Cybersecurity For Beginners LIVE Q&A

[Music] do do [Music] testing testing testing testing all right the bars are looking good let's do this guys no more waiting hey guys it's dc here and uh today we're doing another awesome q a session we're going to be going over all of the questions that you guys have for me in the chat um i pinned some merch it's extremely extremely hot here at the moment so i hope you're you're happy that i'm actually repping merch for the first time ever um this is the the dc cybersec logo t-shirt hoodie thing so um yeah if you're feeling cold probably for no one who is in australia this is the hoodie to get this is the one that you should be getting and yeah apart from that um things to mention uh if you have any questions drop them in the live stream chat and the uh the mods who are watching this will um will take this and then they'll put it up here on the screen so it'll it'll get answered you can see there's uh there's one question up here almo already and um yeah that's uh that's basically it so i'm gonna kick off this live stream uh with an answer i'm gonna start with an answer for a question that hasn't been asked but it probably has been asked on this channel before and that is is it easier to become a pen tester or a cyber security analyst now for those of you who are in say the us uh the uk or australia um and even india i'm sure there's a few people from india in the in the live stream at the moment um this question does come up a fair bit and it's a question that sort of relates to uh what sort of i guess if you want to get a job straight away now the last time i did one of these live streams um two weeks ago was um was about different entry level positions that you can get started with and how much experience is required and you might have noticed that across the board across different countries the uh the highest uh entry level position with the lowest amount of experience was in the blue team side it was uh there was governance risk and compliance and the security uh analyst or engineer positions so based on that information i would pretty much definitely be saying that i would i would say it's easier and i've seen this happen more often than not that it is easier to get into cyber security if you are entering into the blue team site now blue team is is such a great entry uh into cyber security because you do learn some actual like pen testing stuff as well it's not all about you know jumping in and breaking into systems and and all the rest of it that's that's just pen testing itself and that's that's just one small piece of cyber security the biggest part of cyber security is actually on the defensive side and it's because those guys on the defensive side are always on the back step trying to defend different systems with say for example there's like a developer who has created a new system and uh he's he's decided to make it go production right and this does happen this isn't just like a a random like oh you know that that would never happen it it absolutely happens trust me and um that system is potentially very vulnerable now the blue team guys are going to see the alerts popping up for that machine and the open ports and you know whatever else is vulnerable on that machine and they'll see those logs coming through on the scene now the seam is is going to you know throw out alerts and potentially do some patching for that machine automatically which is great there is still quite a lot of work required on the blue team side which is why there are more blue team roles out there and blue team also covers a a bunch of other areas which sometimes even include some purple team type stuff where you're doing your pen testing or a security internal security audit of a system so that's um that's basically how those uh those blue team roles come about and why there's more of them out there and why i believe that getting into a defensive security or blue team or cyber analyst engineer position is oftentimes a better entry in the beginning than say jumping straight into pen testing now on the back of that i will do a very short bit of promo here which is that um on the safer internet project um which is the saferinternetproject.com if some of the mods could just paste that into the chat the safe internet project is a learning platform for members to learn various different pen testing as well as blue team techniques now we go out to real business clients and we ask them uh if we can pen test their system and what we do is myself or the other director of that company perform those pen tests and you guys get to shadow us while we do them there's learning modules to teach you exactly how to do stuff and then after a period of time once you've completed the verification process you get to do some of those pen tests uh yourself which is awesome that's um that's sort of exactly what you want now not only is there pen tests i've recently in the last week and um while i was sick and and sort of feeling sorry for myself i am i decided to bring in some blue team modules into this which is something that i believe has never actually been done so what i've done is i've created a virtual security operation center or a vsoc um with a full seam and i'm adding in hosts into that scene to be able to create learning modules based off blue team techniques so not only do you get access to learn how to pen test and pen test actual business systems you also get to do the whole blue team security analyst stuff so if you're looking for experience in blue team or red team head on over to the safer internet project dot com check out the website i have a look around ask me any questions you like on the website chat there's a chat thing there that goes straight to my phone um so do ask any questions you you feel that you want to ask and i'll um i'll answer them as best i can that's enough of the the self promo let's get into some of these questions there's quite a few questions coming in which is awesome that's what i like to see um i can see one on the screen but it seems to have been cut off slightly so i'll just see what it is um the question is from no name apparently and uh he's or she said he or she says i've got one to two years left of my degree in computer science and i want to go into the defensive route what certification should i aim for straight out of uni it's a good question and um it's uh it's sort of related to the the answer i just gave you i'm happy that you're looking for defensive you know blue team roles and that's that's really cool if you're just looking for certifications and i i should stress here at the start that if you are looking for um certifications i would probably be looking for uh chasing knowledge over certifications certifications are great and they prove that you have the knowledge and i guess that's that's sort of a way in but if you're if you're just looking to you know bank up heaps of uh certifications that can actually cause problems with um being over certified for those entry-level positions so you're one to two years left on your degree you're looking at some certs let's have a look at i would probably recommend something like the um comp tia cysa plus now the reason i would recommend that is because that certification is targeted directly at people who are in the same boat as you who are looking to get into a cyber uh security analyst position um the certification is good it's industry recognized which is i mean that's that's really what you want right and um yeah i mean i can't think of a better certification to get if you're just trying to enter into cyber security and um i would probably do it later on in your university degree but um you know sort of towards the you've got one to one year to maybe like six months left of your degree just because these certifications do come with an expiry date so trying to um you know get certified is is great but don't shoot yourself in the foot and um lose out potentially on that certification a few years after having it all right oh i also i forgot to mention i did mention it in the chat but i also want to mention it here um if you guys do feel the need to drop a tip um there'll be a little tip thing it'll drop down from here it'll go in the glass and um those tips go directly to the mods who are helping me uh with all these questions and the layouts and stuff so if you want to support the mods drop a tip the money goes straight to them i don't take a single cent of it um and i'm not interested in taking a single cent of it either it's all for the mods because they do such a great job all right next question is uh another no name question from earlier uh which was i am in year 12 standard next year and i will be in bachelors after that what should i do to start my cybersecurity journey um if i was you i would probably start with some ctfs um ctfs are are great uh for you know a basic learning experience and sort of dabbling with uh different cyber security practices there's a couple of great ctf sites out there the one i would recommend to go to first is overthewired.org and checking out that one in the in the bandit series i'll throw it in the the chat here https over thewire.org [Music] have a look at that jump on the war games and then bandit series the reason i recommend this one is because the uh it's all about learning um pen testing with bash and and that's quite useful it's it's not just about pen testing no you do get to learn a whole bunch of really useful