Add content for cyber-security roadmap

src/data/roadmaps/cyber-security/content/100-basic-it-skills/100-computer-hardware-components.md

@@ -1 +1,61 @@
-# Computer hardware components
+# Computer Hardware Components
+
+When it comes to understanding basic IT skills, one cannot overlook the importance of familiarizing yourself with the essential computer hardware components. These are the physical parts that make up a computer system, and understanding their functions will help you troubleshoot issues and maintain your device better. Here's a brief overview of some of the primary computer hardware components:
+
+## Central Processing Unit (CPU)
+
+The CPU serves as the heart and brain of a computer. It performs all the processing inside the computer and is responsible for executing instructions, performing calculations, and managing the flow of data.
+
+**Key Points:**
+- Considered the "brain" of the computer.
+- Performs all the major processes and calculations.
+
+## Motherboard
+
+The motherboard is the main circuit board that connects all components of the computer. It provides a central hub for communication between the CPU, memory, and other hardware components.
+
+**Key Points:**
+- Connects all other hardware components.
+- Allows components to communicate with each other.
+
+## Memory (RAM)
+
+Random Access Memory (RAM) is where data is temporarily stored while the computer is powered on. The data is constantly accessed, written, and rewritten by the CPU. The more RAM a system has, the more tasks it can process simultaneously.
+
+**Key Points:**
+- Temporary storage for data while the computer is on.
+- More RAM allows for better multitasking.
+
+## Storage (Hard Drives)
+
+Storage devices like hard disk drives (HDD) or solid-state drives (SSD) are used to store data permanently on the computer, even when the device is powered off. Operating systems, software, and user files are stored on these drives.
+
+**Key Points:**
+- Permanent storage for data.
+- Comes in HDD and SSD types, with SSDs being faster but more expensive.
+
+## Graphics Processing Unit (GPU)
+
+The GPU is responsible for rendering images, videos, and animations on the computer screen. Its main function is to handle and display graphics, making your visuals smooth and responsive.
+
+**Key Points:**
+- Handles and processes graphics and visuals.
+- Important for gaming, video editing, and graphic design tasks.
+
+## Power Supply Unit (PSU)
+
+The power supply unit provides the necessary power to all components in the computer. It converts the AC power from the wall socket into the DC power that the computer's components require.
+
+**Key Points:**
+- Provides power to all computer components.
+- Converts AC power to DC power.
+
+## Input/Output Devices
+
+Input devices, such as a mouse, keyboard, or scanner, are used to interact with and input data into the computer. Output devices, like the display monitor and speakers, present information and data in a format we can understand.
+
+**Key Points:**
+- Input devices allow users to interact with the computer.
+- Output devices present information to the user.
+
+By understanding these essential computer hardware components, you can enhance your knowledge of how a computer functions and improve your IT troubleshooting and maintenance skills. Happy computing!

src/data/roadmaps/cyber-security/content/100-basic-it-skills/101-connection-types/100-nfc.md

@@ -1 +1,34 @@
-# Nfc
+# NFC
+
+**Near Field Communication**, or **NFC**, is a short-range wireless communication technology that enables devices to interact with each other within a close proximity, typically within a few centimeters. It operates at a frequency of 13.56 MHz and can be used for various applications, such as contactless payment systems, secure access control, and data sharing between devices like smartphones, tablets, and other compatible gadgets.
+
+## How NFC works
+
+When two NFC-enabled devices are brought close to each other, a connection is established, and they can exchange data with each other. This communication is enabled through *NFC Tags* and *NFC Readers*. NFC Tags are small integrated circuits that store and transmit data, while NFC Readers are devices capable of reading the data stored in NFC Tags.
+
+## NFC Modes
+
+NFC operates primarily in three modes:
+- **Reader/Writer Mode**: This mode enables the NFC device to read or write data from or to NFC Tags. For example, you can scan an NFC Tag on a poster to access more information about a product or service.
+- **Peer-to-Peer Mode**: This mode allows two NFC-enabled devices to exchange information directly. Examples include sharing data such as contact information, photos, or connecting devices for multiplayer gaming.
+- **Card Emulation Mode**: This mode allows an NFC device to act like a smart card or access card, enabling contactless payment and secure access control applications.
+
+## Security Concerns
+
+While NFC brings convenience through its numerous applications, it also poses security risks, and it's essential to be aware of these. Some possible concerns include:
+
+- **Eavesdropping**: Attackers can potentially intercept data exchange between NFC devices if they manage to get into the communication range.
+- **Data manipulation**: Attackers might alter or manipulate the data exchanged between the devices.
+- **Unauthorized access**: An attacker can potentially exploit a vulnerability in your device, and gain unauthorized access to sensitive information.
+
+## Security Best Practices
+
+To minimize the risks associated with NFC, follow these best practices: 
+
+- Keep your device's firmware and applications updated to minimize known vulnerabilities.
+- Use strong and unique passwords for secure NFC applications and services.
+- Turn off NFC when not in use to prevent unauthorized access.
+- Be cautious when scanning unknown NFC Tags and interacting with unfamiliar devices.
+- Ensure you're using trusted and secure apps to handle your NFC transactions.
+
+In conclusion, understanding the basics of NFC and adhering to security best practices will help ensure that you can safely and effectively use this innovative technology.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/101-connection-types/101-wifi.md

