Hey all. I’m really bad at keeping consistent with learning more about computers and (theoretically) improving in my field, so I thought I’d start keeping track. One post per month that will be updated regularly, so that I don’t overwhelm my own blog with a bazillion 50-word posts.
My focuses this month are going to be information security and learning Ruby. Maybe Python, too, but given that I’m already halfway through the month splitting my attention is probably ambitious enough as it is.
I also hope this means that I can have, if not a portfolio, at least evidence that I’ve been working on learning stuff, in the case of something like a job application. And it should act as a handy reference when I go “I swear I learned this thing, but where?!?”
2017-12-15
- Checked out GradiusCypher’s “Getting Started in Infosec” information repository from Github: https://github.com/gradiuscypher/infosec_getting_started
- Read through and took handwritten notes on Daniel Miessler’s “How to Build a Successful Infosec Career” https://danielmiessler.com/blog/build-successful-infosec-career/
- Up Next: Reading through Hacks4Pancake’s “Starting an InfoSec Career” series of articles
2017-12-17
- Started reading Hacks4Pancake’s “Starting an Infosec Career” series of articles. Read chapters 1-5, which included an outline of possible career paths. https://tisiphone.net/2015/10/12/starting-an-infosec-career-the-megamix-chapters-1-3/
- Listed specializations was very helpful. So far ones that sound especially interesting are:
- Security Engineer
- Forensic Analyst
- Penetration Testing (Traditional)
- Physical Penetration Testing (I think this appeals to me the MOST but also didn’t have super clear education/getting-into-the-industry stuff outlined. Probably worth learning some of the other skills and trying to find people to follow and learn from.)
- Listed specializations was very helpful. So far ones that sound especially interesting are:
2017-12-18
- Read Hacks4Pancake’s chapter 6 https://tisiphone.net/2016/02/10/starting-an-infosec-career-the-megamix-chapter-6/
- Need to follow up on these blogs for building out a home lab:
- http://www.darkoperator.com/blog/2014/1/10/my-new-home-lab-setup
- https://community.rapid7.com/community/infosec/blog/2011/01/05/how-to-set-up-a-pentesting-lab
- http://www.irongeek.com/i.php?page=security/building-an-infosec-lab-on-the-cheap
- Possible con to attend, the Seattle BSides on Feb 3rd, 2018: http://www.securitybsides.com/w/page/121128486/BsidesSeattle2018
- This chapter also has a good recommended reading list
- Need to follow up on these blogs for building out a home lab:
- Read Chapter 7 of Hacks4Pancake’s blog series https://tisiphone.net/2016/08/26/starting-an-infosec-career-the-megamix-chapter-7/
- Up next: Read “Introduction to DFIR” by Scott Roberts http://sroberts.github.io/2016/01/11/introduction-to-dfir-the-beginning
2017-12-19
- Read “Introduction to DFIR” by Scott J Roberts: https://medium.com/@sroberts/introduction-to-dfir-d35d5de4c180
It certainly helps. Stuff like this will get you a second look even if it is obscure.
http://newlisponrockets.com/rockets-main.lsp