00 Introduction

Welcome to the TryHackMe Practice section of GoHackersCloud Academy.

Cybersecurity cannot be learned only by watching videos, reading documentation, or memorizing commands.

You need to:

• investigate systems
• work with Linux and Windows
• analyze networks
• examine logs
• identify vulnerabilities
• understand attacker behavior
• practice defensive investigation
• troubleshoot problems
• document your findings

TryHackMe provides an excellent environment for developing these practical skills.

However, there is one important principle:

Do not treat TryHackMe as a collection of rooms to complete. Treat it as a cybersecurity practice environment.

The objective of this section is to connect your GoHackersCloud learning with structured hands-on practice.

Why TryHackMe Is Included

Throughout GoHackersCloud Academy, you learn cybersecurity concepts through:

Learn → Understand → Practice → Investigate → Document → Repeat

TryHackMe helps strengthen the Practice and Investigate stages.

For example:

If you study:

Linux Security

you should practice Linux systems.

If you study:

SOC Operations

you should investigate alerts and logs.

If you study:

Web Security

you should examine intentionally vulnerable web applications.

If you study:

Active Directory Security

you should understand Windows domains, authentication, identities, and enterprise environments.

The purpose is not simply to earn badges.

The purpose is to build repeatable cybersecurity skills.

How TryHackMe Fits into GoHackersCloud

Think of your learning environment as three layers.

Layer 1 — Learn

Use your GoHackersCloud courses and Academy documentation to understand the technology.

Examples:

• Networking
• Linux
• Windows
• Cloud
• IAM
• SOC
• SIEM
• Web Security
• Active Directory
• Ethical Hacking

Layer 2 — Practice

Use controlled environments such as TryHackMe to apply those concepts.

You may perform activities such as:

• network enumeration
• log investigation
• vulnerability analysis
• web application testing
• Linux administration
• Windows investigation
• security monitoring
• identity analysis

Layer 3 — Build

Return to GoHackersCloud Labs and Runbooks.

Here you should be able to perform larger exercises with less guidance.

The progression becomes:

Course → Documentation → TryHackMe Practice → GoHackersCloud Lab → Runbook → Project

This is much closer to how professional cybersecurity skills develop.

Recommended Practice Paths

We organize TryHackMe practice according to cybersecurity skills rather than asking you to complete random rooms.

01 Beginner Cybersecurity Path

Recommended for students beginning their cybersecurity journey.

Focus areas:

• networking fundamentals
• Linux fundamentals
• Windows fundamentals
• command line
• basic security concepts
• introductory security tools

02 SOC Analyst Practice

Designed for defensive security practice.

Focus areas:

• SOC operations
• log analysis
• SIEM
• phishing investigation
• endpoint investigation
• network alerts
• incident response

03 Ethical Hacking Practice

Designed for offensive-security fundamentals in authorized labs.

Focus areas:

• reconnaissance
• enumeration
• vulnerability identification
• exploitation concepts
• privilege escalation
• post-exploitation concepts
• reporting

04 Web Security Practice

Focused specifically on web applications.

Topics include:

• HTTP
• authentication
• sessions
• access control
• injection vulnerabilities
• insecure configurations
• OWASP Top 10 concepts

05 Active Directory Practice

Introduces enterprise Windows security.

Practice areas include:

• Windows domains
• Active Directory
• users and groups
• Kerberos
• authentication
• permissions
• security monitoring
• common AD attack concepts

06 Cloud Security Practice

Connect cloud-security learning with practical security scenarios.

Focus areas:

• cloud identities
• permissions
• exposed services
• cloud misconfigurations
• logging
• incident investigation
• cloud attack paths

Practice Method

For every room or challenge, follow the same workflow.

Step 1 — Understand

Before starting, identify what technology you are about to practice.

Ask:

• What system am I working with?
• What security concept is being demonstrated?
• Why would a security professional need this skill?

Step 2 — Attempt

Try solving the tasks yourself.

Avoid immediately searching for walkthroughs.

Getting stuck is part of the learning process.

Step 3 — Research

Use documentation and your Academy notes when necessary.

Develop the habit of researching unfamiliar:

• commands
• protocols
• services
• errors
• vulnerabilities
• security controls

Step 4 — Complete

Finish the exercise while understanding why each step worked.

Never make command memorization your primary objective.

Step 5 — Document

Record important observations.

Example:

Room

Name of room

Technology

Linux / Windows / Web / Network / Cloud

Objective

What was being investigated?

Important Concepts

What did I learn?

Commands or Tools

What tools were useful?

Security Finding

What weakness or security issue existed?

Mitigation

How could an organization prevent or detect it?

This turns a completed exercise into reusable professional knowledge.

Rules of Engagement

All offensive-security activities must remain inside environments where you have explicit authorization.

Use techniques taught here only against:

• TryHackMe environments
• GoHackersCloud Labs
• your own systems
• intentionally vulnerable applications
• environments where you have explicit permission

Never test systems simply because they are reachable from the Internet.

Professional cybersecurity depends on both technical capability and authorization.

Avoid the Badge-Chasing Trap

Completing hundreds of rooms does not automatically make someone job-ready.

A better measurement is:

Can you explain what happened?

Can you reproduce the investigation?

Can you identify the security weakness?

Can you recommend remediation?

Can you document your findings professionally?

Those are the skills employers care about.

Suggested Learning Sequence

If you are new to cybersecurity, follow:

1. 00 Introduction
2. 01 Beginner Cybersecurity Path
3. Choose a specialization
4. Complete specialization practice
5. Complete GoHackersCloud Labs
6. Follow GoHackersCloud Runbooks
7. Complete projects and challenges

Possible specialization routes:

SOC Analyst

Beginner → SOC Practice → SOC Labs → Incident Runbooks

Ethical Hacker

Beginner → Ethical Hacking → Web Security → AD Practice → Pentesting Labs

Cloud Security Engineer

Beginner → Cloud Security Practice → Cloud Security Labs → Cloud Runbooks

Cloud Penetration Tester

Beginner → Ethical Hacking → Web → Active Directory → Cloud Security → Cloud Pentesting Labs

Challenge Tracking

Do not track only the number of completed rooms.

Track skills.

For example:

Skill	Started	Practiced	Confident
Linux	☐	☐	☐
Networking	☐	☐	☐
Windows	☐	☐	☐
SOC Investigation	☐	☐	☐
Web Security	☐	☐	☐
Active Directory	☐	☐	☐
Cloud Security	☐	☐	☐

Your goal is progression from:

I have seen it

to

I have practiced it

to

I can perform it independently.

What’s Next?

➡️ 01 Beginner Cybersecurity Path

We will now build your foundational hands-on practice sequence.

Instead of randomly selecting cybersecurity rooms, we will organize your practice around the core skills every cybersecurity professional should understand:

• networking
• Linux
• Windows
• web technologies
• security fundamentals
• basic defensive security
• basic offensive security

Once these foundations are established, you can move into the specialized SOC Analyst, Ethical Hacking, Web Security, Active Directory, and Cloud Security practice paths.