@@ -1 +1,41 @@
-# Wifi
+# WiFi
+
+**WiFi** stands for "wireless fidelity" and is a popular way to connect to the internet without the need for physical cables. It uses radio frequency (RF) technology to communicate between devices, such as routers, computers, tablets, smartphones, and other hardware.
+
+## Advantages of WiFi
+
+WiFi has several advantages over wired connections, including:
+
+- **Convenience**: Users can access the internet from anywhere within the WiFi signal's range, providing flexibility and mobility.
+
+- **Easy Setup**: WiFi devices connect to the internet simply by entering a password once, without the need for any additional cables or adapters.
+
+- **Scalability**: WiFi networks can easily expand to accommodate additional devices without the need for significant infrastructure changes.
+
+## Security Risks and WiFi Threats
+
+Despite its numerous benefits, WiFi also brings potential security risks. Some common threats include:
+
+- **Eavesdropping**: Hackers can intercept data transmitted over a WiFi connection, potentially accessing sensitive information such as personal or financial details.
+
+- **Rogue access points**: An unauthorized user could set up a fake WiFi network that appears legitimate, tricking users into connecting and providing access to their devices.
+
+- **Man-in-the-middle attacks**: An attacker intercepts data transmission between your device and the WiFi network, potentially altering data or injecting malware.
+
+## Best Practices for Secure WiFi Connections
+
+To protect yourself and your devices, follow these best practices:
+
+- **Use strong encryption**: Ensure your WiFi network uses the latest available encryption standards, such as WPA3 or, at minimum, WPA2.
+
+- **Change default credentials**: Change the default username and password for your WiFi router to prevent unauthorized access and configuration.
+
+- **Keep your router firmware up to date**: Regularly check for and install any available firmware updates to prevent potential security vulnerabilities.
+
+- **Create a guest network**: If you have visitors or clients, set up a separate guest network for them to use. This ensures your primary network remains secure.
+
+- **Disable WiFi Protected Setup (WPS)**: Although WPS can simplify the connection process, it may also create security vulnerabilities. Disabling it forces users to connect via the more secure password method.
+
+- **Use a Virtual Private Network (VPN)**: Connect to the internet using a VPN, which provides a secure, encrypted tunnel for data transmission.
+
+By understanding the potential security risks associated with WiFi connections and following these best practices, you can enjoy the convenience, flexibility, and mobility of WiFi while ensuring a secure browsing experience.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/101-connection-types/102-bluetooth.md

@@ -1 +1,17 @@
-# Bluetooth
+# Bluetooth
+
+**Bluetooth** is a wireless technology used to transfer data between devices over short distances. It operates in the 2.4 GHz frequency band and offers a reasonably secure means of communication between devices like smartphones, computers, headphones, and more.
+
+Below are some key points about Bluetooth:
+
+- **Short-range communication**: Bluetooth typically works within a radius of 10 meters (33 feet), giving it a significant advantage in terms of power consumption when compared to other wireless technologies such as Wi-Fi. The short range also reduces the chances of interference between devices.
+
+- **Low power consumption**: Bluetooth devices are designed to use relatively low power compared to other wireless technologies. This aspect contributes to their widespread adoption in battery-powered devices like wearable gadgets and IoT sensors.
+
+- **Convenience**: Bluetooth allows for easy, automatic connection between devices once they have been paired. This 'pair and play' functionality ensures users can quickly establish connectivity between their devices with minimal effort.
+
+- **Security**: Bluetooth includes security features like encryption and authentication, which ensure secure communication between paired devices. However, users must remain vigilant in terms of keeping their devices up-to-date with the latest Bluetooth security patches and protocols.
+
+- **Potential vulnerabilities**: Despite its built-in security measures, Bluetooth is not immune to cyber attacks. Some common risks include "bluejacking" (unauthorized sending of messages or files), "bluesnarfing" (unauthorized access to device data), and "BlueBorne" (an attack vector that exploits Bluetooth connections to infiltrate devices and spread malware). Users should be cautious in their usage of Bluetooth and follow best practices like not accepting unknown connection requests and turning off Bluetooth when not in use.
+
+In conclusion, Bluetooth offers a convenient means of connecting devices wirelessly. While it provides reasonably secure communication, users must stay informed about potential vulnerabilities and follow good security practices to safeguard their devices.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/101-connection-types/103-infrared.md

@@ -1 +1,26 @@
-# Infrared
+# Infrared
+
+Infrared (IR) is a type of wireless communication technology that utilizes light waves in the electromagnetic spectrum to transmit data between devices. Infrared connections are widely used in short-range communication, commonly found in devices like remote controls, wireless keyboards and mice, and computer-to-printer communication. Let's take a closer look at the features of infrared connectivity:
+
+## Advantages of Infrared Connections
+
+- **Privacy:** Since IR signals don't penetrate walls, there's less chance of interference or eavesdropping from neighboring devices.
+- **Ease of setup:** Infrared devices often require minimal setup, making them easy to use and hassle-free.
+- **Low power consumption:** Infrared connections typically consume little power, which is suitable for battery-operated devices.
+
+## Disadvantages of Infrared Connections
+
+- **Limited range:** Infrared transmissions have a short range, usually up to only a few meters.
+- **Line-of-sight transmission:** The signal gets blocked if objects are in the way between the sender and the receiver, as IR uses line-of-sight transmission.
+- **Slower data transfer rates:** Infrared connections have slower data transfer rates compared to other wireless technologies like Wi-Fi or Bluetooth.
+
+## Infrared Security Considerations
+
+While infrared connections are generally secure due to their limited range and inability to penetrate walls, they are still susceptible to attacks. An attacker with direct access to the transmission path can intercept, modify or inject data into the communication.
+
+To maintain security in infrared connections, consider the following precautions:
+- **Encryption:** Use encryption methods to protect sensitive data transmitted over infrared connections.
+- **Authentication:** Implement authentication mechanisms that confirm the identities of devices before allowing access.
+- **Physical security:** Ensure that devices using infrared communication are located in secure areas, limiting the possibility of tampering or eavesdropping.
+
+In summary, infrared is a useful technology for short-range communication purposes with certain benefits, such as privacy and low power consumption. However, it also has limitations and security considerations that must be addressed.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/101-connection-types/index.md

