Section 1.1 titled Assessment Methodologies: Information Gathering is complete. It was a lot of review for me, but I still picked up a few new things! That’s what I really love about this field, there is no way anyone could ever know everything. Even if technology stopped moving forward today, no one could fully know all the areas of Cybersecurity, it’s just too vast.
I’ve been adding to the Books and Resources section as well as building out a glossary as I go through the course. Noting tools, websites, GitHub repos, methods and concepts. It helps me to learn. I picked up a really cool new tool for my toolbag, haveibeenpwned.com. Also got a little bit more out of DNS and using nmap. nmap is one of those tools you can’t just use, you have to understand what it’s doing and that requires networking knowledge, like basic TCP/IP, 3-way handshakes, UDP, what a subnet mask is (I still struggle to figure out how to do that, so I just use tools to do it for me, but I do understand the concept and I can do it if I have to, just takes forever.)
I think this course is much improved over the previous one. Having all those videos has been great, and the way the instructor explains things and runs into issues and does not edit them out of the video is perfect. It’s real. Reminds me of John Hammond, even though I am convinced that guy is not of this world, how does he do what he does so well?
This is proving a massive challenge. With the career, kids, and a few side projects, finding time is so difficult. It’s not just time to do it, I have to have the headspace to learn, try, take notes, and allow the concepts to get rooted. It’s worth it.
