01 Beginner Cybersecurity Path

Welcome to the Beginner Cybersecurity Path.

This is the starting point for your hands-on cybersecurity practice.

Before specializing in SOC operations, ethical hacking, web security, Active Directory, or cloud security, you need to become comfortable working with the technologies that cybersecurity professionals interact with every day.

The objective is not to complete as many TryHackMe rooms as possible.

Your objective is to build a strong technical foundation.

Learn the technology first. Security becomes much easier when you understand what you are protecting or assessing.

Path Objective

By completing this practice path, you should develop foundational skills across:

• computer networking
• TCP/IP
• Linux
• Windows
• command-line environments
• web technologies
• cybersecurity fundamentals
• defensive security
• offensive security concepts
• security tools
• basic investigation
• cybersecurity documentation

This path prepares you for the specialized practice paths that follow.

Recommended Learning Journey

Follow this sequence:

Cybersecurity Fundamentals
        ↓
Networking Fundamentals
        ↓
Linux Fundamentals
        ↓
Windows Fundamentals
        ↓
Web Fundamentals
        ↓
Security Tools
        ↓
Defensive Security
        ↓
Offensive Security Fundamentals
        ↓
Beginner Challenges
        ↓
Choose Your Specialization

Do not rush through these stages.

Each stage provides knowledge required later.

Stage 01 — Cybersecurity Fundamentals

Start by understanding what cybersecurity actually protects.

You should understand the relationship between:

Assets → Threats → Vulnerabilities → Risk → Controls

Topics to Practice

Focus on:

• cybersecurity fundamentals

• confidentiality, integrity and availability

• threats

• vulnerabilities

• security controls

• authentication

• authorization

• encryption basics

• malware

• phishing

• social engineering

• security monitoring

• incident response

• penetration testing

You Should Be Able to Explain

Before moving forward, answer:

What is a vulnerability?

A weakness that could potentially be exploited.

What is a threat?

Something capable of causing harm to a system or organization.

What is risk?

The potential impact associated with threats exploiting vulnerabilities.

What is a security control?

A safeguard designed to reduce security risk.

These concepts will appear throughout your cybersecurity career.

Stage 02 — Networking Fundamentals

Networking is one of the most important foundations in cybersecurity.

Attackers, defenders, SOC analysts, penetration testers and cloud security engineers all need networking knowledge.

Topics to Practice

Focus on:

• IP addresses

• MAC addresses

• TCP

• UDP

• ports

• protocols

• DNS

• DHCP

• HTTP

• HTTPS

• SSH

• network routing

• firewalls

• packets

• client-server communication

Understand Common Ports

You should gradually become familiar with common services.

Port	Protocol/Service
22	SSH
25	SMTP
53	DNS
80	HTTP
110	POP3
143	IMAP
443	HTTPS
445	SMB
3389	RDP

Do not memorize the entire port range.

Learn the services you encounter frequently.

Practice Goal

You should understand what happens when:

User
 ↓
Browser
 ↓
DNS
 ↓
IP Address
 ↓
TCP Connection
 ↓
Web Server
 ↓
HTTP/HTTPS Response

This understanding becomes extremely important when investigating attacks.

Stage 03 — Linux Fundamentals

Linux is everywhere in cybersecurity.

You will encounter Linux in:

• servers

• cloud environments

• containers

• security appliances

• penetration-testing environments

• DevOps platforms

• Kubernetes

• cybersecurity tools

Skills to Practice

Become comfortable with:

pwd
ls
cd
mkdir
cp
mv
rm
cat
less
head
tail
grep
find
whoami
id
ps

You should also understand:

• files and directories

• users

• groups

• permissions

• processes

• services

• logs

• environment variables

• package management

• basic shell usage

Permissions

Understand permissions such as:

r = Read
w = Write
x = Execute

And how they apply to:

User
Group
Others

Practice Goal

By the end of this stage, you should be comfortable navigating a Linux system without depending entirely on a graphical interface.

Stage 04 — Windows Fundamentals

Enterprise environments rely heavily on Windows.

SOC analysts, incident responders and penetration testers frequently investigate Windows systems.

Topics to Practice

Learn:

• Windows filesystem

• users

• groups

• services

• processes

• permissions

• Task Manager

• Event Viewer

• Windows Registry

• command prompt

• PowerShell fundamentals

• Windows Defender

• Windows Firewall

Important Security Concepts

Understand the purpose of:

Users
Groups
Local Administrator
Services
Processes
Registry
Event Logs
Security Policies

Later, these concepts become essential when studying Active Directory.

Stage 05 — Web Fundamentals

A large percentage of modern applications are web-based.

Understanding how web applications work is therefore essential.

Topics to Practice

Learn:

• HTTP

• HTTPS

• URLs

• domains

• DNS

• requests

• responses

• headers

• cookies

• sessions

• authentication

• APIs

• HTML

• JavaScript fundamentals

• databases

Understand the Request Flow

Browser
   ↓
HTTP Request
   ↓
Web Server
   ↓
Application
   ↓
Database
   ↓
HTTP Response
   ↓
Browser

Security vulnerabilities can appear at almost every layer.

Stage 06 — Security Tools Fundamentals

Now begin becoming familiar with common cybersecurity tools.

The objective is not to memorize commands.

Understand what problem each tool solves.

Network Analysis

Become familiar with tools used for:

• connectivity testing

• DNS investigation

• packet analysis

• service identification

• network troubleshooting

Examples may include:

ping
traceroute
nslookup
dig
Wireshark

Security Assessment

Inside authorized lab environments, become familiar with tools used for:

• host discovery

• service identification

• vulnerability investigation

• web analysis

The important question is always:

Why am I using this tool?