uh you know bash commands um i'm sure other people in the chat will um agree with me here that the uh the pen test or the over the y series is absolutely awesome there's heaps of ctfs on this like 30 something levels on most of the ctfs on there and as a learning experience that's really good especially for someone who's coming out of school going into university and just wanting to learn some of the really basic stuff the next ctf website i would recommend is of course try hack me i can't go without a live stream ever without recommending try hack me just jump on the uh free try hack me subscription and have a look at some of the free rooms there's a whole bunch of stuff in there that's really useful to learn like the um the cryptography stuff which is kind of cool i've got my own actual room on there based on cryptography which is kind of fun you get to dehash some hashes and um yeah ctfs on try hackme are really good especially the um the basic ones that are listed in there so absolutely jump on there have a look at those and um see um basically which ones of those uh interest you the most and have a go at them um the third ctf website is a little bit more advanced i feel and that is hack the box now hack the box is great spin around for ages and um there is lots of really useful information that you can learn out of that that will help you to progress further with web app pen testing and various other types of pen testing techniques that website is entirely based on pen testing so keep that in mind if you're not really interested in pen testing then maybe it's not for you but um i mean it's a great site so there's there's absolutely um you know awesome content on there that you can have a look at it and get um involved in um great to see so many people here in the chat there's lots of questions coming in um this is this is also this is what i want keep the questions running i'll just keep answering them um for the next uh you know hour or so i'll see how we go we might extend it a little bit longer this time than just the one hour all right before i answer the next question i'm going to get some water because it's actually really hot and this hoodie is um it's warm it's um it's it's good quality stuff and it looks cool as hell it's got like a big logo on the back and anyway jump on t-spring have a look it's it's absolutely cool it's the coolest hoodie i think i've ever done all right next question it is from uh niloi and they have said uh how can we build a cyber security startup and the future of cyber security um i'll answer the the future of cyber security first because that's an easier question to answer the future of cyber security is looking pretty good at the moment there's plenty of roles coming out they're still quite high paying which is i mean that's what you like right everyone likes to get paid for the hard work that they do so yeah i mean that would absolutely be a uh i i think cyber security is a great place to start still um as far as like automation in cyber security automation is uh making things easier absolutely for sure um is it taking away jobs no not really i don't think so not not yet anyway maybe in you know 15 years or so or maybe i don't know but i i doubt that it's going to be taking away those jobs anytime soon and i'm sure that question will come up in the in the chat soon as well how to build a startup in uh in cyber security i'll answer that question by answering a question that i've often asked myself um when starting various different businesses and that is to basically when when you're starting up a business most of the time what you're doing is you're looking to solve a problem now this is what most startups are are there to achieve they're there to you know solve a problem so if you can find a problem within the industry um that you think can be solved by whatever system program service it is that you can come up with then that's a cyber security startup um and that sort of applies to every startup or every industry ever it's to you're building a system or a process or a service or whatever it is to solve that problem so for example the safer internet project um that business or startup it's still a startup i mean there's it's it's only two people running the whole show um that's um it it came from a problem where people are trying to apply for jobs in cyber security and uh they're not getting past the experience gateway essentially so what we've done is we've created an experience system where you can gain experience and learning material while also being recommended to recruiters directly by me so i go and contact various different recruiters and i say hey there's a there's this individual who's been in the safer internet project he's done these learning modules and he's shown that this person is really adept at this learning technique and this you know technology itself so you know what do you reckon is there any jobs out there that fit this person's profile and i'm basically doing the hard work for you by you know taking your profile and then recommending you to a recruiter who will hopefully land you a job in cyber security so i don't want people to be members forever i want you guys to to win basically so that's that's that's what the whole business is based on anyway long-winded answer to two questions there let's get on to the next one which is from rym underscore 4k and the question is can you give some tips and tricks for applying for a job as a junior network engineer tip number one is get a ccna if you don't have a ccna going into any network engineering roles is essentially impossible the comptia network plus is a good cert for content but as far as uh industry recognized certifications that get you a job as a network engineer i've found personally and i've been a network engineer before um that the uh the cisco certifications hold more weight um so if that's sort of something you're you're thinking of then that's absolutely a um a great pathway to to take into um network engineering um i'm gonna have a look at some of the people in chat here we've got sid welcome sid it's uh it's good to see you in here man it's uh it's always good to see you i love seeing you in here um who else we got oh there's lots of questions we've got neon green gaming what's up amit sharma welcome devon saha good to see you all great to see you all and um let's get on to the next question so we got uh a question here from someone's uh whose name is apparently impossible to spell um the question is is it possible to get a job as a pen tester after completing a bachelor degree on cyber security or do i have to do more certs um the uh it is absolutely possible to get a pen testing job as uh straight after getting a bachelor degree in cyber security however it is very hard so i wouldn't say it's impossible but i would say it is very difficult the reason for that is a lot of the people getting into pen testing have either already been a cyber security analyst um or a network security engineer uh or have a degree and an oscp so if you're looking for a certification i guess that will you know help to get you a job then absolutely the oscp is is top of the list for me anyway it's the one that every time i talk to a recruiter they're like if there's no oscp then there's no job it's as simple as that but you also need to prove that you are the person for the job so i mean that's that's super important to to sort of prove yourself and you can prove yourself by i guess doing certifications but a better way to prove yourself is to uh you know show it on your resume show things like your home lab experience that you've done home labs are super powerful um communication tools when proving yourself on a resume it shows that you're interested in the industry you've got the skills to build this epic system and you know as well as things like some of the ctfs and maybe some bug bounties as well as much as i don't really like bug bounties just based on how much time it takes to complete one um as far as learning experiences go though they're they're pretty good there's a is a good learning experience in um bug bounties um patience is definitely one of them um but yeah absolutely jump on um on all of those things home labs ctfs bug bounties and prove it show that you've done these things on your resume and i i reckon you've got a pretty good chance to to get a job there um the next question is from nishant kumar destiny and uh the question is tips for ejpt um i don't know really what that question means to be completely honest are you just looking for tips to to do the ejpt or um like a study guide for the ejpt um i i reckon a pretty good way to do the ejpt is and i've seen this happen in my own discord server and if you guys are interested in joining there's a link in the description it's it's discord dot gg forward slash dc cybersec there is a study group um chat in there where people are completing the ejpt together they study together and then they go and do the um the you know the the certification themselves obviously and um it's uh yeah that's uh that's basically how it works it's it's a pretty cool little system where you can jump in and talk with other people in there and and learn from them someone's trying to inject some stuff all day on a table but i don't think it works man i've never tried it but good try neon green and uh cheers for the tip that's gone straight to the mods thank you very much um the next question is from feb and matthew