Learning Path

Learning Path

This journal follows my move from AI automation into cybersecurity, with the goal of becoming a SOC Engineer. Every post is written from my own study notes.

If you’re new here, start with the first post and follow the series in order. Each one builds on the one before it.

Getting Started

Why I started this journal, and where it's going.

  1. Why I'm Starting This Journal (Oct 19, 2026)
  2. Looking Back: My Junior Cybersecurity Analyst Journey So Far (Nov 11, 2026)

Networking

The foundation: how networks work, from cables and switches to subnetting, routing and the core protocols.

  1. What a Network Is Made Of (Oct 20, 2026)
  2. The OSI and TCP/IP Models (Oct 21, 2026)
  3. Cables, Ethernet and How Switches Work (Oct 22, 2026)
  4. Subnetting, Step by Step (Oct 23, 2026)
  5. How Routers Decide Where Packets Go (Oct 24, 2026)
  6. Wireless and Securing a Small Network (Oct 25, 2026)
  7. IPv4 vs IPv6: Why the Internet Needs a New Address System (Oct 26, 2026)
  8. How Devices Find Each Other: ARP, DNS, DHCP, TCP and UDP (Oct 27, 2026)
  9. First Steps with Cisco IOS: Configuring and Securing a Small Network (Oct 28, 2026)

Cloud

Cloud basics through AWS, with a focus on the parts that matter for security.

  1. AWS Cloud Basics, Part 1: How AWS Started, EC2, Lambda and SQS (Oct 29, 2026)
  2. AWS Cloud Basics, Part 2: Security, Networking, Storage and Monitoring (Oct 29, 2026)

Introduction to Cybersecurity

Cisco's Introduction to Cybersecurity: data, privacy, attackers and common attacks.

  1. Cybersecurity Foundations, Part 1: Data, Privacy, the McCumber Cube and Attackers (Oct 30, 2026)
  2. Cybersecurity Foundations, Part 2: Malware, Social Engineering and Common Attacks (Oct 30, 2026)

Endpoint Security

Cisco's Endpoint Security: threats, attacks on networks and applications, network defenses, and securing Windows and Linux.

  1. Endpoint Security, Part 1: Threats, Vulnerabilities and Where Attacks Land (Oct 31, 2026)
  2. Endpoint Security, Part 2: Deception and Social Engineering (Oct 31, 2026)
  3. Endpoint Security, Part 3: Cyber Attacks, Wireless and Mobile Attacks (Nov 1, 2026)
  4. Endpoint Security, Part 4: Application, Email and Browser Attacks (Nov 1, 2026)
  5. Endpoint Security, Part 5: Securing Networks, Threat Actors and the IP Header (Nov 2, 2026)
  6. Endpoint Security, Part 6: How Attackers Abuse IP, ICMP, TCP and UDP (Nov 2, 2026)
  7. Endpoint Security, Part 7: Attacks on ARP, DNS, DHCP, Web and Email (Nov 3, 2026)
  8. Endpoint Security, Part 8: Defending the Network (Nov 3, 2026)
  9. Endpoint Security, Part 9: The Windows Operating System (Nov 4, 2026)
  10. Endpoint Security, Part 10: Linux for the SOC (Nov 4, 2026)
  11. Endpoint Security, Part 11: Defending Systems and Devices (Nov 4, 2026)
  12. Endpoint Security, Part 12: Cybersecurity Principles, Practices and Processes (Nov 4, 2026)

Network Defense

Cisco's Network Defense: defense in depth, access control, ACLs, firewalls, cloud security, cryptography and security monitoring.

  1. Network Defense, Part 1: Assets, Defense in Depth, Hardening and Resilience (Nov 5, 2026)
  2. Network Defense, Part 2: Access Control, AAA and ACLs (Nov 5, 2026)
  3. Network Defense, Part 3: Firewalls and Zone-Based Policy Firewalls (Nov 6, 2026)
  4. Network Defense, Part 4: Cloud Security (Nov 6, 2026)
  5. Network Defense, Part 5: Cryptography, Hashing and Hiding Data (Nov 7, 2026)
  6. Network Defense, Part 6: Security Monitoring Data, Logs and Alerts (Nov 7, 2026)

Cyber Threat Management

Cisco's Cyber Threat Management: governance, frameworks, vulnerability assessment, risk, forensics and incident response.

  1. Cyber Threat Management, Part 1: Governance, Policies, Ethics and Cyber Laws (Nov 8, 2026)
  2. Cyber Threat Management, Part 2: Security Management Frameworks (Nov 8, 2026)
  3. Cyber Threat Management, Part 3: Network Security Testing and Threat Intelligence (Nov 9, 2026)
  4. Cyber Threat Management, Part 4: Endpoint Vulnerability Assessment and CVSS (Nov 9, 2026)
  5. Cyber Threat Management, Part 5: Secure Device Management, Risk and Security Controls (Nov 10, 2026)
  6. Cyber Threat Management, Part 6: Digital Forensics, the Cyber Kill Chain and the Diamond Model (Nov 10, 2026)
  7. Cyber Threat Management, Part 7: Incident Response and Disaster Recovery (Nov 11, 2026)

Projects

Hands-on work: tools, labs and security automation.

  1. From One Security Header to an A: Hardening My Portfolio (Oct 28, 2026)
  2. My Secret Scanner Missed a Real Password, So I Wrote a Rule That Catches It (Oct 28, 2026)