mkdocs.yml

# MkDocs Material configuration to render this repo as a browsable site.
#
# This repo keeps its Markdown at the root (foundations/, ceh/, deep-dives/, ...) rather
# than under a single docs/ folder, and MkDocs 1.6 requires docs_dir to be a CHILD of the
# config file. So scripts/build-site.sh copies the content into ./site-src (the docs_dir).
#
# Local preview:  pip install mkdocs-material && bash scripts/build-site.sh && mkdocs serve
site_name: "WallixCerts — PAM & Cybersecurity Certification Study Hub"
site_description: "Source-grounded study notes for WALLIX/PAM, CEH, and adjacent cybersecurity certifications."
repo_url: https://github.com/morandeirachema/WallixCerts
repo_name: morandeirachema/WallixCerts

docs_dir: site-src
site_dir: site

theme:
  name: material
  features:
    - navigation.indexes
    - navigation.sections
    - navigation.top
    - navigation.tracking
    - toc.follow
    - content.code.copy
    - search.suggest
  palette:
    - scheme: default
      primary: indigo
      accent: indigo
      toggle:
        icon: material/weather-night
        name: Switch to dark mode
    - scheme: slate
      primary: indigo
      accent: indigo
      toggle:
        icon: material/weather-sunny
        name: Switch to light mode

markdown_extensions:
  - admonition
  - attr_list
  - tables
  - pymdownx.details
  - toc:
      permalink: true
  - pymdownx.superfences:
      custom_fences:
        - name: mermaid
          class: mermaid
          format: !!python/name:pymdownx.superfences.fence_code_format

plugins:
  - search

# Curated learning order (friendlier than the auto/alphabetical default).
nav:
  - Home: README.md
  - Learning:
      - learning/README.md
      - Roadmap: learning/roadmap.md
      - Platforms: learning/platforms.md
  - Attack → Defense matrix: attack-to-defense-matrix.md
  - Foundations:
      - foundations/README.md
      - What is PAM?: foundations/what-is-pam.md
      - Privileged accounts & credentials: foundations/privileged-accounts-and-credentials.md
      - PAM threat landscape: foundations/pam-threat-landscape.md
      - Least privilege, JIT & Zero Trust: foundations/core-concepts-least-privilege-jit-zero-trust.md
      - PAM vs IAM / IGA / IDaaS / EPM: foundations/pam-iam-iga-idaas-epm.md
      - PAM market landscape: foundations/pam-market-landscape.md
  - Prerequisites:
      - prerequisites/README.md
      - Linux essentials: prerequisites/linux-essentials-for-pam.md
      - Linux CLI for WCE-P: prerequisites/linux-cli-for-wce-p.md
      - Windows & Active Directory: prerequisites/windows-and-active-directory.md
      - Networking & protocols: prerequisites/networking-and-protocols.md
      - Cryptography & PKI: prerequisites/cryptography-and-pki.md
  - Protocols:
      - protocols/README.md
      - Kerberos: protocols/kerberos.md
      - Active Directory: protocols/active-directory.md
      - LDAP: protocols/ldap.md
      - RADIUS: protocols/radius.md
      - TLS: protocols/tls.md
      - SSH: protocols/ssh.md
      - SAML: protocols/saml.md
      - OIDC / OAuth 2.0: protocols/oidc-oauth2.md
  - Certifications: certs/README.md
  - WALLIX / PAM:
      - certs/wallix/README.md
      - Certification framework: certs/wallix/overview/certification-framework.md
      - Product portfolio: certs/wallix/overview/product-portfolio.md
      - PAM / Bastion track:
          - certs/wallix/pam-bastion/README.md
          - WCA-P — Administrator: certs/wallix/pam-bastion/wca-p-administrator.md
          - WCP-P — Professional: certs/wallix/pam-bastion/wcp-p-professional.md
          - WCE-P — Expert: certs/wallix/pam-bastion/wce-p-expert.md