@@ -1 +1,29 @@
-# Connection types
+# Connection Types and their function
+
+In the realm of cyber security, understanding various connection types is crucial in maintaining a secure network environment. This section will provide you with an overview of different connection types commonly encountered in IT and their impact on security. 
+
+## Wired Connections
+
+Ethernet is the most widespread and commonly used wired connection type. It provides a secure, high-speed data transmission between devices, such as computers, routers, and switches, using Category 5 (Cat5) or higher cables. Ethernet connections are generally considered more reliable and secure compared to wireless connections because they are less vulnerable to interference and unauthorized access.
+
+## USB (Universal Serial Bus)
+
+USB is a popular connection type, primarily used for connecting peripheral devices such as keyboards, mice, and storage devices to computers. While USB provides a convenient way of expanding a computer's functionality, it also poses security risks. Using untrusted USB devices can lead to the spread of malware, making it essential to ensure that only trusted devices are connected to your system.
+
+## Wireless Connections
+
+Wi-Fi is the most prevalent wireless connection type, allowing devices to connect to the internet and each other without the need for physical cables. Although Wi-Fi provides greater flexibility and mobility, it introduces additional security risks. To minimize these risks, always use encryption (preferably WPA3 or WPA2), strong passwords, and update your router's firmware regularly.
+
+## Bluetooth
+
+Bluetooth is another widely used wireless connection type, primarily designed for short-range communication between devices such as smartphones, speakers, and headsets. While Bluetooth offers convenience, it can also be susceptible to attacks, such as Bluesnarfing and Bluejacking. To mitigate these risks, keep your devices updated, use Bluetooth 4.0 or higher, and disable Bluetooth when not in use.
+
+## Network Connections
+
+A VPN is a secure tunnel that creates a private network connection over a public network (such as the internet) by encrypting data transfers between devices. VPNs help protect sensitive information from being intercepted by unauthorized parties and are especially useful when accessing public Wi-Fi hotspots. Always use trusted VPN providers to ensure your data remains encrypted and private.
+
+## Peer-to-Peer (P2P)
+
+P2P is a decentralized connection type where devices connect directly with each other, without the need for a central server. P2P is commonly used for file-sharing services and can pose significant security risks if utilized without adequate security measures in place. To minimize risks, avoid using untrusted P2P services and refrain from sharing sensitive information on such networks.
+
+In summary, understanding and managing different connection types is an essential aspect of cyber security. By using secure connections and taking preventive measures, you can reduce the risk of unauthorized access, data breaches, and other malicious activities.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/102-os-independent-troubleshooting.md

@@ -1 +1,43 @@
-# Os independent troubleshooting
+# OS-Independent Troubleshooting
+
+OS-independent troubleshooting techniques are essential for every cybersecurity professional since they allow you to effectively diagnose and resolve issues on any operating system (OS). By using these OS-agnostic skills, you can quickly resolve problems and minimize downtime.
+
+## Understanding Common Symptoms
+
+In order to troubleshoot effectively, it is important to recognize and understand the common symptoms encountered in IT systems. These can range from hardware-related issues, such as overheating or physical damage, to software-related problems, such as slow performance or unresponsiveness.
+
+## Basic Troubleshooting Process
+
+Following a systematic troubleshooting process is critical, regardless of the operating system. Here are the basic steps you might follow:
+
+- **Identify the problem**: Gather information on the issue and its symptoms, and attempt to reproduce the problem, if possible. Take note of any error messages or unusual behaviors.
+- **Research and analyze**: Search for potential causes and remedies on relevant forums, web resources, or vendor documentation.
+- **Develop a plan**: Formulate a strategy to resolve the issue, considering the least disruptive approach first, where possible.
+- **Test and implement**: Execute the proposed solution(s) and verify if the problem is resolved. If not, repeat the troubleshooting process with a new plan until the issue is fixed.
+- **Document the process and findings**: Record the steps taken, solutions implemented, and results to foster learning and improve future troubleshooting efforts.
+
+## Isolating the Problem
+
+To pinpoint the root cause of an issue, it's important to isolate the problem. You can perform this by:
+
+- **Disabling or isolating hardware components**: Disconnect any peripherals or external devices, then reconnect and test them one by one to identify the defective component(s).
+- **Checking resource usage**: Utilize built-in or third-party tools to monitor resource usage (e.g., CPU, memory, and disk) to determine whether a bottleneck is causing the problem.
+- **Verifying software configurations**: Analyze the configuration files or settings for any software or applications that could be contributing to the problem.
+
+## Networking and Connectivity Issues
+
+Effective troubleshooting of network-related issues requires an understanding of various protocols, tools, and devices involved in networking. Here are some basic steps you can follow:
+
+- **Verify physical connectivity**: Inspect cables, connectors, and devices to ensure all components are securely connected and functioning correctly.
+- **Confirm IP configurations**: Check the system's IP address and related settings to ensure it has a valid IP configuration.
+- **Test network services**: Use command-line tools, such as `ping` and `traceroute` (or `tracert` in Windows), to test network connections and diagnose potential problems.
+
+## Log Analysis
+
+Logs are records of system events, application behavior, and user activity, which can be invaluable when troubleshooting issues. To effectively analyze logs, you should:
+
+- **Identify relevant logs**: Determine which log files contain information related to the problem under investigation.
+- **Analyze log content**: Examine events, error messages, or patterns that might shed light on the root cause of the issue.
+- **Leverage log-analysis tools**: Utilize specialized tools or scripts to help parse, filter, and analyze large or complex log files.
+
+In conclusion, developing OS-independent troubleshooting skills allows you to effectively diagnose and resolve issues on any system. By following a structured approach, understanding common symptoms, and utilizing the appropriate tools, you can minimize downtime and maintain the security and efficiency of your organization's IT systems.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/103-popular-suites/100-icloud.md

