When you use a Linux system, every action you take be it opening a browser, running a command, starting a service is managed by processes. A process is simply a program that is running on the system. For someone learning cybersecurity, being able to view and understand processes is one of the first skills that reveals what is really happening on a machine. Malicious software also runs as a process, so knowing where to look helps you spot problems.

Linux offers both graphical tools(GUI) and command line tools(CLI) for this. If you are using a desktop distribution, you can open the System Monitor or Task Manager. These windows show you active processes, the resources they are using, and their process IDs. You can also switch to the terminal and use commands like top or htop to see a live list of what the system is running. The htop tool in particular is widely used because it is interactive and provides more detail. You may need to install it first using sudo apt install htop, and once installed, typing htop will open a dashboard with CPU, memory, and process information.

Working with processes is not just about watching them. You can also control them. For example, if a program freezes, you can use kill with the process ID to stop it. If you need to make sure a program runs with higher or lower priority, Linux allows you to adjust its scheduling so that it gets more or fewer resources.

Cybersecurity learners should practice monitoring processes because it is one of the easiest ways to detect abnormal behavior. If you see unknown programs consuming resources, that might be a sign of compromise. Many real-world incidents have been discovered simply because an admin noticed unusual processes.

Managing software in Linux is another key skill. Instead of downloading installers like on Windows, most Linux systems use package managers. On Ubuntu or Kali, the apt command lets you install, update, or remove programs. You can also use graphical tools like “Ubuntu Software” which act like an app store. For security professionals, understanding package managers matters because attackers may try to exploit outdated software. Keeping everything patched is one of the strongest defenses you can maintain.

Linux process monitoring and software management form a foundation for more advanced cybersecurity work. By learning to observe what runs on your system, and by controlling what gets installed, you gain both visibility and control — two essential qualities in protecting any environment.

Virtualization is the ability to create isolated, simulated environments that behave like real computers. Without virtualization, you would have to risk your primary device every time you tested a new tool, OS, or security exploit.

This post builds on our cybersecurity foundations by explaining what virtualization is, how it works, the types of virtualization, and why it is critical for cybersecurity learners and professionals.

Virtualization is the process of creating a simulated version of a physical system. This can be a computer, a network, or even a storage device.

Virtual Machine (VM): An emulated computer running inside another computer. Host Machine: The real physical device where virtualization takes place. Guest Machine: The simulated environment (VM) that runs inside the host.

Why it matters: You can run multiple operating systems, like Linux and Windows, on the same hardware — safely and independently.

Types of Virtualization

• Bare-Metal (Hardware) Virtualization Uses a Type 1 Hypervisor (e.g., VMware ESXi, Microsoft Hyper-V). The hypervisor runs directly on hardware, without requiring an underlying OS. Advantages: High performance, direct hardware access, strong isolation. Cybersecurity use case: Enterprise-level labs and secure server environments.

• Hosted Virtualization Uses a Type 2 Hypervisor (e.g., VirtualBox, VMware Workstation). Runs on top of an existing OS (Windows, Linux, macOS). Advantages: Easier to install, beginner-friendly, portable. Cybersecurity use case: Perfect for students and hobbyists building local labs.

Containers vs Virtual Machines Modern virtualization also includes containerization (e.g., Docker, Kubernetes).

VM: Requires a full guest OS.

Container: Runs only the application and dependencies in isolation, sharing the host OS kernel.

Why it matters for security: Containers are lighter and portable but less isolated than full VMs.

Benefits of Virtualization in Cybersecurity Safe Testing: Run malware samples in a VM without risking your host system. Hands-On Labs: Build practice environments with multiple OSs. Resource Efficiency: Run many systems on one physical machine. Snapshot & Rollback: Save the state of a VM before testing, restore if things break. Network Simulation: Test firewalls, VLANs, VPNs, and attacks on isolated networks.

Limitations to Know Security of the host ≠ security of the guests. A vulnerable VM can still affect the host if misconfigured. Some software requires direct hardware access and may not run properly in a VM. Real-time processes (e.g., high-frequency trading systems, industrial controls) may not perform well under virtualization.

Building our First Cybersecurity Lab Step 1: Choose a Hypervisor Beginners: VirtualBox (free) or VMware Workstation Player (free for personal use). Advanced: VMware ESXi or Proxmox for dedicated lab servers.