      - OT track (eWCP-P-OT): certs/wallix/ot-pam4ot/ewcp-p-ot-professional.md
      - IDaaS track (eWCP-I): certs/wallix/idaas/ewcp-i-professional.md
      - IAG track:
          - certs/wallix/iag/README.md
          - WCP-G — Professional: certs/wallix/iag/ewcp-g-professional.md
          - WCA-G — Administrator (soon): certs/wallix/iag/wca-g-administrator.md
      - Deep dives:
          - certs/wallix/deep-dives/README.md
          - Bastion architecture: certs/wallix/deep-dives/bastion-architecture.md
          - Bastion data model: certs/wallix/deep-dives/bastion-data-model.md
          - Session management: certs/wallix/deep-dives/session-management.md
          - Secrets & password management: certs/wallix/deep-dives/secrets-and-password-management.md
          - Authentication & Access Manager: certs/wallix/deep-dives/authentication-and-access-manager.md
          - High availability & DR: certs/wallix/deep-dives/high-availability-and-dr.md
          - REST API & automation: certs/wallix/deep-dives/rest-api-and-automation.md
          - Troubleshooting & logs: certs/wallix/deep-dives/troubleshooting-and-logs.md
          - PAM4OT (OT): certs/wallix/deep-dives/pam4ot-operational-technology.md
          - IDaaS / Trustelem: certs/wallix/deep-dives/idaas-trustelem.md
          - IAG — Identity & Access Governance: certs/wallix/deep-dives/iag-identity-governance.md
          - EPM / BestSafe: certs/wallix/deep-dives/epm-bestsafe.md
          - WALLIX One & integrations: certs/wallix/deep-dives/wallix-one-and-integrations.md
      - Labs:
          - certs/wallix/labs/README.md
          - Build a home lab: certs/wallix/labs/building-a-home-lab.md
          - Hands-on exercises: certs/wallix/labs/hands-on-exercises.md
      - Exam prep:
          - certs/wallix/exam-prep/README.md
          - Study plan: certs/wallix/exam-prep/study-plan.md
          - Practice questions: certs/wallix/exam-prep/practice-questions.md
          - Cheat sheet: certs/wallix/exam-prep/cheat-sheet.md
      - Career:
          - certs/wallix/career/README.md
          - Sysadmin → PAM roadmap: certs/wallix/career/sysadmin-to-pam-roadmap.md
          - Skills & adjacent certs: certs/wallix/career/skills-and-adjacent-certifications.md
      - Reference:
          - reference/README.md
          - Glossary: reference/glossary.md
          - Acronyms: reference/acronyms.md
          - Compliance & standards: reference/compliance-and-standards.md
          - Sources: reference/sources.md
  - CompTIA Security+:
      - certs/security-plus/README.md
      - Overview:
          - What is Security+: certs/security-plus/00-overview/what-is-security-plus.md
          - Exam & objectives: certs/security-plus/00-overview/exam-and-objectives.md
      - The 5 domains:
          - certs/security-plus/domains/README.md
          - 1 · General security concepts: certs/security-plus/domains/01-general-security-concepts.md
          - 2 · Threats, vulnerabilities & mitigations: certs/security-plus/domains/02-threats-vulnerabilities-mitigations.md
          - 3 · Security architecture: certs/security-plus/domains/03-security-architecture.md
          - 4 · Security operations: certs/security-plus/domains/04-security-operations.md
          - 5 · Program management & oversight: certs/security-plus/domains/05-security-program-management-oversight.md
      - Exam prep:
          - Study plan: certs/security-plus/exam-prep/study-plan.md
          - Practice questions: certs/security-plus/exam-prep/practice-questions.md
          - Cheat sheet: certs/security-plus/exam-prep/cheat-sheet.md
      - Reference:
          - Acronyms: certs/security-plus/reference/acronyms.md
          - Glossary: certs/security-plus/reference/glossary.md
  - CEH (Certified Ethical Hacker):
      - certs/ceh/README.md
      - Overview:
          - What is CEH: certs/ceh/00-overview/what-is-ceh.md
          - Exam & eligibility: certs/ceh/00-overview/exam-and-eligibility.md
          - The 5 phases: certs/ceh/00-overview/five-phases-of-hacking.md
          - Legal & ethics: certs/ceh/00-overview/legal-and-ethics.md
          - AI in ethical hacking: certs/ceh/00-overview/ai-in-ethical-hacking.md
          - Engagement methodology & reporting: certs/ceh/00-overview/engagement-methodology-and-reporting.md
      - The 20 modules:
          - certs/ceh/domains/README.md
          - 01 · Introduction to ethical hacking: certs/ceh/domains/01-introduction-to-ethical-hacking.md
          - 02 · Footprinting & reconnaissance: certs/ceh/domains/02-footprinting-and-reconnaissance.md
          - 03 · Scanning networks: certs/ceh/domains/03-scanning-networks.md
          - 04 · Enumeration: certs/ceh/domains/04-enumeration.md
          - 05 · Vulnerability analysis: certs/ceh/domains/05-vulnerability-analysis.md
          - 06 · System hacking: certs/ceh/domains/06-system-hacking.md
          - 07 · Malware threats: certs/ceh/domains/07-malware-threats.md
          - 08 · Sniffing: certs/ceh/domains/08-sniffing.md
          - 09 · Social engineering: certs/ceh/domains/09-social-engineering.md
          - 10 · Denial-of-service: certs/ceh/domains/10-denial-of-service.md
          - 11 · Session hijacking: certs/ceh/domains/11-session-hijacking.md
          - 12 · Evading IDS, firewalls & honeypots: certs/ceh/domains/12-evading-ids-firewalls-honeypots.md
          - 13 · Hacking web servers: certs/ceh/domains/13-hacking-web-servers.md
          - 14 · Hacking web applications: certs/ceh/domains/14-hacking-web-applications.md
          - 15 · SQL injection: certs/ceh/domains/15-sql-injection.md
          - 16 · Hacking wireless networks: certs/ceh/domains/16-hacking-wireless-networks.md
          - 17 · Hacking mobile platforms: certs/ceh/domains/17-hacking-mobile-platforms.md
          - 18 · IoT & OT hacking: certs/ceh/domains/18-iot-and-ot-hacking.md
          - 19 · Cloud computing: certs/ceh/domains/19-cloud-computing.md
          - 20 · Cryptography: certs/ceh/domains/20-cryptography.md
      - Tools by phase: certs/ceh/tools/tools-by-phase.md
      - Labs:
          - Build a CEH lab: certs/ceh/labs/building-a-ceh-lab.md
          - Practice ranges: certs/ceh/labs/practice-ranges.md
      - Exam prep:
          - Study plan: certs/ceh/exam-prep/study-plan.md
          - Practice questions: certs/ceh/exam-prep/practice-questions.md
          - Cheat sheet: certs/ceh/exam-prep/cheat-sheet.md
      - Career & adjacent certs: certs/ceh/career/ceh-career-and-adjacent-certs.md
      - Reference:
          - Glossary: certs/ceh/reference/glossary.md
          - Acronyms: certs/ceh/reference/acronyms.md
  - CompTIA CySA+:
      - certs/cysa-plus/README.md
      - Overview:
          - What is CySA+: certs/cysa-plus/00-overview/what-is-cysa-plus.md
          - Exam & objectives: certs/cysa-plus/00-overview/exam-and-objectives.md
      - The 4 domains:
          - certs/cysa-plus/domains/README.md
          - 1 · Security operations: certs/cysa-plus/domains/01-security-operations.md
          - 2 · Vulnerability management: certs/cysa-plus/domains/02-vulnerability-management.md
          - 3 · Incident response & management: certs/cysa-plus/domains/03-incident-response-and-management.md