and uh they have said hello dc i'm a computer science graduate i recently completed my btech in computer science i'm planning to get started with cyber security what certification should i focus on first um so you're looking to get into cyber security i'm going to take that as uh a blue you're trying to get into the blue team side of cyber security like i said before these comp tia cysa plus is a great certification to get started with to try and help you land that first job in the industry aside from that there is various other things that you can do other than um you know going through and doing certifications you could apply to um various different managed server service providers like msps um there's a couple in australia that i can think of like you know data 3 or infosys or what's what's some of the other ones ntt i think dimension data is now ntt um i'm pretty sure they are yeah so absolutely um yeah have a look at those uh companies and and apply for a job that's a it's a great place to to get going with um neon green thank you again for tipping the mods um i'm sure they've both got five australian dollars now so that's that's epic thank you very much and um i i appreciate that you're you're helping out the mods next question we're gonna get through these questions so if you have any questions absolutely smash them in and i'm just going to keep answering all night uh question from cushy bermari i hope i've said your name right and i'm terribly sorry if i haven't the question is i am a beginner can you tell me what to do before involving into cyber security um fairly similar to the question that was asked um just before uh and the answer is essentially the same if you're looking to get into cyber security you're not too sure what to to do what to get started with have a look at uh tryhackme.com have a look at the ctfs on there have a look at doing um some of the war games on over the wire it's a great place to get started with and maybe have a look at some of the certifications out there that are free one of the certifications that is free that i always recommend is the splunk fundamentals one certification um it's a it's a great certification to get started with it is free which is awesome and um i mean you can't get much more out of cyber security than free certifications right so have a look at um have a look at that certification it's a great place to get started with and it'll teach you an industry used tool splunk is used uh pretty much everywhere it's uh it's in at least every major government uh organization that i've ever worked in it's in most of the larger cyber security msps and um yeah i mean what more could you what more could you ask for than free certification so splunk fundamentals one um i'm sure someone will post a link in the uh in the chat for me uh let's get on to the next question it is um from bev and matthew again and uh the question is when i inquired cyber security in an institute they told me to go for defensive security good i'm glad they did it's a smart move uh what's your suggestion should i go for defensive security like a sock analyst etc or offensive security i've already answered that question accidentally before reading the rest of the question um yeah absolutely go for blue team um blue team has more jobs going at the moment and um i mean what more could you i mean at the end of the day you're studying to get a job right and follow the jobs you can always jump between blue and red team it's not like if you get into doing blue team uh you have to do security analyst work forever it doesn't work like that you can always jump across to doing um you know pen testing later or backwards or you can go to like uh governance risk and compliance if you want maybe you want to be an absolute gun governance or risk officer you can do that it's it's perfectly fine and that's the great thing about it in general is that you can move between different roles it's not like you can even go um all the way to help desk again if you really wanted i mean no one's stopping you um i probably wouldn't but i mean that's up to you yeah you can you can do these things all right next question is from super high ram cool name man that's interesting um question is i've got my comp tia a plus server plus security plus but only six months experience that's okay i'm hesitant on going after a higher tech job would i have a good chance of getting an analyst job thank you for all you do thank you for asking a question and for watching the live stream um don't feel uh i know imposter syndrome is like a massive thing in the industry and everyone feels it i feel it often i was just talking to someone uh last week and they uh they gave me a task to do and it was i was just in and i just couldn't do it i was like oh man this is just it's hard i'm i'm really feeling like i'm just not good enough and um i feel like it i mean if you've you've got the a plus a server plus security plus and six months experience should you apply for high tech jobs absolutely if you're still in that six month of experience job so you're still working in that job at the moment then um yeah by all means you know have a look at uh moving upwards while still working in that job and um it's it's not gonna hurt you by trying um and there's there's a quote by i think it's by michael jordan it is uh you miss every shot you don't take and it's basically you miss all the opportunities that you don't apply for and um it you're only going to miss out on those opportunities by not applying for them you won't know until you've tried and i would absolutely give it a try man absolutely question the next question is from uh four seven one zero psi gotham and the question is how to start hacking by coding um how to start hacking by coding um probably learn python um i mean this is such a broad question that it's really hard to answer but um yeah i mean yeah just have a have a look at python programming um there's a bunch of udemy courses out there's one by a guy called christy vlad he has a youtube channel as well he's an absolute gun at python pen testing have a look at his course i think it's on sale at the moment for like 15 bucks um or 15 for anyone who is not on with the aussie lingo but um yeah have a look at that um at that little short course and uh do some of your own learning as well on various different pen testing techniques that require coding or some sort of scripting and perhaps script your own stuff that's uh that's one way to hack by coding but um that's a it's a really broad question so it's kind of hard to answer um the next question is from amit sharma welcome back to the stream dude i see you in these live streams and in the um in the chat and stuff every now and then which is great and uh yeah welcome welcome back good to see you here uh question is hey dc i have started with a bachelor in honors advanced networking in cyber security intense that sounds cool how should i start in this field um first finish your degree and then evaluate your opportunities towards the end so have a look then if you maybe need to certify yourself a little bit more to get those positions depending on what position you actually want to get um have a look as well at um going into different sorts of um like learning groups because those are quite useful you get to meet a lot of um really smart people who can potentially help you um later on to get a job and to maybe move on and do some other stuff um there's a question that just came in and that that is essentially my question my answer for you um there is a question here from neon green gaming and uh he said where's gazil's uh gazil's is currently running an osint course on uh the saferinternetproject.com um so he he won't be in here as well as all of the people who are um currently members of the um say for internet projects so he's uh he's doing that for the next uh let's have a look half an hour ish um he'll probably go over time because he he always goes over time on those things so yeah that's um that's uh something he's he's doing at the moment um speaking of osim we've actually built a um an osint uh machine using uh spiderfoot as part of the safer internet project uh with learning modules on how to use it and how to perform oceans on a company and or individual so when some companies sign up for a pen test they ask for osynt to see if there is um you know discoverable passwords and stuff like that within um their organization and that's uh that's one way to figure it out so yeah that's uh that's why we have a learning module on it basically it's a it's a useful thing to learn i'll stop promoting the safer internet project i promise it's just it's so easy to go back to because it was literally built off questions that people have asked over the years and you know how to get experience and all that sort of stuff so anyway i digress let's get on to the next question it is by james prescott the question is hey dc do you think a cert war in cyber security course at tafe is a good place to start as a newbie um yeah i do i absolutely do think i um i always promote formal education because i mean as much as people these days seem to be hating on formal education and tafe is still formal education even though it's sort of like a trade school um yeah i mean they teach you all of the basic stuff and tafe tends to be a little bit more hands-on um there's a couple of people i was talking to recently who are doing the uh cert iv and some of the