@@ -1 +1,29 @@
-# Icloud
+# iCloud
+
+iCloud is a cloud storage and cloud computing service provided by Apple Inc. It allows users to store data, such as documents, photos, and music, on remote servers and synchronize them across their Apple devices, including iPhones, iPads, and MacBooks. 
+
+## Features and Benefits
+
+iCloud offers a range of features and benefits that enhance the user experience and improve security. Here are some key aspects of the service:
+
+- **iCloud Storage**: Users are provided with 5 GB of free storage space on iCloud, and they can upgrade to higher plans (50 GB, 200 GB, or 2 TB) for an additional cost. This storage can be used for documents, photos, videos, backups, and app data.
+
+- **iCloud Backup**: iCloud automatically backs up essential data from iOS devices when they are connected to Wi-Fi and charging. This includes app data, device settings, messages, and much more. In case of device loss or replacement, users can restore the backup to the new device.
+
+- **iCloud Photos**: This feature allows users to automatically upload and store their photos and videos on iCloud, making them accessible across all their devices. iCloud also syncs edits, deletions, and album organization, ensuring that the photo library stays updated across all devices.
+
+- **Find My**: This service helps users locate their lost Apple devices using their iCloud account on another device. It also offers features like remote device lock and erase, ensuring that user data remains secure even if the device cannot be recovered.
+
+- **iCloud Drive**: Users can store documents and files of various types in iCloud Drive, making them accessible from all devices. This feature is built into the Mac Finder and can also be accessed via the Files app on iOS devices or the iCloud website.
+
+- **App-specific Data Sync**: Many apps can make use of iCloud to sync their data across devices. This enables a seamless experience, ensuring that users can pick up where they left off regardless of the device they are using.
+
+## Security
+
+Apple takes the security of iCloud very seriously and has implemented multiple layers of protection to keep user data safe. Some of these measures include:
+
+- **Encryption**: Data stored on iCloud is encrypted during transit and on the server. Photos, documents, and other data are secured using a minimum of 128-bit AES encryption.
+- **Two-Factor Authentication (2FA)**: Users can enable 2FA for their Apple ID to add an extra layer of security. This requires an additional verification step (such as entering a code received on a trusted device) when signing into iCloud or any Apple service.
+- **Secure Tokens**: Apple uses secure tokens for authentication, which means that your iCloud password is not stored on your devices or on Apple's servers.
+
+Overall, iCloud is a convenient and secure way for Apple device users to store and synchronize their data across devices. This cloud-based service offers numerous features to ensure seamless access and enhanced protection for user data.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/103-popular-suites/101-google-suite.md

@@ -1 +1,33 @@
-# Google suite
+# Google Suite
+
+Google Suite, also known as G Suite or Google Workspace, is a collection of cloud-based productivity and collaboration tools developed by Google. These tools are designed to help individuals and businesses collaborate more efficiently and effectively. Here is a summary of some of the most popular tools in Google Suite:
+
+## Google Drive
+
+Google Drive is a cloud storage service that allows users to store files, sync them across devices, and easily share them with others. With Google Drive, users get 15 GB of free storage, while more storage can be purchased as needed.
+
+## Google Docs, Sheets, and Slides
+
+These are the office suite tools that include a word processor (Docs), a spreadsheet program (Sheets), and a presentation program (Slides). All of these applications are web-based, allowing users to create, edit, and share documents in real-time with colleagues or collaborators. They also come with a variety of built-in templates, making it easier for users to quickly create and format their documents.
+
+## Google Forms
+
+Google Forms is a tool for creating custom online forms and surveys. Users can design forms with various question types, including multiple-choice, dropdown, and text-based questions. The data collected from the forms can be automatically organized and analyzed in Google Sheets.
+
+## Google Calendar
+
+A powerful scheduling tool, Google Calendar allows users to create and manage individual or shared calendars. Users can create events, invite attendees, and set reminders for themselves or others. Google Calendar also integrates with Gmail, allowing users to create and update events directly from their email.
+
+## Gmail
+
+Gmail is a widely-used email service that provides a clean and user-friendly interface, powerful search capabilities, and excellent spam filtering. Gmail also integrates with other Google tools, making it a seamless part of the overall suite.
+
+## Google Meet
+
+Google Meet is a video conferencing tool that allows users to host and join secure video meetings. With a G Suite account, users can schedule and join meetings directly from Google Calendar. Google Meet also supports screen sharing, breakout rooms, and live captioning during meetings.
+
+## Google Chat
+
+Google Chat is a communication platform for teams that provides direct messaging, group conversations, and virtual meeting spaces. Users can create chat rooms for specific projects or topics, collaborate on documents in real-time, and make use of Google Meet for video chats.
+
+These are just some of the many tools offered by Google Suite. This platform is a popular choice for individuals, teams, and organizations looking for a comprehensive and efficient way to manage their work and communication needs.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/103-popular-suites/102-ms-office-suite.md

