All right, so in the last lecture, we talked about two facts, two facts, right?
So we talked about two to have a series of frequently asked questions.
Now, I want to dig into where you can go to get your sources, you know, because as you go through
the training, you're most likely going to have questions or you're going to want to know where do you
know, how do I go deeper into these discussions?
So, for example, we have an entire section on networking
refreshments.
Right.
And let's say you're kind of rusty on your IP address skills or you need a little bit of a touch up
on something that isn't right or any of the other networking related topics like routers and switches,
things like that.
What I've done with I compiled a sort of an accessory or an additional resource that complements this
course on my guitar page.
So let me do all this stuff.
Now, that's just one example.
The networking refresher might you might want to have maybe you want to go deeper with something else.
Maybe you want to go deeper with laptop.
Right.
And you need additional help with VMware workstation.
Or, you know, with Windows Server 2019, you'll have all of that in this resource section.
So let me just stop talking about it and let me show you what I'm talking about so that you can see
how awesome this is.
Now, one thing to keep in mind is this resource is a sort of a work in progress, meaning I am continually
adding content to it.
But if you go to GitHub, dot com forward, slash vonne and the I as a one had to use leetspeak.
Actually Vonne was taken, so I had to come up with the next best thing.
And the actual name is modern.
Underscore ethical, underscore hacking.
You can go to the GitHub page.
You can see I've got some comments there, but really it's just a resource where you can go a little
bit deeper in each of the sections.
So for example, the foundational material.
Right.
We're going to get into that in future lessons.
Do you want to go deeper and wider attack framework or maybe you don't know what it is?
I typed up this little blurb to help you understand, you know, what it is.
So at a glance, you can say, OK, now I know what my terror attack is.
It's a comprehensive knowledge base of adversary tactics, techniques and procedures based on real world
observations of cybersecurity threats.
And then I go into a little bit more detail.
I tell you how the data is laid out in matrices arranged by attack stages from initial access to actual
objectives and impact tactics are displayed across the top header as attacker goes right.
So I can control click this and the control quickness.
I'm doing my drag this window out and drag it over to the right.
Michael, the other window.
I'm going to do.
It's not quite right.
Here we go.
But zoom out a little bit.
Control minus.
And it might be a little bit hard to see, but I'm going to zoom in as I'm editing this, you might
be easier to see, but across the top you can see here what it says.
The lieutenant says.
Tactics are displayed across the top header attack of goals, so these are the attacker goals, the
attack on us to get initial access, or do they want to escalate their privileges?
Do they want to gain credential access?
Do they want to exfiltrate data?
Those are the tactics.
Techniques are displayed in columns, in detail how attackers achieve these goals.
So let's say the attacker wants to gain access.
How do they do that?
Or they can do a drive by compromise.
They can exploit a public facing web application.
They can fish.
And of course, you can expand this and see what sub techniques are as well.
And then, of course, if you dig a little deeper, for example, if you go in to exploit public facing
Web application, you can get the procedures.
And over here, I tell you, the procedures are the technical finger and keyboard commands for execution.
And sometimes you can actually see that here.
This tactic doesn't have that.
I don't think.
But some of them do so for exploiting a public web application that could be that's kind of brought
right.
And if we go to, like, recon, maybe.
And we go to like act of scanning.
Maybe there's something in here.
They're making me a liar, you make me a liar.
Sometimes it shows you the actual commands that were typed.
I'm having a hard time finding an example of that right now.
But the point of all of this was just to show you.
That this is Wicky or this GitHub page that I built will continue.
We have examples and data that you can use to sort of support your studies.
And I'm building this out as we build this course.
And you'll see very quickly that it's going to be something you're going to want to bookmark.
OK, this is also a really good resources port Swiegers Top 10 WABAC of resources.
And this is almost like a last top 10.
It's that good.
And I think it will get to that.
Anyway, that's all I have in this lecture.
Next one, I'm going to share my story of how I got into ethical hacking all season next year by.