01 / Learning
New knowledge, useful connections and honest reflection. A record of the journey, one session at a time.
Numbered sessions are the instructor-led classroom sessions of my cybersecurity training. Entries labelled Study Buddy are supplementary sessions alongside the course, not numbered classroom sessions.
11 notes
No notes match your search. Try another term or clear the filters.
Symmetric and asymmetric encryption, hashing and digital signatures; certificate authorities, certificate chains, revocation and key management; and encryption of data at rest and in transit, forward secrecy, password hashing, blockchain and obfuscation.
Read moreThreat actor types, attributes and motivations, nation-state actors and advanced persistent threats, Volt Typhoon and living off the land, MITRE ATT&CK, insider threats, attack surfaces and vectors, Stuxnet, the supply chain, and social engineering from phishing to business email compromise.
Read moreThe first Security+ session: the CIA triad and non-repudiation, the NIST Cybersecurity Framework and gap analysis, identification and AAA, security control categories and functional types, security roles, due diligence and due care, competencies and security teams, ending with review questions.
Read moreTutor-led demonstration of a small VirtualBox security lab: Kali Linux and Metasploitable networking, interface inspection with ifconfig, Nmap service and version detection, and researching detected versions.
Read moreNumber systems, IPv4 and IPv6, the OSI model, historical classful addressing, CIDR and subnet masks, network and host identifiers, routing, ARP, a VyOS routing table and Windows and Ubuntu address demonstrations.
Read moreTutor-led networking fundamentals: protocols, OSI layers, addressing, DHCP, ARP, ports, NAT and MAC flooding.
Read moreDeveloping GRC knowledge through business context, risk decisions, security maturity, data protection and continual improvement.
Read moreExploring how governance, risk management, compliance, frameworks and data protection connect technical security with organisational decision-making.
Read moreBuilding on the foundations from Session 1 by exploring security governance, information security principles, risk, vulnerabilities, exposure, and practical defensive measures.
Read moreSupplementary guidance on the learning pathway, basic LAN infrastructure, virtual machines and recommended practical learning resources.
Read moreUnderstanding how attacks unfold, why they succeed, and how attacker thinking and appropriate controls can help break the chain.
Read more