@@ -1 +1,19 @@
-# Ms office suite
+# Microsoft Office Suite
+
+Microsoft Office Suite, often referred to as MS Office, is one of the most widely-used software suites for productivity, communication, and document creation. It is a comprehensive set of applications designed to increase efficiency in both professional and personal settings. Below is an overview of the key applications within the MS Office Suite:
+
+- **Microsoft Word:** A versatile word processing application that allows users to create, format, and edit text documents. It is equipped with various tools for formatting, spell-checking, and collaborating in real-time with others.
+
+- **Microsoft Excel:** Excel is a powerful spreadsheet application that enables users to create, edit, and analyze data in a tabulated format. Functions and formulas simplify complicated calculations while charts and graphs help visualize data.
+
+- **Microsoft PowerPoint:** PowerPoint is a widely-used presentation software that allows users to create visually engaging slides with various multimedia elements. It is an effective tool for sharing ideas, data and presenting complex concepts in an understandable format.
+
+- **Microsoft Outlook:** Outlook is an email management system that integrates emails, calendars, tasks, and contacts into a single platform. It enables users to efficiently manage their inboxes, organize schedules and manage contacts.
+
+- **Microsoft OneNote:** OneNote is a digital notebook that allows users to take notes, annotate, and capture and store information from various sources (including web pages), organize it intuitively, and sync it across devices.
+
+- **Microsoft Access:** Access is a relational database management system that provides users with the tools needed to create, modify, and store data in an organized manner.
+
+As part of Microsoft's Office 365 subscription, users also have access to cloud-based services like OneDrive, Skype for Business, and Microsoft Teams, which further enhance collaboration and productivity.
+
+When considering your cyber security strategy, it is essential to ensure that your MS Office applications are always up-to-date. Regular updates improve security, fix bugs, and protect against new threats. Additionally, it is crucial to follow best practices, such as using strong passwords and only downloading reputable add-ins, to minimize potential risks.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/103-popular-suites/index.md

@@ -1 +1,42 @@
-# Popular suites
+# Understand Basics of Popular Suites
+
+Software suites are widely used in professional and personal environments and provide various tools to perform tasks such as word processing, data management, presentations, and communication. Familiarity with these suites will allow you to perform essential tasks while also maintaining cyber hygiene.
+
+## Microsoft Office
+
+Microsoft Office is the most widely used suite of applications, consisting of programs such as:
+
+- *Word*: A powerful word processor used for creating documents, reports, and letters.
+- *Excel*: A versatile spreadsheet application used for data analysis, calculations, and visualizations.
+- *PowerPoint*: A presentation software for designing and displaying slideshows.
+- *Outlook*: A comprehensive email and calendar management tool.
+- *OneNote*: A digital notebook for organizing and storing information.
+
+Microsoft Office is available both as a standalone product and as part of the cloud-based Office 365 subscription, which includes additional features and collaboration options.
+
+## Google Workspace (formerly G Suite)
+
+Google Workspace is a cloud-based suite of productivity tools by Google, which includes widely known applications such as:
+
+- *Google Docs*: A collaborative word processor that seamlessly integrates with other Google services.
+- *Google Sheets*: A robust spreadsheet application with a wide array of functions and capabilities.
+- *Google Slides*: A user-friendly presentation tool that makes collaboration effortless.
+- *Google Drive*: A cloud storage service that allows for easy storage, sharing, and syncing of files.
+- *Gmail*: A popular email service with advanced filtering and search capabilities.
+- *Google Calendar*: A scheduling and event management application that integrates with other Google services.
+
+Google Workspace is particularly popular for its real-time collaboration capabilities and ease of access through web browsers.
+
+## LibreOffice
+
+LibreOffice is a free, open-source suite of applications that offers a solid alternative to proprietary productivity suites. It includes tools such as:
+
+- *Writer*: A word processor that supports various document formats.
+- *Calc*: A powerful spreadsheet application with extensive formula and function libraries.
+- *Impress*: A presentation software that supports customizable templates and animations.
+- *Base*: A database management tool for creating and managing relational databases.
+- *Draw*: A vector graphics editor for creating and editing images and diagrams.
+
+LibreOffice is compatible with various platforms, including Windows, macOS, and Linux, and provides excellent support for standard file formats.
+
+In conclusion, being proficient in using these popular software suites will not only improve your basic IT skills but also help you maintain good cybersecurity practices. Familiarity with these suites will enable you to effectively manage and secure your digital assets while also identifying potential vulnerabilities that may arise during their use. Stay tuned for further topics on enhancing your cybersecurity knowledge.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/104-basics-of-computer-networking.md

@@ -1 +1,52 @@
-# Basics of computer networking
+# Basics of Computer Networking
+
+Computer networking refers to the practice of connecting two or more computing devices, creating an infrastructure in which they can exchange data, resources, and software. It is a fundamental part of cyber security and IT skills. In this chapter, we will cover five aspects of computer networking, including networking devices, network types, network protocols, IP addresses, and the OSI model.
+
+## Networking Devices
+
+Several devices enable and facilitate communication between different devices. Common networking devices include:
+
+- **Hubs**: Devices that connect different devices together, transmitting data packets to all devices on the network.
+- **Switches**: Similar to hubs, but transmit data packets only to specific devices instead of broadcasting to all.
+- **Routers**: Devices that direct data packets between networks and provide the best path for data packets to reach their destination.
+- **Firewalls**: Devices or software that monitor and filter incoming and outgoing network traffic, allowing only authorized data to pass through.
+
+## Network Types
+
+There are various types of networks based on the distance they cover, and the number of devices they connect. A few common network types are:
+
+- **Personal Area Network (PAN)**: Connects devices within an individual workspace, typically within a range of 10 meters.
+- **Local Area Network (LAN)**: Covers a small geographical area, such as a home or office, connecting multiple computers and other devices.
+- **Wide Area Network (WAN)**: Covers a larger geographical area, interconnecting different LANs, often using leased telecommunication lines or wireless links.
+- **Virtual Private Network (VPN)**: A secure network established over the public internet, encrypting the data transferred and restricting access to authorized users only.
+
+## Network Protocols
+
+Protocols are sets of rules that govern the communication between devices within a network. Some of the most common protocols include:
+
+- **Transmission Control Protocol (TCP)**: Ensures the reliable transmission of data and establishes connections between devices.
+- **Internet Protocol (IP)**: Facilitates the transmission of data packets, assigning unique IP addresses to identify devices.
+- **User Datagram Protocol (UDP)**: A lightweight, fast, but less reliable protocol compared to TCP, often used for streaming and gaming applications.
+
+## IP Addresses
+
+An IP address is a unique identifier assigned to every device in a network. There are two types of IP addresses:
+
+- **IPv4**: Uses a 32-bit addressing system, allowing for approximately 4.3 billion unique IP addresses.
+- **IPv6**: Uses a 128-bit addressing system, providing a significantly larger number of available IP addresses.
+
+IP addresses can also be categorized as dynamic or static, depending on whether they change over time or remain constant for a device.
+
+## OSI Model
+
+The Open Systems Interconnection (OSI) model is a conceptual framework used to understand and describe how different network protocols interact. It divides networking functions into seven distinct layers:
+
+- **Physical Layer**: Deals with the physical connection between devices, including cabling and hardware.
+- **Data Link Layer**: Handles the communication between adjacent devices on the same network.
+- **Network Layer**: Identifies the best route for data packets and manages IP addresses.
+- **Transport Layer**: Ensures the reliable transmission of data, including error checking and flow control.
+- **Session Layer**: Establishes, maintains, and terminates connections between applications on different devices.
+- **Presentation Layer**: Translates data into a format that is suitable for transmission between devices.
+- **Application Layer**: Represents the user interface with which applications interact.
+
+Mastering the basics of computer networking is key to understanding and implementing effective cyber security measures. This chapter has covered essential networking concepts, but it is important to continually expand your knowledge in this ever-evolving field.

