Computer and Networking Fundamentals - Orion Cyber Knowledge Base

# Phase 1: **Computer and Networking Fundamentals** When starting your cybersecurity journey, understanding computer and network fundamentals is absolutely crucial. These foundational areas form the backbone of the field and provide the necessary groundwork for more advanced topics. Skipping ahead to more complex subjects without a solid understanding of the basics can be detrimental. You may find yourself getting prematurely burnt out, or just straight up being lost in the sauce and giving up all together. Thankfully, there are many enjoyable ways to learn these concepts, other than keeping your face in a book. (if that's not your thing) ## What are the fundamentals? Computer and network fundamentals include knowledge of primarily Windows and Linux operating systems (macOS is seen infrequently in most enterprise environments), network protocols, hardware, and network architecture and security. These topics provide the context needed to comprehend advanced security techniques and strategies. By mastering these fundamentals, you'll gain a more well rounded understanding of the cybersecurity landscape, enabling you to identify vulnerabilities, come up with effective defenses, and tackle threats with confidence. > [!warning] Again, *skipping these crucial steps risks building a weak foundation, hindering your professional growth in the long run.* ### Don't be this person ![[Pasted image 20230625215948.png]] # How can I learn the fundamentals? You don't necessarily need to get the [CompTIA A+](https://www.comptia.org/certifications/a) or [CompTIA Network+](https://www.comptia.org/certifications/network) certifications themselves, but I would *strongly* recommend you have knowledge equivalent to being able to pass the exams. It would certainly benefit you if you have the Network+ certification, but if it's not financially feasible, it's not an absolute requirement for most jobs. With that being said, there are some great training courses that teach this content for free or at least reasonably priced. ## Professor Messer [Professor Messer](https://www.professormesser.com/) is probably the most popular free resource for learning Network+ and A+ material. Go to Google and type in "a+ study material reddit" or "network+ study material reddit" and you'll quickly see that he's a *very* well-known instructor. I personally used his content as one source of learning for both exams and benefitted greatly from it. You can find his YouTube channel [here](https://www.youtube.com/@professormesser) and the most recent version of his [Network+](https://youtube.com/playlist?list=PLG49S3nxzAnlCJiCrOYuRYb6cne864a7G) and two-part A+ [220-1101](https://youtube.com/playlist?list=PLG49S3nxzAnnOmvg5UGVenB_qQgsh01uC) [220-1102](https://www.youtube.com/playlist?list=PLG49S3nxzAnna96gzhJrzkii4hH_mgW4b) course playlists in the preceding links. ## Exam Compass [ExamCompass](https://www.examcompass.com/) is a website that I've used to take practice tests for CompTIA certification exams. They're completely free and offer over 20 tests for Network+ and 19 for A+. Even if you don't plan on taking the exam, I'd still recommend taking practice tests to help solidify the topics in your head. You can find Network+ practice tests [here](https://www.examcompass.com/comptia/network-plus-certification/free-network-plus-practice-tests) and A+ practice tests [here](https://www.examcompass.com/comptia/a-plus-certification/free-a-plus-practice-tests). ## ITPro.tv (now ACI Learning) [ITPro.tv](https://www.itpro.tv/) is the second resource I used when taking Network+. This is some of my favorite online learning because of the instructors that teach the courses. [Wes Bryan](https://www.linkedin.com/in/wesleyabryan/) and [Daniel Lowrie](https://www.linkedin.com/in/daniellowrie/) are subject matter experts and are some of the industries best known "[edu-tainers](https://www.itpro.tv/edutainers/)". They keep the content engaging with plenty of humor and are able to explain complex topics in a clear and concise manner. The personal plan for their subscription is currently [$40](https://www.itpro.tv/plans/personal/) a month. ## TryHackMe [TryHackMe](https://tryhackme.com/) has some great content to learn the fundamentals. ![[Pasted image 20230625233233.png]] They offer a number of learning paths as seen above, but I would specifically recommend doing the [Pre Security](https://tryhackme.com/path/outline/presecurity) pathway, which offers a good intro to the basics of networking, Windows, and Linux as well as Section 1 of the [Cyber Defense](https://tryhackme.com/path/outline/blueteam) learning path: Cyber Defense Introduction. TryHackMe offers some rooms for free, but it would be a great investment to go premium and unlock all their rooms for ~$10/mo. > [!tip] Sign up for premium using my [referral link](https://tryhackme.com/signup?referrer=5f41c08e3b0d33307297e0de) for $5 off your first month ## Hack the Box Academy Hack the Box is one of the most well known cybersecurity training sites in the world. [Hack the Box Academy](https://academy.hackthebox.com/) has a number of modules dedicated to learning the fundamentals. ### [Learning How to Learn](https://academy.hackthebox.com/module/details/9) This module covers various stages of the learning process, such as: - Mindset - Learning Efficiency and learning types - Documentation - Organization - Focus - Attention - Dealing with Frustration The principles covered in this module will benefit you greatly as you embark on, or continue, your infosec journey.^[https://academy.hackthebox.com/module/details/9] ![[Pasted image 20230625234704.png]] ### [Linux Fundamentals](https://academy.hackthebox.com/module/details/18) Linux is an indispensable tool and system in the field of cybersecurity. Many servers run on Linux and offer a wide range of possibilities for offensive security practitioners, network defenders, and systems administrators. This module covers the essentials for starting with the Linux operating system and terminal.