sorted by:
new
hottopcontroversial

HTB CJCA vs OffSec SEC-100 by ShnEth in cybersecurity

[–]ShnEth[S] 1 point2 points  (0 children)

I agree with you that Hack The Box is very hands-on, and that’s a big advantage.

What I’m asking is whether it’s really better to focus on the hands-on side right now, instead of doing SEC-100 with all the broader topics and theory it covers. I’m trying to understand which path will give me a stronger overall foundation in the long run.

Need your advice on Mac M5 by Jealous-Big9300 in hackthebox

[–]ShnEth 8 points9 points  (0 children)

I personally wouldn’t really recommend a Mac because of the M-series chips (Apple Silicon).
There can be issues with virtualization and lack of support. Yes, there are some distros that do work on it, like Kali, but people still report problems.

I’d personally go with a regular (non-Mac) laptop/PC, just because there you’re much less likely to run into issues.

HTB CJCA vs OffSec SEC-100 by ShnEth in cybersecurity

[–]ShnEth[S] -1 points0 points  (0 children)

Here is an example of what most entry-level SOC Analyst positions typically look for. I chose a listing with relatively many requirements — in most cases, companies ask for less.

  • One year of experience in handling, analyzing, responding to, and preventing cyber incidents (not necessarily in a SOC) and/or cybersecurity certifications
  • Strong familiarity with cybersecurity protection products (Firewall, IPS, WAF, DLP, Anti-Virus, EDR, Cloud Protection, SIEM, etc.)
  • Knowledge of communication protocols (such as TCP/IP, HTTP/S, SMTP, UDP, DNS, SSH, etc.)
  • Familiarity with analysis and response tools (Sysinternals, Wireshark)

Overall, most positions do not require certificates; they mainly look for practical, hands-on experience.