          - 4 · Reporting & communication: certs/cysa-plus/domains/04-reporting-and-communication.md
      - Exam prep:
          - Study plan: certs/cysa-plus/exam-prep/study-plan.md
          - Practice questions: certs/cysa-plus/exam-prep/practice-questions.md
      - Glossary: certs/cysa-plus/reference/glossary.md
  - CompTIA PenTest+:
      - certs/pentest-plus/README.md
      - Overview:
          - What is PenTest+: certs/pentest-plus/00-overview/what-is-pentest-plus.md
          - Exam & objectives: certs/pentest-plus/00-overview/exam-and-objectives.md
      - The 5 domains:
          - certs/pentest-plus/domains/README.md
          - 1 · Engagement management: certs/pentest-plus/domains/01-engagement-management.md
          - 2 · Reconnaissance & enumeration: certs/pentest-plus/domains/02-reconnaissance-and-enumeration.md
          - 3 · Vulnerability discovery & analysis: certs/pentest-plus/domains/03-vulnerability-discovery-and-analysis.md
          - 4 · Attacks & exploits: certs/pentest-plus/domains/04-attacks-and-exploits.md
          - 5 · Post-exploitation & lateral movement: certs/pentest-plus/domains/05-post-exploitation-and-lateral-movement.md
      - Exam prep:
          - Study plan: certs/pentest-plus/exam-prep/study-plan.md
          - Practice questions: certs/pentest-plus/exam-prep/practice-questions.md
          - Cheat sheet: certs/pentest-plus/exam-prep/cheat-sheet.md
      - Glossary: certs/pentest-plus/reference/glossary.md
  - OSCP / OSCP+:
      - certs/oscp/README.md
      - Overview:
          - What is OSCP: certs/oscp/00-overview/what-is-oscp.md
          - Exam structure: certs/oscp/00-overview/exam-structure.md
      - Skill areas:
          - certs/oscp/topics/README.md
          - 1 · Enumeration & information gathering: certs/oscp/topics/01-enumeration-and-information-gathering.md
          - 2 · Web application attacks: certs/oscp/topics/02-web-application-attacks.md
          - 3 · Password & client-side attacks: certs/oscp/topics/03-password-and-client-side-attacks.md
          - 4 · Privilege escalation: certs/oscp/topics/04-privilege-escalation.md
          - 5 · Active Directory attacks: certs/oscp/topics/05-active-directory-attacks.md
          - 6 · Pivoting & tunneling: certs/oscp/topics/06-pivoting-and-tunneling.md
      - Study plan: certs/oscp/exam-prep/study-plan.md
  - PNPT:
      - certs/pnpt/README.md
      - Overview:
          - What is PNPT: certs/pnpt/00-overview/what-is-pnpt.md
          - Exam structure: certs/pnpt/00-overview/exam-structure.md
      - Engagement phases:
          - certs/pnpt/topics/README.md
          - 1 · OSINT & reconnaissance: certs/pnpt/topics/01-osint-and-reconnaissance.md
          - 2 · External penetration testing: certs/pnpt/topics/02-external-penetration-testing.md
          - 3 · Active Directory exploitation: certs/pnpt/topics/03-active-directory-exploitation.md
          - 4 · Lateral movement & pivoting: certs/pnpt/topics/04-lateral-movement-and-pivoting.md
          - 5 · Reporting & the debrief: certs/pnpt/topics/05-reporting-and-the-debrief.md
      - Study plan: certs/pnpt/exam-prep/study-plan.md
  - Adjacent certifications:
      - certs/adjacent-certs/README.md
      - CompTIA Security+: certs/adjacent-certs/security-plus.md
      - OSCP: certs/adjacent-certs/oscp.md
      - PNPT: certs/adjacent-certs/pnpt.md
      - CISSP: certs/adjacent-certs/cissp.md
      - Cloud security: certs/adjacent-certs/cloud-security.md
  - About:
      - Contributing: CONTRIBUTING.md
      - Maintenance & verification: MAINTENANCE.md
      - Security & responsible use: SECURITY.md
      - Changelog: CHANGELOG.md