Step 2: Install Guest Operating Systems Linux (Kali, Ubuntu) → For penetration testing and system administration. Windows 10/11 → To practice Active Directory, PowerShell, and common enterprise environments.

Step 3: Configure Networking Use NAT (to share internet access with the host). Use Host-only networking for isolated lab environments. Add internal networks to simulate multi-tier topologies.

Step 4: Take Snapshots Before installing tools, always take a snapshot.

Why Cybersecurity Learners Must Master Virtualization Penetration Testing: Safely test exploits against isolated targets. Forensics: Analyze malware in a sandboxed VM. Incident Response: Recreate compromised environments for study. DevSecOps: Use containers to deploy and test secure applications.

Virtualization is the foundation of modern cybersecurity labs. Without it, safe experimentation is nearly impossible.

As a beginner in this field, I hope to use this blog to learn as much as I can, practice as much as possible and help anyone interested in learning cybersecurity. The first basics that I have to get out of the way on the first learning day is having a Personal Knowledge Management folder(PKM). Why is this important? A Personal Knowledge Management (PKM) system is a structured approach that will help me to capture, organize, retrieve, and utilize information I interact with throughout this learning process. It can help me gather and store information from various sources, such as articles, websites, peer discussions, feedback, lecture discussions, case studies and personal experiences, in a systematic manner.

Lets focus on the core journey that we are going to use to master the essentials

Cybersecurity is often seen as a mysterious field filled with hackers, advanced tools, and complex exploits. In reality, every expert starts with the same foundation: understanding how computers, networks, and protocols work. Without this base, it’s impossible to master advanced skills like penetration testing, digital forensics, or threat intelligence.

This first guide in our cybersecurity journey explains why cybersecurity matters, who can learn it, where it applies, and how you can start building the skills — step by step.

1. Why Cybersecurity Matters Cybersecurity isn’t only about protecting billion-dollar corporations. It affects everyone connected to the internet. Personal Life: email, online banking, social media, and even IoT devices are attack targets. STEM & Research: Universities and labs need to protect intellectual property and research data from theft. Organizations: From schools to hospitals, cybersecurity ensures business continuity and public safety.

2. Who Can Learn Cybersecurity Beginners: Start with basic digital hygiene (recognizing phishing emails, using strong passwords). Students (STEM): Learn networking, operating systems, and programming basics. Professionals: Developers, administrators, and IT staff can extend their knowledge into security.

3. Where Cybersecurity Is Important Everywhere in this age lol Healthcare: Protects patient records and life-critical systems. Finance: Keeps online transactions secure. Education: Secures student data and research projects. Infrastructure: Power grids, transportation, and communication networks. Everyday Homes: Wi-Fi routers, smart devices, cloud storage.

The Essential Foundations (How to Begin) Before diving into hacking tools, beginners need a technical roadmap. This are the key building blocks that should act like a roadmap: Networking Basics Learn the OSI 7-layer model (Physical → Application). Understand how data moves across a network. Grasp IP addressing, subnetting, and routing. Example: Without knowing TCP/IP, it’s impossible to understand how attackers exploit communication protocols.

Troubleshooting Mindset Learn demographic and chronological questioning (Who? When? Where?). Develop the skill to isolate problems (is it hardware, software, or configuration?). Example: Is a network down because of faulty cabling or misconfigured DNS?

Tools of the Trade VLANs: Segment networks to limit broadcast domains and improve security. Firewalls: Control traffic between trusted and untrusted networks. VPNs: Provide secure remote access to sensitive systems.

Operating Systems Linux: The preferred OS for cybersecurity professionals (command line, scripting, tools like nmap). Windows: Still the most common corporate environment — must learn Active Directory and PowerShell.

Building a Cybersecurity Toolkit Create a Personal Knowledge Management (PKM) system: Store readings, lab results, scripts, and notes. Use it as my “field manual” throughout my career.

Practical First Steps (Hands-On) Set up a virtual lab with VirtualBox or VMware. Install Linux (Ubuntu/Kali) and Windows virtual machines. Practice basic networking: configure IPs, ping devices, capture traffic with Wireshark. Explore simple firewall and VLAN configurations (using Packet Tracer or GNS3). Keep my own cybersecurity manual that grows with each exercise.

That marks the end of the first learning material for this blog.