projects that they do is pretty cool like they have to build a virtual machine uh like they split up the the class into two groups and one team has to build a bunch of virtual machines basically like the lab series that i'm making um they build a a vulnerable uh machine and then the other team uh attacks it so these guys actively defend and those guys actively attack it's attack defense lab basically and um yeah that's i i mean that's pretty cool it's a good thing to learn and i'm sure they give you really good learning experience out of that as well so yeah man tafe is uh it's always a good place to start i'm losing i was sick this last week so i'm a little bit croaky so i'm very sorry i'm gonna have to keep drinking water keep the questions coming though and um if you're enjoying this live stream i can't believe i haven't said this yet if you're enjoying this live stream smash that like button it helps the video out and you know blah blah blah anyway next question uh a question is from no name potentially name is actually no name and uh the the question is is graduation mandatory to get into cyber security domain um i mean if you've started you might as well finish your degree or whatever it is but um i mean it's it's you don't have to do a degree to get into cyber security you can prove yourself in other ways to um to get into cyber security and you know like i said before building home labs going through various different ctfs getting to know other people in cyber security like literally going out i know you know everyone seems to be an introvert these days but you know go out meet some people go to a meet up about cyber security and say hey i'm really interested in learning cyber security on or i'm currently learning cyber security and i want to do a bit extra do you do you have maybe some like work experience i can do that sort of stuff really proves that you are willing to do what it takes to get into the industry and i can't stress this enough that networking is so bloody important and i know every youtuber out there is in cybersecure saying network network network and they're saying it for a reason it's super useful it's it's so good to to get out there and meet some people and you know become friends with them and and whatever it is so yeah there is a possibility and uh that that's pretty much how to go about it okay next next question um i'll just uh quickly copy paste um some stuff into the chat here keep the keep the tips going for the mods they're doing a great job they're they're busting their ass here trying to um make a couple of dollars so that they're helping me out i mean it's all about the community here so um next question is from amit sharma again uh the question is does learning dsa and cyber security a good choice um yeah dsa is kind of useful to to get into i would say it's yeah i mean i i would put networking um like actual computer networking higher than dsa um but yeah it's uh it's pretty useful to to get behind and to start learning from um while i'm waiting for the next question to pop up at the top here um if you guys are interested and i don't mean to you know get on the promo train and the hype train and all the rest of it but but big butt if you um if you want to become a member of this channel um i think it's like a dollar like one dollar you get a cool little badge next to your name and it pops up and it says you're a member and it changes your text color and um it looks cool as hell so if that's uh if that's your thing um absolutely if it's not your thing no problem i mean i'm not going to judge you if you remember or not but uh if you do want to become a member and support the channel that's one way to do it next question is from prabhat mishra and the question is i have been working in azure cloud security for two years awesome please suggest what certification shall i go for in azure if you haven't already have a look at the devops azure certifications because it's a massive massive growth area um now if you're if you i think the number is az900 i think that's the first one or the 800. 900 or 800. one of those but it just have a look at uh the microsoft azure certification website and have a look at the um the azure devops ones um now it's just it's a huge huge growth area which means there's both lots of jobs and probably lots of money flowing into those two things so if that's sort of what you're going for then that's um that's absolutely what i would be trying out for to to try and get into to to push yourself to the next level of um cloud security um there is a lot of stuff you can do with um azure cloud security mixed in with devops stuff so it's um it's absolutely a great place to sort of get behind and start learning from all right next question and i'm gonna be powering through these we're on we're on a roll guys we're we're learning we're getting through these questions and we're having a great time um next question is from jerry as as sag a sagba i'm very sorry um i'm in where's the question god i'm in nigeria i just finished my bachelor's in cs this year congratulations well done i'm going to do my master's in canada cool should i work for some time before getting my masters or get my masters and work on the site um hard question i mean the masters is pretty full on but there is usually a prac piece um in the first and second year i i think depending on the university of course um but um yeah i mean if if it was me i would be absolutely trying to get that experience because experiences is such a big piece of um you know jobs in cyber security that absolutely yes i would be trying to do uh some work in cyber security alongside the the master or work in it alongside the master's degree it won't be easy absolutely and um it depends on your your level of um how hard you can sort of go but um but yeah i mean that's that's sort of what i would be be doing if it was me um but um i mean it's entirely up to you and and how much you know workload you can take so that's that's definitely something worth thinking about the next question is uh from feb and matthew again question number three here we go after obtaining c ch certificate what's the next level of certification i need to obtain should i go for pen test plus uh from comptia or oscp or any other certifications like ceh practical ch master um i'm gonna i'm just gonna go ahead and say first forget the c h certifications i know you've already done one which is fine i've done it ch as well and it was you know it was what it was um but if i was comparing the pentest plus to the oscp the oscp wins hands down in employability the reason for that is that it's actually recognizing the industry and i know there's there's other certifications out there like the the pmpt and and whatever from tcm security um which is i mean it's got good reviews i haven't done it so i can't really comment on it but um based off the the people who've done it they seem to think it's pretty good so that might um that might be an option as well but i would say overall as far as pen test certifications go the oscp is the absolute king that is the the certification to get for pen testers it's just the one to do all right beam welcome back beam good to see you man i'm um i hope you enjoyed our little chat the other day uh beam just did a cyber security coaching session with me um a few days ago i can't remember now time seems to have just disappeared from me and maybe it was like last week i think it was last week anyway um yeah i i did a guidance session with him and it was really fun um the question is open wrt or ddwrt openwrt dude every time it's it's more versatile and you can do a lot more with it ddwrt is kind of cool as well and and just these um these like the wrts are essentially um how to build your own wi-fi device um but you can you can add a lot of other stuff in there so that's um that's basically what they are for anyone who's wondering um but yeah google it to get more information because i'm gonna keep powering on with these questions so but it out of those two open wrt that's my answer for you all right next question is from vishnujs question is is advanced computer networking required for beginners in ethical hacking no it's not um it's useful to learn absolutely and um it depends what you sort of what's your definition of uh open computer networking but um in most cases uh advanced so advanced computer networking i'm still stuck on open wrt here it's ingrained in my brain um but yeah advanced uh networking is uh it's pretty important but i wouldn't say it's required for a uh any entry level cyber security positions it would be required if you're going for a network engineer or network security position so yeah all right next question we have in here is from kayla the question is is learning python important the quick answer to that question is yes learning python is pretty important but it's not super necessary but it it will absolutely help you with lots and lots of stuff in cyber security as well as networking i mean a lot of the um the higher end uh cisco switches um you can do a lot of stuff with python in them and um that's um that's pretty damn useful to be honest so if if that's something that potentially interests you and and that you can you know you want to move further with then um you know python and networking is is there available for you but if you just want to write scripts in python to do different sort of automation or um pen testing tasks with then yes it's