^[https://academy.hackthebox.com/module/details/18] The module covers: - Linux structure - Using the shell - Navigating the Linux operating system - Working with files and directories - Linux administration - Service management - Permissions management ![[Pasted image 20230625234738.png]] ### [Introduction to Networking](https://academy.hackthebox.com/module/details/34) This module covers core networking concepts that are fundamental for any IT professional. This module covers the following topics: - The structure and design of the Internet - Which topologies are used - What for and what role the proxies play in the networks - Internet communication models and concepts - The difference between the OSI model and TCP/IP - How IPv4/IPv6 addressing is done in various networks ![[Pasted image 20230625234801.png]] ### [Windows Fundamentals](https://academy.hackthebox.com/module/details/49) Windows is heavily used across corporate environments of all sizes. This module covers: - Windows Operating system structure - The Windows file system - Permissions management - Windows services - Processes in Windows - Windows Task Manager - Interacting with the operating system - Windows security - The Microsoft Management Console (MMC) - Windows Subsystem for Linux (WSL) ![[Pasted image 20230625234823.png]] ### [Introduction to Active Directory](https://academy.hackthebox.com/module/details/74) Understanding Active Directory (AD) functionality, schema, and protocols used to ensure authentication, authorization, and accounting within a domain is key to ensuring the proper operation and security of our domains. This module will cover many different terms, objects, protocols, and security implementations about Active Directory, focusing on the core concepts needed to move into later modules focused on enumerating and attacking AD environments.^[https://academy.hackthebox.com/module/details/74] This module covers: - Examine the history of Active Directory - Define commonly used terms - Examine AD objects and structures - Discuss the authentication protocols used - Gain an understanding of the difference between rights and privileges - Practice executing common AD management tasks ![[Pasted image 20230625234903.png]] ### [Introduction to Windows Command Line](https://academy.hackthebox.com/module/details/167) This module introduces you to the Windows Command Prompt and PowerShell in general for both offensive and defensive security practitioners.^[https://academy.hackthebox.com/module/details/167] This module covers: - The History of the Windows command line and PowerShell - Using CMD.exe basics - CMD for sysadmins and hackers - PowerShell basics - Navigating the Windows file structure from the command line - Utilizing and creating modules with PowerShell - PowerShell for sysadmins and hackers ![[Pasted image 20230625235009.png]] ## LetsDefend [LetsDefend](https://letsdefend.io/) also offers some great content when learning the fundamentals. ### [Network Fundamentals](https://app.letsdefend.io/training/lessons/network-fundamentals) ![[Pasted image 20230625235526.png]] ### [Windows Fundamentals](https://app.letsdefend.io/training/lessons/windows-fundamentals) ![[Pasted image 20230625235610.png]] ### [Linux for Blue Team](https://app.letsdefend.io/training/lessons/linux-for-blue-team) ![[Pasted image 20230625235452.png]] ## OverTheWire Linux is best learned when you are getting hands on the keyboard experience. When I first started learning Linux I found the [OverTheWire Bandit](https://overthewire.org/wargames/bandit/) track to be *incredibly* helpful with learning the basics. You'll learn how to SSH into a machine and how to use basic commands such as *ls*, *cd*, *cat* and *find*. I'd *highly* recommend using [OverTheWire](https://overthewire.org/wargames/) when learning the basics of Linux. ## TCM Security [TCM Security](https://tcm-sec.com/) is a leader in practical, hands-on, affordable cybersecurity training and education. TCM's CEO Heath Adams – aka [The Cyber Mentor](https://linktr.ee/thecybermentor) – is an expert in the field and strives to break down traditional barriers entry level folks see, such as high cost of entry and '[[gatekeeping]]'. See more about his opinion on gatekeeping [here](https://youtu.be/bbfj6qzyXDo). ### [Linux 101](https://academy.tcm-sec.com/p/linux-101) [Linux 101](https://academy.tcm-sec.com/p/linux-101) provides you with everything you need to know to start using Linux. This course was designed for those having no experience using Linux, but wanting to learn how to use it. The course is packed with all the content usually taught in an introductory university course, but without all the filler content of a university course. It contains essential, practical information gained from over 20 years of experience using Linux and Unix systems for daily work.^[https://academy.tcm-sec.com/p/linux-101] ![[Pasted image 20230626113333.png]] Learning the fundamentals using these resources makes learning a little more enjoyable than burying your face in a book. > [!hint] In addition to watching videos, reading books and taking practice tests, you should also incorporate a home lab environment to better understand *how* technologies work. ## A few starter project ideas to get hands on experience in a home lab while learning the fundamentals: ### **For A+** - Build and configure a computer from scratch - Set up a Windows or Linux virtual machine to practice virtualization using software like [VirtualBox](https://www.virtualbox.org/wiki/Downloads) or [VMware](https://www.vmware.com/products/workstation-player.html) - Create a networked storage solution using a NAS, or by using open source NAS software like [TrueNAS Core](https://www.truenas.com/truenas-core/) or [TrueNAS Scale](https://www.truenas.com/truenas-scale/) ### **For Network+** - Set up a small network with multiple devices, including a router, switch, and access point(s) - Implement network security measures such as a firewall or a [tailscale](https://tailscale.com/) VPN - Configure VLANs to segment network traffic on your firewall - Set up a self-hosted [Guacamole](https://guacamole.apache.org/) server to access your devices remotely - Set up and configure a DNS server These are some of the many projects you could do that provide hands-on experience and reinforce concepts learned during your studies. They allow you to apply your knowledge in practical scenarios, boosting your understanding and confidence in both hardware and networking. These serve as excellent talking points during interviews. Black Hills Information Security has an excellent [video](https://www.youtube.com/watch?v=9QoPmtpn-gs) about the basics of homelabbing.