Essential Tools of the Trade: Top Resources for New Cyber Pros

Starting a journey in cybersecurity can feel overwhelming with so many tools, techniques, and resources to explore. Hands-on practice is essential for developing the skills needed in cybersecurity roles, and having the right resources makes all the difference. Here’s a curated list of must-have open-source tools, simulators, cheat sheets, and videos designed to help you build a solid foundation in cybersecurity.

Cheat Sheets & Quick Reference Guides

Cheat sheets are excellent for quickly looking up commands, terminology, and essential concepts. Here are a few to keep handy:

• ABCs of Cybersecurity – A quick-reference guide that explains essential cybersecurity terms in plain language. Perfect for beginners learning the language of cybersecurity.
• Linux Command Cheat Sheet – Knowing Linux commands is essential, especially for security roles. This guide includes basic to advanced commands frequently used in cybersecurity tasks.
• NIST Cybersecurity Framework – Although it’s a framework, it provides invaluable insights into best practices for security posture and defense strategy.

Videos

Videos are an excellent way to gain foundational concepts and practical advice to build a strong entry into the field of cybersecurity. Here are three essential videos to kickstart your journey:

• CYA by Using CIA...Correctly for a Change - This video by Keith Palmgren provides an easy to understand description of the CIA Triad - a fundamental concept in cybersecurity that helps protect data and maintain systems' trustworthiness. The CIA is essential knowledge for newcomers to cybersecurity.
• From Nothing to Something: Getting Experience When You Have No Experience - Learn how to get get experience in cybersecurity from professional associations, free training resources, and even gamified training to beef up your resume before you ever get your first cybersecurity role.
• Common Security Pitfalls: Don't Worry You're Not Alone - This video by Bryan Simon and Nick Mitropoulos dives into some of the most common security mistakes that many organizations still face, despite advances in security practices. Often, the basics are the most crucial to get right. Concepts in this video include password complexity, backup practices, data loss prevention, and more.

Open-Source Tools

These widely used tools are not only foundational for cybersecurity practice but also help newcomers develop familiarity with essential cybersecurity techniques.

• Wireshark – A network protocol analyzer that lets you capture and inspect network traffic. It's a great way to understand data flows and identify anomalies.
• Metasploit – This penetration testing framework simulates real-world attacks, allowing you to explore the attacker’s perspective while practicing ethical hacking.
• Burp Suite (Community Edition) – Perfect for learning web vulnerability assessment. From testing SQL injection vulnerabilities to cross-site scripting, Burp Suite is a must-have.
• nmap – Known as a powerful network scanning tool, it helps identify open ports, services, and potential weaknesses in network configurations.

Simulators & Virtual Labs

Learning cybersecurity is best achieved through hands-on practice in safe, controlled environments. These platforms allow you to simulate attacks and explore security concepts:

• Holiday Hack Challenge - Play to learn and practice your skills and stand a chance to win exciting prizes for the top entries.
• TryHackMe – Offers interactive learning paths from beginner to advanced. It’s great for guided exercises on various cybersecurity topics.
• Hack The Box – Features real-world simulations that mimic complex cybersecurity challenges. Beginners can start with the lower-tier challenges and progress as they learn.

Jumpstart your cybersecurity career with confidence by taking SEC301 Introduction to Cyber Security and prove your knowledge and skills with GIAC’s Information Security Fundamentals (GISF) certification.

Free Resources

Our New to Cyber Field Manual is filled with even more free resources and tools to help you navigate and advance in the world of cybersecurity.

Download our New to Cyber Career Guide to explore common career paths and gain a deeper understanding of the field to help you chart your own path.

Subscribing to this newsletter is a great first step in your cybersecurity career journey!

Visit the SANS New2Cyber page | Preview SANS Courses | Connect with our Team for Solutions | Join the SANS Community