Enu Diena 2024: Dev[Sec]Ops Edition

Github repo: https://github.com/jamezwhocares/enudiena2024

Agenda

Short intro (mine/yours)

My experience

...

Explanations of roles

• IT Support, IT Admin/Network, PMs, Devs, QAs, DevOps, DevSecOps, Site reliability engineering (SRE)

DevOps work flow

• The goal is to deliver an application

• DevOps toolchain: Plan, Create, Verify, Package, Release, Configure, Monitor, and Version Control

DevOps tech stack

• Continuous integration (CI) / Continuous delivery (CD): Jenkins, GitLab, Azure DevOps

• Infrastructure as a Code (IaaC): Terraform, Chef, Ansible, Saltstack, Puppet

• Version controls: Git, SVN

• Public Clouds: Azure, AWS, GCP

My current duties

...

Farewell words and recommendations

• Focus on education, in long run term get at leat Bachelor degree

  • But always do hands-on / practices (hobby project, hands-on/lab sites (see below))
  • Assess possibility to take remote Bachelor program (e.g., this from Coursera/University of London), but make sure you can team up with someone, or check SANS Technology Institute

• Learn English: 1. Read, 2.Listen, 3. Speak (incl. presentations), 4. Write (ChatGPT to the rescue)

• Learn how to search for information ("Google")

  • Consider some OSINT videos/courses: Open-Source Intelligence (OSINT) in 5 Hours by The Cyber Mentor or OSINT Introduction: What is Open Source Intelligence? by OSINT Dojo

• Watch some (video) tutorials on fundamental subjects and try to understand and replicate each step:

  • Install Linux inside Virtual Box and configure web server with simplest "Hello World" index.html page

  • Configure PHP support for web serve and create "index.php" that will print "Hello World"

  • Create more Linux VMs and configure network between them

  • Create repository in Github, checkout it in your Linux VM (+ created changes, push them to Github...)

• Find a mentor / someone who inspires you to learn

  • Find a friend, agree on and define some (feasible) goals:

• Being a pupil/student gives a lot of discounts on many resources/platforms/certification: use it!

Certification

0. Local IT-related courses:

   0. HelloIT

1. Foundation:

   1.1. CompTIA IT Fundamentals (ITF+)

   1.2. CompTIA A+

2. Network:

   2.1. CompTIA Network+, or

   2.2. Cisco Certified Network Associate (CCNA)

3. Security:

   3.1. CompTIA Security+

Useful resources

• SANS Education

• CS50 from Harvard University YouTube

  • CS50/2023: full Computer Science course YouTube or this YouTube playlist

• freeCodeCamp YouTube

• LeetCode Beginners Guide

• CodingGame

• Udemy

• Coursera

• SANS Cyber Range

• OverTheWire: Bandit

• CTFtime

• ... Or just search yourself for beginner devops ctf writeup or beginner devops lab

NB: When just starting with CTFs, make sure to attempt event after it is officially finished and write-ups (solutions) are available; Before sneaking into solution, try to solve it your self for ~30 minutes (don't allow it to become boring).