src/data/roadmaps/cyber-security/content/100-basic-it-skills/index.md

@@ -1 +1,66 @@
-# Basic it skills
+# Fundamental IT Skills
+
+Basic IT skills are the foundation for understanding and navigating the digital world, as well as playing a crucial role in cyber security. Given below are some essential IT skills that will help you enhance your experience with technology and better protect your digital assets.
+
+## Computer Navigation
+
+Understanding how to navigate a computer's operating system is a vital skill. This includes knowing how to:
+
+- Power on/off the device
+- Manage files and folders
+- Use shortcuts and right-click options
+- Install and uninstall software
+- Customize settings
+
+## Internet Usage
+
+Having a working knowledge of how to navigate the internet will allow you to access information and resources more efficiently. Key skills include:
+
+- Web browsing
+- Internet searching
+- Bookmark management
+- Downloading files
+- Understanding hyperlinks and web addresses
+- Recognizing secure websites
+
+## Email Management
+
+Communication using email is an essential aspect of the modern digital world. Important email management skills are:
+
+- Creating and organizing contacts
+- Composing, sending, and receiving emails
+- Detecting and avoiding spam and phishing emails
+- Managing email attachments
+- Understanding email etiquette
+
+## Word Processing
+
+Word processing is a basic IT skill that is useful in both personal and professional environments. Skills related to word processing include:
+
+- Formatting text (font, size, bold, italic, etc.)
+- Creating and editing documents
+- Copying and pasting text
+- Inserting images and tables
+- Saving and printing documents
+
+## Software and Application Installation
+
+Being able to install and manage software can make your experience with technology more efficient and tailored to your needs. Basic software-related skills include:
+
+- Identifying reliable sources for downloading software
+- Installing and updating applications
+- Uninstalling unwanted or unnecessary programs
+- Configuring applications according to your preferences
+- Updating software to prevent vulnerabilities
+
+## Digital Security Awareness
+
+As the digital world is constantly evolving, so too are cyber threats. Therefore, remaining vigilant and familiarizing yourself with common cyber security practices is crucial. Some fundamental digital security skills include:
+
+- Creating strong, unique passwords
+- Ensuring a secure and updated Wi-Fi connection
+- Recognizing and avoiding phishing attempts
+- Keeping software and operating systems updated
+- Regularly backing up data
+
+By honing these basic IT skills, you will be better prepared to navigate and protect your digital life, as well as making the most of the technology at your fingertips.

src/data/roadmaps/cyber-security/content/101-operating-systems/100-windows.md

@@ -1 +1,45 @@
-# Windows
+# Windows
+
+Windows is a popular operating system (OS) developed by Microsoft Corporation. It was first introduced in 1985 and has since evolved to become one of the most widely used OS worldwide. Windows is known for its graphical user interface (GUI), and it supports a wide variety of applications, making it a versatile choice for both personal and professional use.
+
+## Key Features
+
+- **Ease of use:** Windows is designed with a user-friendly interface, making it easy for users to navigate, manage files, and access applications.
+
+- **Compatibility:** Windows is compatible with a vast range of hardware and software, including most peripherals like printers, webcams, and more. 
+
+- **Regular updates:** Microsoft provides regular updates for Windows, which helps maintain security, fix bugs, and enhance features.
+
+- **Large user community:** Due to its widespread use, there is a vast online community of users who provide support, solutions, and information about the platform.
+
+- **Versatile application support:** Windows supports a plethora of applications, including office productivity tools, games, multimedia software, and more.
+
+## Security Features
+
+Windows has made significant strides to improve its security over the years. Some of the security features include:
+
+- **Windows Defender:** A built-in antivirus software that provides real-time protection against malware, ransomware, and other threats.
+
+- **Windows Firewall:** This feature helps protect your device from unauthorized access or intrusion by blocking potentially harmful network connections.
+
+- **User Account Control (UAC):** UAC helps prevent unauthorized changes to the system settings by prompting users for administrative permission when making system modifications.
+
+- **Windows Update:** Regular updates ensure that your system is up-to-date with the latest security patches, bug fixes, and feature improvements.
+
+- **BitLocker:** A disk encryption feature available in certain Windows editions, BitLocker helps secure your data by providing encryption for your hard drive or external storage devices.
+
+## Essential Security Tips for Windows Users
+
+To improve the security of Windows devices, users should:
+
+- Ensure that the Windows OS and all installed software are up-to-date.
+
+- Regularly update and run antivirus and anti-malware software.
+
+- Enable the built-in Windows Firewall to protect the device from unauthorized access.
+
+- Use strong and unique passwords for user accounts and enable two-factor authentication wherever possible.
+
+- Regularly back up important data to an external storage device or a secure cloud service to avoid data loss.
+
+By following these security tips and staying informed about potential threats, Windows users can protect their devices and data from various cyber-attacks.

