Conditional Access with four interactive incidents.
Administrative-unit delegation, attribute definition and assignment roles, company branding, bulk CSV onboarding and interactive regional help-desk scope simulation.
A practical introduction to external users in Microsoft Entra ID, including what they are, why they exist, and how they appear and function in the Entra portal.
Network traffic forwarding, GSA clients, Quick Access, private connectors, Conditional Access and a four-route interactive Northstar troubleshooting lab.
Master GPO processing, LSDOU, filtering, Enforced links, Block Inheritance, loopback, SYSVOL, gpresult and safe troubleshooting with an interactive policy result explorer.
AD DS and Entra authority, Connect Sync and Cloud Sync, cloud authentication models, domain DNS, Kerberos, Group Policy and Windows Hello for Business trust paths.
Strengthen sign-ins and protect recovery, passkeys, privileged roles, legacy protocols, workload identities and active sessions with five fictional identity decision models.
Catalog-backed access packages, access reviews, eligible and active PIM roles, approval policy, emergency accounts and a three-case Northstar control desk.
Diagnose effective Entra role permissions, verified domains, external-user lifecycle, Cloud Sync versus Connect Sync, PHS/PTA, Windows Hello and Kerberos with four investigations.
Learn response readiness, declaration, evidence handling, approved containment, eradication, recovery and communication in five staged Northstar cases.
Entra registered, joined and hybrid devices; Windows management enrollment, policy targeting, BitLocker and Secure Boot compliance, cloud reporting and Conditional Access. Interactive device signal explorer.
Learn malware behavior and outcomes, ransomware, password spraying and stuffing, session abuse, correlation of endpoint and identity events, and authorized triage.
Tenants, Entra identities, license and service plans, Exchange mailbox provisioning, SharePoint team sites and group permissions, with an interactive tenant map.
Understand assignments, conditions, grant controls, authentication strengths, sign-in logs, and safe policy rollouts.
Sign-in, audit and provisioning logs, KQL queries, diagnostic routing, workbooks and Identity Secure Score with three interactive Northstar investigations.
Recognize deceptive email, QR, voice and MFA requests; inspect sender and URL evidence; separate mail authentication from authorization; and report safely.
A practical look at how multifactor authentication is planned and enforced in Microsoft Entra, including Security Defaults, Conditional Access, and the licensing context that shapes your options.
Understand if/elif/else, for and while loops, exclusive range stops, counters, break, continue and debugging with an interactive loop explorer and live Python.
Understand arithmetic operators, precedence, type conversion and real Python input() using an interactive expression explorer and eight coding challenges.
Read and write files, parse CSV and JSON, handle malformed records and import modules using an interactive file pipeline and eight real Python exercises.
Learn offline API status handling, inventory validation, log correlation, safe automation design and tests using an interactive response explorer and real Python.
Define functions, pass arguments, distinguish print from return, reason about scope and defaults, and build reusable IT helpers with an interactive function-call explorer.
Understand Python assignments, types, conversion, comparisons, branches and debugging through line-by-line examples and a real in-browser Python executor with variable tracing.
Learn string indexing, slicing, searching, membership, normalization and character-based algorithms with nine real Python challenges.
Clean strings, explore lists and dictionaries, filter structured device records, and build an IT health report using a live data explorer and Python editor.
Validate backups, RPO/RTO, data integrity, secure identity and TLS dependencies, monitoring, and accurate investigation handoffs across five interactive recovery cases.
Read identity, endpoint, network, DNS and application event outcomes, correlate timestamps and inspect five synthetic security timelines without live tools.
Beginner identity and access fundamentals: authentication versus authorization, least privilege, default deny, RBAC/ABAC, Zero Trust, sessions, approval and resource-level validation.
Server hardware failure domains, controllers, ECC RAM, RAID 0/1/5/6/10, drive evidence and safe disk replacement.
Risk-based patching, owner approvals, maintenance preflight, Linux service diagnostics, rollback and post-change validation.
MAC learning, forwarding, flooding, access ports, 802.1Q trunks, STP, Cisco verification and an interactive frame simulator.
Reading-first cybersecurity basics: CIA, asset ownership, threat events, vulnerabilities, exposure, impact, risk decisions and an interactive classroom risk explorer.
IPv4 addressing, binary, CIDR, network boundaries, VLSM, gateways, and routing—with a visual subnet explorer.
A complete beginner-friendly MFA lesson: understand the three authentication factors, compare SMS, authenticator codes, push prompts and passkeys, explore phishing and account recovery risks, and test your knowledge.
ESXi and Hyper-V hosts, guest resource pressure, datastores, virtual switching, snapshots/checkpoints and maintenance-mode prerequisites.
IPsec, TLS VPNs, split/full tunneling, longest-prefix routing, private DNS and a hands-on packet-path simulator.
Understand roles, features, services, Server Core, administration tools, evidence gathering and service dependencies through an interactive Northstar Server Dependency Explorer.
Application objects, enterprise service principals, managed identities, SaaS SSO, consent, Graph permissions and a four-path Northstar identity explorer.
Certification tags indicate potentially relevant subject matter only. JoeLearns does not claim affiliation with exam providers or comprehensive coverage of any certification blueprint.
Our guided journeys connect these lessons to Practice modules, Labs and real diagnostic workflows.
