Topic 1: Detection

[FlameSpyro]

"Threat detection and response (TDR) is the process of identifying potential threats and reacting to them before they impact the business." The challenge is to pick topics that are simple for anyone to understand and setup. So common cyber software such as Wireshark is out and cannot be used. This is the most important step before tackling the others as you cant defend what you cant see.

Added material will be found here in future comments.

[FlameSpyro]

Topic 1: Scanners/Antivirus

I feel this should be the most common and most obvious topic to cover and install as the function and process should be simple for any computer user. You choose to scan and the software does most of the work for you. The issue is this can be tricky for what you want and if it truly works. There's nothing wrong with having one no matter what but it may require some configuration that I can cover in the eventual guide.

Software

• AVG AntiVirus: A free open option if you want to work more than just Windows Defender, it doesn't hurt to have multiple options
• Windows Defender: A feature that is built into the machine yet I feel not too many people used it before. I see it as a first step for setup as it requires no download and little work to get running. It should be set to have a scan run constantly. You never know what it could find.
• **Malwarebytes:*** I have mixed feelings about using this as during a cyberattack, Malwarebytes failed to see anything going on even looking directly at the file containing the virus, the program saw absolutely nothing wrong on my computer. I still think that for a no-budget. It's still good to at least consider but it may require some configuration
• Webroot: I do have this as a family plan. I feel it's good to look into ones that do cost money but lay out the options for a variety of situations and budgets.

[FlameSpyro]

Topic 2: Browser Security

This could be where a lot of users can slip up and fall victim to a cyberattack. Situations could be scam emails requiring installing a suspicious document, fake versions of popular websites. Human error is one of the biggest causes of cyberattacks so it's best to be equipped with safety measures when navigating online.

Software/Methods

• Phishing Email Quiz: A proper way to prevent this is to know exactly what to look for in a common phishing email. I can create an online quiz that shows several different real and fake emails asking you if it's real or fake and why it's fake. This would also come with an explanation for where and how to check and block these kinds of emails
• AdBlocker: Pop-up ads are another way for scams to occur as well. The online ad space is heavily unsupervised so many ads claim to be a popular brand or the classic "100th visitor win money" scam so an adblocker such as unlock origin removes ads in general allowing for less clutter and ads to be shoved in your face, reducing chances of navigation to fake websites.
• HTTP and HTTPS: Not really much to discuss here, I feel that pointing out in the guide for how to check for https is a good idea as that can avoid trouble with fake storefronts and such.
• HaveIbeen pwnd: While it cant do too much in the action department, I still find it good to always check if your information has been taken from a security breach in a service you use, emails, phone numbers and much more. Information is always good to know.

[FlameSpyro]

Ublock Chocolatey: https://community.chocolatey.org/packages/ublockorigin-chrome