useful learning for that as well um next question is from uh but i can't pronounce your name very say your last name is bentan um what are your recommendations for a guy with seven years experience hell yeah seven years experience in it who wants to enter cyber security field get technical certs or management certs oh that's a that's a good question i like this um so do you would i mean are you looking to get into management of cyber security because if you are then you would need to have some sort of technical knowledge to back up your um weight in management um but saying that uh you can move up as a manager say for example if you were to uh continue working in it and uh you had a management cert and you you worked up to be a manager of it then it is a much easier step to stay in management and perhaps learn some cyber security techniques later so after doing the management cert you then work as a manager in it then you do a i don't know maybe like a comp tia security plus something really broad like that and then move into um a manager of cyber security or a sock team lead or potentially even a ciso but i mean most csos have more certifications than that there's a caesar that i was talking to just the other day he he went from being a caesar to a security architect and now he's a cto um and um it's not if the that guy is watching this hello but um it might not be the guy that who thinks it is but anyway um he has a lot of certifications and um i'm not saying that you know being super certified is absolutely necessary but it would potentially help you out here um cheers christian pop for for 24.99 uh romanian literal or whatever your currency is called i can't remember um i can't believe you just spent all of your tips in in you're one of the mods all the money you just got is is just been spent and youtube's going to take 30 of that so um anyway uh next question is from uh kayla again and uh the question is what do you think of tafe for cyber security i've already answered this question someone else just asked me this just before um the the answer is yeah i think tafe is is super useful and a great place to get started with in cyber security um if you're looking to to get into subsequent you're not really sure what to do maybe you've just finished school or finishing school soon and um you're you know you're not really sure which way to go then yeah tafe is a good option um and don't feel bad about tafe is like oh it's it's just tafe i did tafe i did two different tafe diplomas i did a um the first one was a um diploma of network engineering um which was pretty much the only it1 back in like 2005. when i did it and the the other one i did was um web design and media um they were both awesome they were super fun hands-on learning experiences and i i probably learned a lot more in that than i did in uh in the university side of things um to be completely honest uh the only thing i didn't like about tafe is that it was kind of like a a school classroom environment um whereas the you know university is its own special uh thing so yeah that's uh that's my opinion of tafe i think it's awesome uh the next question is from uh murray ruiz or mori mori rose i hope i've said your name right i'm very sorry if i haven't uh the question is is there any way to combine software engineering and cyber security yes there is um you can do uh basically like application security so appsec is a growing area you can also do devsecops stuff like i was saying before too the guy was asking the question about um he's doing azure cloud stuff my recommendation to him was to go into um to do the devops certification so you can get into devsecops um that's um it's it's pretty cool and it's it's a massive growth area there's lots of money uh being thrown against it at the moment and it's i mean it's a good place to get into so apsec is is absolutely blowing up at the moment um especially in australia um and the us so if um i mean you can you could easily get a job there if you have the right level of experience and and knowledge to to get you started so yeah the next question what time is it 10 50. we're getting we're keeping go we're not sticking around for one hour we're going to do this a little bit longer tonight because i'm having fun um well you know this is this is the vibe that we like here and i haven't read the chat for a minute let's have a look at what's going on um i see some smiley faces there's some people laughing and sharing and having all sorts of fun this is what it's all about this is what cyber security for me is all about is people coming in here enjoying themselves learning all sorts of fun awesome stuff and i mean that's what it's all about it's it's all about learning and having a great time so um keep the questions coming i'm going to keep answering them um i've got to go to work tomorrow but yeah it's all right if if my boss is watching this what's up um fire me i mean i've asked you a hundred times to find me but you haven't done it yet so whatevs next question rodrigo hello dc there are many tools for web brute forcing like der search go buster dirt bastard etc do you have a favorite one if you do why this one um i mean dirtbuster is pretty cool go buster is also pretty sweet because i've been playing a lot with um go lately i'm not very good at it i'm not good at you know go lane at all i'm not really good at any sort of programming and anyone who has ever done anything technical uh with me before with like programming stuff uh you would know i'm i'm actually not that good at it and i'd be the first person to admit it and um yeah but i mean golang is is pretty sweet and um that's the reason i like it is because it's just i feel like it flows nicely you know when you look at a language and you're like this is like you look at javascript and you're like why like like what why did this happen why is this exist um and and yeah you know java's just its own special piece of but golang is is so well done that it makes you want to do more with it and that's why i like um that's why i like go bust but yeah anyway next question from uh khalil abdullah the question is tips and tricks for finding an internship in europe in pen testing that's a hard question mate um i mean there's a lot of internships out there and they require different levels of experience and um uh i guess concentration as well as um your time to input into the internship so they they all sort of want something different there's no like one answer for this is how you will get an internship um what i have found though more often than not especially recently is that these people who are running internship programs are looking for people who can who really want to do it they really want to um they want to pass they want to you know really show off their skills they want to be great and it's those people with the the right level of passion for the industry who get accepted more often than you know someone who potentially is just like yeah i'm awesome i mean and they'll be like okay well this guy's great but um yeah i just if it was me running an internship program and there's two people who applied one person who said i am the absolute duck's nuts of pen testing take me in i'd be like yeah all right cool and then there's this other guy's like i am i have built these you know i'll use home labs as an example again i've built these home labs as an attack defense uh system and uh i think it's really cool because it shows uh this and and this and this and this you know etc and um that's a that shows to me that that person is passionate and they're willing to show me what they've done and why i should accept them so that's i mean that stands out more for me than someone who's just like yeah i'm the best i mean that's not going to get you anywhere it might but i mean probably less than the person who's actually proving to me that they're awesome so that's my two cents next question is from ian valenzuela and the question is after comptia a cysa plus what certification should we aim for um i probably wouldn't i mean if you're just looking for a blue team job i probably wouldn't get another certification unless you really really had to um aside from maybe like the the free splunk fundamentals one certification and i'll get a link for you um splunk fundamentals one all right i'll paste this in the chat because it's a it's a super useful certification to get and it's it's i mean it's free it's going to help you get into the into the industry it teaches you an industry recognized tool that everyone's well most people are using a lot of seams are built off um so yeah that's that's basically what what i would do that's the only other certification i would do other than the cus a plus if you've already done that one then awesome [Music] oh my sign is starting to play up again all right next question is from jerry as zagbo again the question is master's degree after bachelor's in computer science or gather work experience if you're looking to get a job gather work experience if you're looking to you know be an academic and potentially work at a university after doing like a doctorate or something later on then uh yeah get the masters but a master's degree um in most countries is not required um if you're asking from you know india where things are a lot harder than other places in the world based off the population then um i mean you really need to look at the job posting website uh or websites and have a look at if