Do not become dependent on automated tools without understanding the underlying technology.

Stage 07 — Defensive Security Fundamentals

Cybersecurity is not only about finding vulnerabilities.

You also need to understand how organizations detect attacks.

Topics to Practice

Explore:

• SOC operations

• security monitoring

• log analysis

• alerts

• SIEM concepts

• endpoint security

• network monitoring

• incident response

• threat intelligence

Think Like an Analyst

When examining an event, ask:

What happened?

Who performed the activity?

Which system was involved?

When did it happen?

Was the activity expected?

What evidence exists?

What should happen next?

This mindset prepares you for the SOC Analyst Practice Path.

Stage 08 — Offensive Security Fundamentals

Next, understand the basic methodology used during authorized security assessments.

Practice only in environments specifically designed or authorized for security testing.

Learn the Methodology

A simplified workflow is:

Scope
 ↓
Reconnaissance
 ↓
Enumeration
 ↓
Vulnerability Analysis
 ↓
Controlled Validation
 ↓
Evidence Collection
 ↓
Remediation
 ↓
Reporting

At this stage, concentrate on understanding the methodology rather than trying to master exploitation.

Key Principle

A cybersecurity professional should always understand:

Scope

What systems may be tested?

Authorization

Who has approved the testing?

Impact

Could testing affect availability or data?

Evidence

How will findings be documented?

Remediation

How should the weakness be corrected?

Stage 09 — Beginner Challenges

After completing the fundamentals, begin solving small challenges without step-by-step guidance.

Challenges might combine:

• Linux

• networking

• Windows

• web technologies

• logs

• security concepts

The goal is to test whether you can connect multiple skills.

How to Practice Each TryHackMe Room

Use the same workflow for every practice activity.

1. Read

Understand the scenario before starting.

2. Identify the Technology

Ask yourself:

Linux?
Windows?
Network?
Web?
Identity?
Cloud?
Logs?

3. Identify the Objective

Determine what skill the exercise is teaching.

4. Attempt Independently

Try solving the problem before looking for walkthroughs.

5. Research

When stuck, research the concept rather than immediately searching for the answer.

6. Complete

Finish the activity while understanding why the solution works.

7. Document

Write down what you learned.

Beginner Practice Notes

For each meaningful room, create a small practice record.

Use this template:

Room:

Category:

Difficulty:

Technology:

Objective:

What I Learned:

Important Commands/Tools:

Security Concepts:

Mistakes I Made:

How Would a Defender Detect This?

How Would the Organization Mitigate It?

Completed:

This is much more valuable than simply recording:

Room completed.

Beginner Skills Checklist

Before leaving the Beginner Cybersecurity Path, evaluate yourself.

Networking

• I understand IP addresses

• I understand TCP and UDP

• I understand ports

• I understand DNS

• I understand HTTP/HTTPS

• I understand basic network traffic

Linux

• I can navigate Linux

• I can work with files

• I understand users and groups

• I understand permissions

• I can inspect processes

• I can locate basic logs

Windows

• I understand Windows users

• I understand groups

• I understand processes

• I understand services

• I know the purpose of Event Viewer

• I understand basic PowerShell usage

Web

• I understand HTTP requests

• I understand HTTP responses

• I understand headers

• I understand cookies

• I understand sessions

• I understand basic authentication

Security

• I understand threats

• I understand vulnerabilities

• I understand risk

• I understand security controls

• I understand basic SOC operations

• I understand basic ethical hacking methodology

When Are You Ready to Move Forward?

Do not wait until you know everything.

You are ready when you can comfortably explain the fundamentals and perform basic tasks without following every instruction word-for-word.

Your goal should move from:

I watched it.
       ↓
I followed it.
       ↓
I understand it.
       ↓
I can do it.
       ↓
I can explain it.

That final stage is where real skill begins developing.

Choose Your Next Practice Path

After completing the Beginner Cybersecurity Path, you do not necessarily need to complete every specialization immediately.

Choose according to your career direction.

SOC / Blue Team

➡️ 02 SOC Analyst Practice

Continue into:

• security monitoring

• SIEM

• log analysis

• alert investigation

• endpoint investigation

• incident response

Ethical Hacking / Penetration Testing

➡️ 03 Ethical Hacking Practice

Continue into:

• reconnaissance

• enumeration

• vulnerability assessment

• controlled exploitation

• privilege escalation

• reporting

Application Security / Web Pentesting

➡️ 04 Web Security Practice

Continue into:

• HTTP analysis

• authentication security

• access control

• OWASP vulnerabilities

• web application testing

Active Directory Security

➡️ 05 Active Directory Practice

Continue into:

• Windows domains

• Active Directory

• Kerberos

• enterprise identity

• authentication

• AD security

Cloud Security

➡️ 06 Cloud Security Practice

Continue into:

• cloud IAM

• cloud networking

• misconfigurations

• logging

• monitoring

• cloud attack paths

• incident investigation

What’s Next?

➡️ 02 SOC Analyst Practice

Next, we will build a structured TryHackMe practice path for students targeting SOC Analyst, Security Analyst, Blue Team and Incident Response roles.

The focus changes from general cybersecurity fundamentals to investigating real security activity:

Alert → Evidence → Investigation → Decision → Escalation → Response → Documentation

The objective will not be simply completing SOC rooms.

You will begin learning to work and think like a SOC analyst.

This keeps `01 Beginner Cybersecurity Path` broad enough for **everyone** before the student branches into the role-specific practice sections shown in your Academy navigation.