A few weeks ago I started this journal with one goal: write every day about what I study as I move from AI automation into cybersecurity. I’ve now finished every course in Cisco’s Junior Cybersecur...
The final section of Cyber Threat Management, and of the whole Junior Cybersecurity Analyst path, was about what to do when things go wrong: responding to a security incident, and recovering from a...
This was my favorite section of the course. It’s about what happens after an attack is spotted: collecting evidence properly, and using models like the Cyber Kill Chain and the Diamond Model to und...
This section brought together two things: managing devices securely over their whole life, and managing risk in a structured way. It ended with security controls, which is where risk management tur...
Before you can spot something unusual on a network, you need to know what normal looks like. This section covered how to build that picture (profiling), how to spot changes from it (anomaly detecti...
This part of Cyber Threat Management was about finding weaknesses before attackers do, through security testing, and about learning from what’s happening to others, through threat intelligence. Se...
This afternoon’s post was about governance, policies and laws. This one is about frameworks: ready-made structures that organizations use to build and check their security, instead of inventing eve...
Cyber Threat Management is the last course in Cisco’s Junior Cybersecurity Analyst path. The earlier courses were mostly technical. This one starts with the side of security that isn’t about packet...
The last part of the Network Defense course was the closest yet to actual SOC work: which protocols and technologies make monitoring harder, what kinds of security data exist, where logs come from,...
Cryptography got its own post because there was a lot of it, and it’s the foundation of almost every other security control. I’d heard most of these terms before, but this was the first time I unde...