they're asking for a master's degree or not if they are then i mean maybe the master's degree is a good choice for you i i don't know exactly for sure to be completely honest because india is its own special system and and various countries ask for different uh types of certifications so the way i i learn myself on what certifications are required across different countries is by going to that country's job posting website whatever it is and there's there's some that are shared across like seek and indeed um and jorah i think is another one that that comes up and linkedin and i just have a look at some of the jobs in there and i see you know what sort of level of education is being asked for and um that's where i build my recommendations from so i mean anyone can do that you guys could all just have a look at different job posting websites and see what the job postings are asking for in that and that would help you as well but yeah um let's have a quick look at some stats in here before i answer the next question um we've got 46 concurrent viewers at the moment 150 likes that's awesome if you haven't smashed that like button smash that like button it uh it helps out this video if you're interested in becoming a member of the channel and helping to oh what have i done to my hair and supporting the uh and supporting me and the channel and keeping these things going then um you know become a channel member uh send through a dollar a month youtube will take 30 and then i'll take the other uh you know money from that 70 cents so um yeah jump on that have a look become a member and i'll love you forever or something um all right oh by the way um i'll just i'll quickly post this in here because it's it's kind of fun um just before this live stream started i created uh a dc cyber sec discord uh not discord um i've had discord for ages reddit page um i've just chucked it in the chat um what i'm hoping to do there is to have you guys ask questions and post um you know whatever stuff they want in there if you don't want to jump on discord and um yeah there's um you can you can go in there and and basically ask questions and then i'll answer some of those questions in the live streams next and potentially create videos based off those questions for kayla who is asking um where do you become a youtube member there should be a join button um i think it's down this side down below the video so down here somewhere just below the video there should be a button that says join um otherwise click on my youtube channel and there should be a join button on there somewhere as well all right next question is from where's my question singing going here it is it's from uh gift shizuram the question is hey dc i'm an electronic engineer student but i have an interest in cyber security is engineering in any way relevant to cyber security um it can be if you get into like hardware hacking stuff which is pretty cool stuff i think um then yeah absolutely um as far as like hardware hacking jobs go there are different government agencies that will ask you to build specific pieces of hardware for um various types of observation or investigation which is is pretty cool stuff or to just utilize other hardware that already exists so things like you know rfid frequencies um different wireless frequencies stuff like that there is a possibility to do engineering on the side of that in cyber security saying that it is quite rare to get into those sort of jobs it's pretty uh tricky to get into those jobs so keep that in mind but um but yeah dan lincoln welcome uh to the live stream again i've seen you in here before um the question is how does the cisco cyber op cert compare against the security plus and cysa um which holds more weight in the industry with employers so there's cisco cybrops is probably on par with the cysa plus um the security plus i would put i would i would have them like okay i'll use this sticker so this is the um security plus this is the cisco cyber ops and this this is the cysa so you've got security plus down here cyber ops up here and um and the cysa plus these two hold pretty much the same weight whereas the security plus is like it gives you that general um entry into uh security as a whole experience so i mean you get to learn a whole bunch of other stuff as well as um defensive blue team security stuff but yeah i mean you do get to do some pen testing in there as well which is kind of useful but as far as weight goes the c cisco cyberops and the um the cysa plus are pretty much on par as far as uh recognizability and what you actually learn in those in those courses all right next um next question is from james ibrahim and his question is what is the downside to not doing a cyber degree because my uni is pretty crap and not thinking to go further is like art cert enough to get in the industry what am i losing without a degree without a degree you're you're losing the um you're losing that fairly uh useful piece of paper that says you've done a degree um if you were to do an arts degree i mean that's uh you're already in the course so if it was me i would i would just go through and and finish it and i i know it might like you're thinking oh but this is so like this this cert is this um this degree is like useless i'm not learning anything and that's fine but just learn the stuff that you actually need to know away from the degree so do your own self learning i don't want to keep banging on about say for internet project but maybe consider going into safer internet project and learning some actual cyber security apart from that you know do some self learning that's really going to push you ahead of what your university can teach you and keep that degree certificate at the end to help you get a job it is a super useful piece of paper and if you're already in the degree you're already like going through and doing it um then i mean if it was me i would continue doing it all right more water time oh man all right next question is from uh abhishek sharma again the question is uh where should we get real world experience of pen testing you've opened up the can of worms mate a ctf website is just for learning yep we don't get real thing from them correct seriously i want to do things okay before i start banging on about say for internet project again i will say that you can apply for um internships as far as learning on a real business system as well there is also bug bounties out there the problem with bug bounties is that they um i mean they take a long time there's not much in the way of teaching you how to you know really do something properly so it is tricky and it's a hard learning curve aside from those two options and i'm i'm sorry for going on about this again but the question has been asked the safer internet project so just the the website is safer internetproject.com um i'll put it in the chat and hopefully this is the the last time i dropped this one um all right the safer internet project website has been built to give you real hands-on experience with pen testing and blue team defensive security operations there's a full seam that i'm building in there and um there is also uh actual businesses who sign up for pen tests they don't pay for it i mean it's it's a free service for them because we are teaching you how to do the penta so we hold your hands down the golden road of pen testing and teach you how to do a pen test and and put you through different learning modules so that you know all of the basics of how to hack a wordpress site and how to map out a network and all of that stuff and then you go in there and you pen test that's that service our guidance so the key point here is without guidance don't think of it as as you know you're just going in pen testing sites because that's not what it is there's a lot more to it than that it's a full-on learning experience so if that sort of interests you say for internetproject.com all right next question uh from dinaneshu the question is are certifications importance different in different countries yes different certifications hold different weights in different countries the ones i recommend are usually fairly global as far as uh where they're where they're recognized and if they are actually recognized within the the industry so the ones i always recommend is the ones from comptia usually the um security plus the cysa plus and sometimes the pen test plus depending on you know if you feel like doing it the ejpt is another great certification to get the oscp is a great certification to get and anything from cisco is always good to get so yeah those certifications are usually the the big players in the industry and um they are industry recognized they're on the majority of job applications um or job requirements when you're applying for a job so yeah all right the next question is from someone whose uh name is all in capslock uh his name is medida venkata narayana that's an epic name that sounds cool as hell question is i would like to become a ceso awesome could you please tell me the pathway to become a cso at present i am a masters in cyber security student um there's there's a lot of things you can do to become a cso uh the number one thing is uh is usually experience so if you're looking to become a caesar usually some sort of business management um course is required if it's an mba or or whatever it is then i mean sometimes that's a bit overkill often it's a bit overkill but experiencing both managing it teams