src/data/roadmaps/cyber-security/content/101-operating-systems/101-linux.md

@@ -1 +1,33 @@
-# Linux
+# Linux
+
+Linux is an open-source operating system (OS) that is widely popular due to its flexibility, stability, and security features. As a Unix-based OS, Linux has a command-line interface, which allows users to perform various tasks through text commands. However, graphical user interfaces (GUIs) can also be installed for ease of use.
+
+## Key Features
+
+- **Open-source**: Anyone can view, modify, and distribute the Linux source code, promoting collaboration and continuous improvement within the OS community.
+- **Modular design**: Linux can be customized for various computing environments, such as desktops, servers, and embedded systems.
+- **Stability and performance**: Linux is well-known for its ability to handle heavy loads without crashing, making it an ideal choice for servers.
+- **Strong Security**: Linux has robust security mechanisms, such as file permissions, a built-in firewall, and an extensive user privilege system.
+- **Large Community**: Linux has a vast, active user community that offers a wealth of knowledge, user-contributed software, and support forums.
+
+## Popular Linux Distributions
+
+There are numerous Linux distributions available, catering to specific user needs and preferences. Some popular distributions include:
+
+- **Ubuntu**: A user-friendly distribution suitable for beginners, often used for desktop environments.
+- **Fedora**: A cutting-edge distribution with frequent updates and innovative features, ideal for developers and advanced users.
+- **Debian**: A very stable distribution that prioritizes free software and benefits from a large, active community.
+- **Arch Linux**: A highly customizable distribution that allows users to build their system from the ground up, suited for experienced users.
+- **CentOS**: A distribution focused on stability, security, and manageability, making it a popular choice for server environments.
+
+## Security Best Practices for Linux
+
+While Linux is inherently secure, there are best practices to enhance your system's security further:
+
+- Keep your system updated: Regularly update your kernel, OS packages, and installed software to ensure you have the latest security patches.
+- Enable a firewall: Configure and enable a firewall, such as `iptables`, to control incoming and outgoing network traffic.
+- Use strong passwords and user accounts: Create separate accounts with strong passwords for different users and grant them only the required privileges.
+- Disable unused services: Unnecessary services can be potential security risks; ensure only required services are running on your system.
+- Implement a Security-Enhanced Linux (SELinux) policy: SELinux provides a mandatory access control (MAC) system that restricts user and process access to system resources.
+
+By understanding Linux's features and best practices, you can leverage its powerful capabilities and robust security features to enhance your computing environment's performance and safety.

src/data/roadmaps/cyber-security/content/101-operating-systems/102-macos.md

@@ -1 +1,29 @@
-# Macos
+# MacOS
+
+**macOS** is a series of proprietary graphical operating systems developed and marketed by Apple Inc. It is the primary operating system for Apple's Mac computers. macOS is widely recognized for its sleek design, robust performance, and innovative features, making it one of the most popular operating systems globally. 
+
+## Key Features
+
+- **User-friendly interface**: macOS is known for its simple and intuitive user interface, which makes it easy for users to navigate and use the system efficiently. 
+
+- **Security**: macOS has several built-in security features, such as XProtect, Gatekeeper, and FileVault, to provide a secure computing environment. Additionally, macOS is based on UNIX, which is known for its strong security and stability.
+
+- **Integration with Apple ecosystem**: macOS is seamlessly integrated with Apple's software and hardware ecosystem, including iOS, iCloud, and other Apple devices, providing a consistent and well-connected user experience.
+
+- **App Store**: Apple's App Store offers a large and diverse selection of applications for macOS, ensuring easy and secure software downloads and installations.
+
+- **Time Machine**: macOS's Time Machine feature provides an easy and automatic way to back up your data, ensuring you never lose important files and can recover from system crashes.
+
+## Security Tips
+
+- **Keep your macOS up-to-date**: Always ensure that your macOS is running the latest version and security updates, as Apple regularly releases patches to fix potential vulnerabilities.
+
+- **Enable the Firewall**: Make sure to enable macOS's built-in firewall to protect your system from unauthorized access and potential intrusions.
+
+- **Use strong, unique passwords**: Ensure that your macOS user account is protected with a strong, unique password and enable two-factor authentication for your Apple ID.
+
+- **Be cautious with downloads**: Be careful when downloading and installing software from unknown sources. Use the macOS App Store whenever possible, and avoid downloading from third-party websites.
+
+- **Install antivirus software**: To add an extra layer of security, consider installing a reputable antivirus program on your Mac to protect against malware and other threats.
+
+By following these security tips and staying vigilant, users can ensure their Mac remains a secure and enjoyable computing environment.

