​Why Good SOC Analysts Know Offense & Defense

[@Cyberspatial]

What does your home lab look like?

[@kernshell5205]

This has been a great, realistic and professional interview that i can finally agree on. Not many talk the way he talks, i consider this a highly-recommended video to send to those who need to know this.

[@liesdamnlies3372]

Definitely a good choice to pull this particular part of the interview out as its own video. Great overview of...well, all the things for how to get into this. Reminds me that I really need to OSINT the crap out of myself some time. ... I'll probably scare myself to the point of a heart attack. XD For note-taking, I'm a huge fan of plaintext. I know it's not for everyone, but Vimwiki lets me give order to and navigate around a ton of markdown documents easily. It's definitely not for everyone though; vim has a learning cliff, not curve. But, with plaintext I can modify it however I want, search however I want, do all sorts of crazy things with tools like pandoc and more. It's liberating.

[@Cyberspatial]

Thanks for your thoughts! Having a quick highlight reel is also more shareable with people than a full-interview too! Definitely recommend OSINT-ing yourself. There's a lot you can learn, and maybe even implement defense measures too!

[@Berkshire-Hathaway]

I use OPNsense and KVM/QEMU. I use it myself and it's AWESOME! I use KVM/QEMU on my ProxMox server and on my Main Gaming PC for virtualizing Windows for playing Genshin Impact. And OPNsense is just aweomse. Network Security at its finest :D

[@brianb3854]

Wonderful questions per usual!

[@Cyberspatial]

Thank you!

[@Cybermonk3y]

Good video @cyberspatial. Thank you for making this one and looking for more offsec and defense tools videos and more good stuff. :)

[@Cyberspatial]

Will keep in mind, thanks for watching!

[@Totototo-nr8dh]

I'm happy to have guys say the same things as me about certification ahah.

[@Cyberspatial]

Awesome to hear :)

[@boushrasmart9068]

Would you film a video about how to start learning pentesting from scratch? And what are the best resources websites, books, apps....?

[@marcellowheeler88]

Start with ejpt. Best entry level cert at the moment.

[@Cyberspatial]

We'll look into it thanks!

[@zenmoto369]

Great interview, really helpful! I've noticed in the other interviews on your channel, including this one, the experts using Google. In the video with Chris M. he even recommended Gmail, doesn't it using Google kinda go against the beliefs of Cyber Security in general. I physically cannot use Google, all the ads, and the links of companies that paid more coming first instead of the better results, after I saw how much information they have collected about me just on a single search, I gave up. A video on this topic would be great, if you think it won't affect the channel, because you know KZbin = Google :D Best Regards

[@emaneezechiel4164]

Wahouu great content! I'm speechless.

[@Cyberspatial]

Thanks!

[@SadafAwan-s5r]

just amazing

[@a.m.653]

Why not OPNsense?

[@arodtube7668]

Great choice as well! I've just found PfSense to be a bit easier to learn at first.

[@Cyberspatial]

Great option too! Documentation and UI wise, pfSense is more mature.

[@Totototo-nr8dh]

Ok great video! :)

[@Cyberspatial]

Thanks!

[@Beowulf-zj6qw]

As a SOC Analysts you u use Facebook? And If we use should delete It?

[@Cyberspatial]

Social media is useful if you're using it to produce/create. Other than that it can introduce a lot of privacy and security concerns. For most people, it's probably wiser to delete. Timesaver and efficiency too!

[@Totototo-nr8dh]

Osquery is working with wazuh.

[@Cyberspatial]

👍

[@Totototo-nr8dh]

If you care about security you are using OPNsense instead of Pfsense.

[@Cyberspatial]

Both are great options. What specific security advantages do you think OPNsense offers?