as well as working in iit itself are pretty bloody important for a caesar so you know build those building blocks between there yourself because um that's um that's sort of what you you need to do all right next question is from sunita ray and the question is suggest me cyber security engineer or web and network pen tester which is best um i mean what do you mean which is best they're they're both um cyber security engineer or web and network pen tester like what do you mean what's best they're both great jobs um and they're both in a really good industry so it's it's really hard to sort of answer that question say you know this is what you should do and this is what you shouldn't do but um i think if if you were to apply uh as a bluetooth like cyber security analyst or engineer i think that is usually a better starting point i've been saying that sort of all night and pretty much for the last two years um since doing this youtube channel getting started in bluetooth blue team is uh is definitely a better place to start than going into something like straight into pen testing um just because you miss out on all of that infrastructure goodness that is is quite useful all right next question is from kr resende and the question is best state in australia for climbing up the ladder job-wise um man that's a it's a tough question i can tell you which states are really shitty um south australia is not very good for for cyber security jobs um northern territory is also uh pretty terrible uh thanks uh for the the pep message uh mods i appreciate that um but um i mean what's the best state i would put sydney melbourne and uh well i mean they're not states they're cities but uh sydney melbourne and brisbane are pretty high up there perth is is becoming a pretty big player in cyber security so um yeah i mean that's um it depends where you are already and if you're in one of the places i've said that's not so great then maybe maybe think about studying a remote um one so yeah um all right i'm gonna i'm gonna keep going for another 15 minutes so we'll take this to 11 30 pm my time and then i'm gonna have to close it so if you do have questions that i haven't been able to answer jump on that uh the reddit slash r um dc cybersec and drop your questions in there and i'll answer them straight up in the next live stream that i do i'm trying to do these every sunday at the moment so if um if that sort of tickles your fancy and and you want your questions answered in the next stream then by all means um jump on in and ask the question in there if i don't get time to answer it in the next 15 minutes all right we are going to power through some questions now we're in power time all right let's do it next question is from brian oh the question is hey dc i'm really interested in hardware security awesome hardware hacking let's get into it how do i go about getting skills having a hard time finding resources on it yeah it's really hard um have a look at a lot of the rfid scanning stuff out there like i was saying before um rfid hardware hacking is a huge piece in the industry as far as hardware hacking goes also look at like car hacking because car hacking is becoming a bigger and bigger thing with a lot of the uh larger car players out there some of them are actually advertising for jobs as hardware hackers to try and hack uh different cars also in the medical industry there is a lot of iot devices that are usually legacy and usually you know really insecure so getting into hardware hacking on iot devices is also super useful and and can be um can be utilized to get a job in a pretty high paying field or industry as well so they're the best places to sort of start looking at and discovering what those technologies are and then looking how you can get into those roles further down the line next question from general q interesting question do you think pen testing doesn't have any future because everything is becoming automatic no um i don't think that i let me answer that better um yes i think pen testing has a future because automation is only there to make the job easier it can't fully pen test every system out there uh web app pen testing is heavily automated sure um but i mean it it doesn't solve all of the problems that's why these you know bug bounties still exist and why they don't get completed by automations automatically otherwise every company would just have their attack surface being smashed by automations constantly and the world would be a very safe place but that doesn't exist and it i don't think it will exist anytime soon there's also such a a variety of different systems out there to pentest it's not all web apps it's not all networks it's not all servers there's there's plenty of other stuff out there like hardware like i was just talking about for that other guy's question there's car hacking there's iot hacking there's rfid hacking there's wi-fi hacking and all of these check technologies are constantly updating and changing so i mean that's it there's an ever-changing field and automation cannot keep up with solving all of those problems it it's not designed to at the moment yet anyway so yeah next question is from dan lincoln another great question here from another legend what do you prefer red team or blue team and why uh these days i prefer a little bit of both i prefer to be on the the purple side which is somewhere in between and because it basically keeps my life interesting i don't like sitting and doing the same thing over and over again and this is a great thing with cyber security as an industry which is that you can change between different uh cyber security related jobs uh once you sort of get your feet in the door um a lot of like msps as well do a lot of like they'll put you on a security operations team and then they'll ask you to cover for a pen testing team for a month and you can you could like change in between those teams and that is super awesome because then you get to play with everything i mean you get all the tools you get the same you get all your hacking stuff you get all everything there and that's that's super fun and that's you know really exciting to play with so yeah i kind of like being in between somewhere next question is from be without fear and the question is is it possible to be successful alone bug bounty hunting and pen testing oh you mean as like a sole uh contractor or um you know like an individual uh yeah yeah it is possible to be successful alone i ask this because the people that professionals take under their wing are very successful um i don't know what the second part of that means but i mean that's a kind of confusing end to that sentence but yes you can be successful on your own a way to do that is to do subcontracting for different uh msps and businesses similar to like what i'm doing at the moment i go to different businesses and i subcontract myself to those businesses and get various different projects related to cyber security that i i work on myself and have over time expanded some of that work out as overflow to some people who who work for me um it's i mean that's a that's a possibility that's something that actually does work and you can be successful by doing that and sometimes contracting rates uh actually i would say most time contracting rates are you know two or three times higher than the standard rate that someone would get paid and that's because you have to pay your own tax you have to pay your own superannuation or 501k or whatever you want to call it um you don't get paid for sick days and stuff like that so there's there's different benefits for both contracting and working full-time but that's something that you can look at and and decide for yourself that if that's something that you want to do next question is from jerry as well and the question is after completing network plus should i go for ccna first or security plus um seeing as you've already got the network plus i probably wouldn't go for the ccna i'd probably go straight for your security plus and um you know see what what security is out there and what it's all about the network plus is a good certification to get to get you uh sort of started with networking and doubling up on networking certifications is i don't think that's a very good idea i think jumping into cyber security as a next step would be a natural progression for you all right next question is from awaken and the question is hey dc cybersec hello can i take ch as a defender in our organization you can but i don't like the ceh i have some experience in cyber and i'm looking for a better cert after sec plus and splunk fundamentals one and two i'm more interested in defense if that's the case don't bother with the certified ethical hacker because that's a red team certification it's uh it's not a a assert for someone who's looking to get in defense um what i would probably look at doing um is the cysa plus by comptia um and um sort of pushing forward with that one because i i think that's a better cert to sort of push you into a cyber analyst role and it's it's usually one of the ones that's asked alongside some of the nist certifications however those nist certifications are hell expensive they are crazy crazy expensive so if um i mean if you've got a truckload of money and you're looking at doing some of the nist certifications then absolutely some of those are really good but what i would be looking at doing is getting into some of the uh job posting websites out