TryHackMe Notes

Pre-Security

• Introduction to Cyber Security

• Network Fundamentals

  • What is Networking?
  • Intro to LAN
  • OSI Model
  • Packets & Frames
  • Extending your Network

• How the Web Works?

  • DNS in Detail
  • HTTP in Detail
  • How Websites Work
  • Putting it all together

• Computers Fundamentals

  • Inside a Computer System
  • Computer Types
  • Client-Server Basics
  • Virtualisation Basics
  • Cloud Computing Fundamentals

• Operating Systems Basics

  • Operating Systems Introduction
  • Windows Basics
  • Linux CLI Basics
  • Windows CLI Basics
  • Operating System Security

• Software Basics

  • Data Representation
  • Data Encoding
  • Python Simple Demo
  • Javascript Simple Demo
  • Database SQL Basics

• Attacks and Defenses

  • The CIA Triad
  • Cryptography Concepts
  • Become a Hacker
  • Become a Defender

Cybersecurity 101

• Search Skills

• Linux Fundamentals

• Windows Fundamentals

  • Part 1
  • Part 2
  • Part 3
  • Active Directory Basics

• Command Line

  • Windows Command Line
  • Windows Powershell
  • Linux Shells

• Networking

  • Networking Concepts
  • Networking Essentials
  • Networking Core Protocols
  • Networking Secure Protocols
  • TCPdump: The Basics
  • NMAP: The Basics

• Cryptography

  • Cryptography Basics
  • Public Key Cryptography Basics
  • Hashing Basics
  • John the Ripper: The Basics

• Exploitation Basics

  • Moniker Link: CVE-2024-21413
  • Metasploit: Introduction
  • Metasploit: Exploitation
  • Metasploit: Meterpreter

• Web Hacking

  • Web Application Basics
  • Javascript Essentials
  • SQL Fundamentals
  • BurpSuite: The Basics

• Offensive Security Tooling

  • Hydra
  • Gobuster: The Basics
  • Shells Overview
  • SQLMap: The Basics

• Defensive Security

  • Defensive Security Intro
  • SOC Fundamentals
  • Digital Forensics Fundamentals
  • Incident Resonse Fundamentals
  • Logs Fundamentals

• Security Solutions

  • Firewall Fundamentals
  • Vulnerability Scanner Overview

• Defensive Security Tooling

  • CyberChef: The Basics
  • CAPA: The Basics
  • REMnux: Getting Started
  • FlareVM: Arsenal of Tools

• Build your Cybersecurity Career

  • Security Principles
  • Training Impact of Teams

• OWASP Top 10 (2025)

  • OWASP Top 10 2025: IAAA Failures
  • OWASP Top 10 2025: Application Design Flaws
  • OWASP Top 10 2025: Insecure Data Handling

SOC Level 1

• Blue Team Introduction

  • Junior Security Analyst Intro
  • SOC Role in Blue Team
  • Humans as Attack Vectors
  • Systems as Attack Vectors

• SOC Team Internals

  • SOC L1 Alert Triage
  • SOC L1 Alert Reporting
  • SOC Workbooks and Lookups
  • SOC Metrics and Objectives

• Core SOC Solutions

  • Introduction to EDR
  • Introduction to SIEM
  • Splunk: Basics
  • Elastic Stack: The Basics
  • Introduction to SOAR

• Cyber Defence Frameworks

  • Pyramid of Pain
  • Cyber Kill Chain
  • Unified Kill Chain
  • MITRE

• Phishing Analysis

  • Phishing Analysis Fundamentals
  • Phishing Emails in Action
  • Phishing Analysis Tools
  • Phishing Prevention

• Network Traffic Analysis

  • Network Traffic Basics
  • Wireshark: The Basics
  • Wireshark: Packet Operations
  • Wireshark: Traffic Analysis
  • NetworkMiner
  • TShark: The Basics
  • TShark: CLI Wireshark Features

• Network Security Monitoring

  • Network Security Essentials
  • Network Discovery Detection
  • Data Exfiltration Detection
  • Man-in-the-Middle Detection
  • IDS Fundamentals
  • Snort

• Web Security Monitoring

  • Web Security Essentials
  • Detecting Web Attacks
  • Detecting Web Shells
  • Detecting Web DDoS

• Windows Security Monitoring

  • Windows Logging for SOC
  • Windows Threat Detection 1
  • Windows Threat Detection 2
  • Windows Threat Detection 3

• Linux Security Monitoring

  • Linux Logging for SOC
  • Linux Threat Detection 1
  • Linux Threat Detection 2
  • Linux Threat Detection 3

• Malware Concepts for SOC

  • Malware Classification
  • Intro to Malware Analysis
  • Living Off the Land Attacks

• Threat Analysis Tools

  • Intro to Cyber Threat Intel
  • File and Hash Threat Intel
  • IP and Domain Threat Intel

• SIEM Triage for SOC

  • Log Analysis with SIEM
  • Alert Triage with Splunk
  • Alert Triange with Elastic

SOC Level 2 (WIP)

• Log Analysis
• Advanced Splunk
• Advanced ELK
• Detection Engineering
• Threat Hunting
• Threat Emulation
• Incident Response
• Malware Analysis

Advanced Endpoint Investigations (TO BE COMPLETED)

• File System Analysis
• Linux Endpoint Investigation
• Windows Endpoint Investigation
• macOS Forensics
• Mobile Analysis
• Memory Analysis
• Disk Image Analysis

Security Engineer (TO BE COMPLETED)

• Introduction to Security Engineering
• Threats and Risks
• Network and System Security
• Software Security
• Managing Incidents
• OWASP Top 10 (2025)

Other Courses

• YARA
• ZEEK
• Sysmon
• Core Windows Processes
• Autopsy
• Volatility