there like linkedin indeed your etc and having a look at what some of the um cyber security analyst job postings are requiring as far as certifications and education and then going down that pathway and doing those exact certifications all right next question is from dee luffy and the question is can i start ethical hacking from the scratch absolutely yes you can from your experience what are the most essential basic hard skills before getting into ethical hacking uh the how do i answer this without um yeah okay first certificate first not certification first bit of knowledge that i would want to pick up is networking so computer networking learn your osi layer that is an absolute essential to understanding any system the next one up is to learn file systems so things like smb um and you know how files uh traverse through networks so you've already got the network inside you've then got the infrastructure file folder um build of a system right the next one after that is to learn python uh programming just some basics you don't have to be an absolute gun at it just be able to read it and write your own basic script and that is the bare basics of uh i guess cyber security and a lot of it as a whole next question is from khalid alam alam ayahu and the question is does knowing javascript or being web developer help to become bug bounty uh yeah so if you want to uh if you already learned javascript you've learnt javascript and you're looking and you have been a web developer then doing bug bounties is a great option for you saying that doing bug bounties is an absolute time killer it will just blitz through your time like nothing else if you've got plenty of time and you're looking to sort of smash through um some learning materials and and also go through and try and find bugs as a job i mean it it works for some people and it maybe it'll work for you i have no idea but i mean bug bounties is a great place to sort of get going with and um if you've already got that experience then yes it will definitely help you out we've got eight minutes left on the clock guys um get those questions in if they're not answered here chuck them in on the reddit page and i'll answer them in the next live stream the next question is from uh volts and the question is how much money does a person with no college degree make rather i go to trade school and get certifications um it doesn't really differ on if you have gone to university or not if you get a job the reason people go to university is because it's easier to get a job in most cases so a lot of like the gateway of getting into um cyber security or it in a lot of places is that you need to have a degree now i'm i'm not saying that you need to go and get a degree you need to look at the jobs that you're interested in going for and see if those jobs do require a degree or some sort of formal education i think my dog just did a backflip behind me that's crazy she maybe she wants some smackers so yeah have a look at those different certifications if you need to get those certifications at all and um that's a sort of a great place to start with if you should uh do a degree or a trade school or tafe or certifications and and just see what is actually required next question is from jay shah the question is do you recommend a master's degree in cyber security for a non-it student if yes then can you recommend universities to pursue it my answer for you there is no i i don't now i'm not going to use the word recommend i'm just going to say that a master's degree is great to have but it is not required so i hope i hope that answers your question because it's it's a tricky kind of question um before we wrap up this live stream by the way as i was saying before all the tips that are given into this live stream are going directly to the mods who are smashing out these questions above me and uh getting this this whole thing going and answering all uh some of the other questions that are coming in in the chat as well um they're also on the discord server they're they're in my discord server discord dot gg forward slash dc cybersec moderating all of the chat in there this is like their chance to make some some money out of this um super you know fun experience of of learning cyber security so if you do feel like you're supporting um the mods of uh the dc cybersec youtube channel chuck emma tip give them give them a little tip give them a little little sprinkle of you know a dollar or two or something like that because i mean i'll appreciate it and they'll definitely appreciate it because they're the ones who are going to get the the money all right next question is from damage and the question is i'm a grade 10 high school student i'm trying to get work experience in the industry oh my god i'm doing part-time online course but had to have had no luck finding any employers any tips to make me stand out are you you're just looking to do work experience um i have a question for you um if you're if you're in my discord server uh hit me up send me a dm and if you're in australia i can easily find you somewhere to do work experience there's there's oodles of places out there now places i would be trying if i was you is uh some managed service providers because those guys are always under the pump and then if they're if there's someone out there willing to do the work essentially for free they'll take you up just for the the school work experience they'll definitely take you up on that alright the next question and possibly one of the last questions here is from cyber security shots the question is what certification have you completed and what certification is on your list now i'm going to send you my linkedin profile because that has all of my certifications um at the moment i'm actually looking at doing one of the the azure devops certifications um for no particular real reason to be completely honest um i just thought it'd be kind of interesting to do and i thought you know and and the place that i'm working um or contracting that said do you want to do a certification we'll pay for it and i thought well i mean i'm not going to pass up that opportunity so um yeah i might as well so yeah um so yeah that's uh if if if you want to have a look at my linkedin profile if you want to add me i've thrown it in the chat um have a look at uh you can have a look at my certifications in there if you want a lot of them have expired but i've just left them on my profile because i mean why not um but yeah that's uh that's basically what i've done next question is from daya sagar and the question is i want in-depth knowledge in vulnerability management like the tools like qualis rapid seven tenable io how to get grip on these tools in a short time usually with those uh different tools there is someone has almost definitely written a github repo on exactly how to use these tools and and how you can use them to um to do everything yourself now that's um that's pretty much the the way to go about um learning any tool is by doing some research online about it and um in most cases someone on github has already written something about this like how to how to do it and and whatnot um cheers uh in valenzuela for the uh 50 whatever currency that is um straight to the mods thank you very much i'm sure they'll appreciate that very much um but yeah that's um that's basically what i would do if i wanted to learn how to use a tool all right um damage um i can see a dm on uh on uh what's it called discord so i can see that you're saying you can't dm me i can see your dm it's on my screen right here so i'll answer you in a second and i'll get you thanks everyone for uh for coming along to this live stream it's been super super fun as always um if you want to grab some of this epic dc subsec merch have a look at this thing i mean this is the coolest damn woody i'm gonna break my bloody thing but look at that if you want to look like a legend and um rep some merch this hoodie is is freaking hot i am absolutely cooking if you want to become a member of this youtube channel uh hit up the join button and uh become a member i'll appreciate it i'll get a little bit of extra money and it'll help me to stop contracting and making more videos just for you guys um if you are interested in in some you know me answering your questions jump on over to reddit.com forward slash r forward slash dc cybersec i'm going to be um having a look at that page and answering those questions that are on there the highest rated questions first on my next live stream so if that's something that you're um interested in then you know jump on over there and ask some questions and i'll go and answer them as soon as i can but thank you everyone for coming along i appreciate all the tips for the mods um i really love that the support for the mods that's a it's a cool system um thanks for coming along thanks for asking questions and thanks for sticking around for the last one and a half hours with me i appreciate it i think you guys are going to absolutely smash it this week and i'll see you all on the next live stream peace out reminded

Channel: DC CyberSec

Views: 2,265

Keywords: cybersec, cybersecurity, cyber, dccybersec, infosec, cyber security, dc cybersec, information security, ctf, a day in the life, cybersecurity for beginners, get started in cyber security, get started in cybersecurity, how to get started, beginner, Q&A

Id: K_nbQaUVsRg

Length: 91min 42sec (5502 seconds)

Published: Sun Nov 07 2021