src/data/roadmaps/cyber-security/content/101-operating-systems/index.md

@@ -1 +1,37 @@
-# Operating systems
+# Operating Systems
+
+An **operating system (OS)** is a crucial component of a computer system as it manages and controls both the hardware and software resources. It provides a user-friendly interface and ensures the seamless functioning of the various applications installed on the computer.
+
+In the context of cybersecurity, selection and proper maintenance of an operating system is paramount. This section will discuss the three major operating systems: Windows, macOS, and Linux, along with security considerations.
+
+## Windows
+
+Microsoft Windows is ubiquitous amongst desktop and laptop users, making it a primary target for cybercriminals. Attackers often focus on finding and exploiting vulnerabilities within Windows due to its extensive user-base. That said, Windows continues to enhance its built-in security features with updates and patches. Key features include:
+
+- Windows Defender: An antivirus program that detects and removes malware.
+- Windows Firewall: Monitors and controls incoming and outgoing network traffic.
+- BitLocker: A full disk encryption feature for securing data.
+
+As a Windows user, keeping your system up-to-date and using additional security tools such as anti-malware software is vital.
+
+## macOS
+
+The macOS, Apple's operating system for Macintosh computers, holds a reputation for strong security. Apple designed macOS with several built-in features to protect user privacy and data:
+
+- Gatekeeper: Ensures downloaded apps originate from trusted sources.
+- FileVault 2: Offers full-disk encryption for data protection.
+- XProtect: An antivirus tool that scans newly installed apps for malware.
+
+Despite macOS's sound security measures, no operating system is completely immune to threats. Running reputable security software and keeping your macOS updated is essential to safeguard against potential cyberattacks.
+
+## Linux
+
+Linux is an open-source operating system considered to be more secure than its commercial counterparts. Linux uses a multi-user environment, mitigating the impact of potential threats by separating user information and privileges. Other notable features include:
+
+- Software Repositories: Official software repositories maintained by Linux distributions provide trusted sources for software installation.
+- SELinux (Security-Enhanced Linux): A security architecture that allows administrators to control system access.
+- System/package updates: Regular updates offered by distributions hold essential security fixes.
+
+Although Linux distributions are less targeted by cybercriminals, it is vital to follow security best practices, such as keeping your system updated and employing security tools like antivirus software and firewalls.
+
+Remember, the security of your operating system relies on timely updates, proper configuration, and the use of appropriate security tools. Stay vigilant and informed to ensure your system remains secure against ever-evolving cyber threats.

src/data/roadmaps/cyber-security/content/101-operating-systems/learn-for-each/103-install-and-configure.md

@@ -1 +1,35 @@
-# Install and configure
+# Installation and Configuration
+
+To effectively protect your systems and data, it is vital to understand how to securely install software and configure settings, as well as assess the implications and potential vulnerabilities during installation and configuration processes.
+
+## Importance of Proper Installation and Configuration
+
+Improper installation or configuration of software can lead to an array of security risks, including unauthorized access, data breaches, and other harmful attacks. To ensure that your system is safeguarded against these potential threats, it is essential to follow best practices for software installation and configuration:
+
+- **Research the Software**: Before installing any software or application, research its security features and reputation. Check for any known vulnerabilities, recent patches, and the software's overall trustworthiness.
+
+- **Use Official Sources**: Always download software from trusted sources, such as the software vendor's official website. Avoid using third-party download links, as they may contain malicious code or altered software.
+
+- **Verify File Integrity**: Verify the integrity of the downloaded software by checking its cryptographic hash, often provided by the software vendor. This ensures that the software has not been tampered with or corrupted during the download process.
+
+- **Install Updates**: During the installation process, ensure that all available updates and patches are installed, as they may contain vital security fixes.
+
+- **Secure Configurations**: Following the installation, properly configure the software by following the vendor's documentation or industry best practices. This can include adjusting settings related to authentication, encryption, and access control, among other important security parameters.
+
+## Configuration Considerations
+
+While software configurations will vary depending on the specific application or system being utilized, there are several key aspects to keep in mind:
+
+- **Least Privilege**: Configure user accounts and permissions with the principle of least privilege. Limit user access to the minimal level necessary to accomplish their tasks, reducing the potential attack surface.
+
+- **Password Policies**: Implement strong password policies, including complexity requirements, minimum password length, and password expiration periods.
+
+- **Encryption**: Enable data encryption to protect sensitive information from unauthorized access. This can include both storage encryption and encryption of data in transit.
+
+- **Firewalls and Network Security**: Configure firewalls and other network security measures to limit the attack surface and restrict unauthorized access to your systems.
+
+- **Logging and Auditing**: Configure logging and auditing to capture relevant security events and allow for analysis in the event of a breach or security incident.
+
+- **Disable Unnecessary Services**: Disable any unused or unnecessary services on your systems. Unnecessary services can contribute to an increased attack surface and potential vulnerabilities.
+
+By following these guidelines, you can establish a robust foundation for system security through proper installation and configuration. Remember that maintaining strong cybersecurity is an ongoing process that requires continuous learning and adaptation to stay ahead of evolving threats.

src/data/roadmaps/cyber-security/content/101-operating-systems/learn-for-each/104-versions-and-differences.md

@@ -1 +1,25 @@
-# Versions and differences
+# Different Versions and Differences
+
+In the field of cyber security, it is essential to stay up-to-date with different versions of software, tools, and technology, as well as understanding the differences between them. Regularly updating software ensures that you have the latest security features in place to protect yourself from potential threats.
+
+## Importance of Versions
+
+- **Security**: Newer versions of software often introduce patches to fix security vulnerabilities. Using outdated software can leave your system exposed to cyber attacks.
+
+- **Features**: Upgrading to a newer version of software can provide access to new features and functionalities, improving the user experience and performance.
+
+- **Compatibility**: As technology evolves, staying up-to-date with versions helps ensure that software or tools are compatible across various platforms and devices.
+
+## Understanding Differences
+
+When we talk about differences in the context of cybersecurity, they can refer to:
+
+- **Software Differences**: Different software or tools offer different features and capabilities, so it's crucial to choose one that meets your specific needs. Additionally, open-source tools may differ from proprietary tools in terms of functionalities, licensing, and costs.
+
+- **Operating System Differences**: Cybersecurity practices may differ across operating systems such as Windows, Linux, or macOS. Each operating system has its own security controls, vulnerabilities, and potential attack vectors.
+
+- **Protocol Differences**: Understanding the differences between various network protocols (HTTP, HTTPS, SSH, FTP, etc.) can help you choose the most secure method for your purposes.
+
+- **Threat Differences**: Various types of cyber threats exist (e.g., malware, phishing, denial-of-service attacks), and it is crucial to understand their differences in order to implement the most effective countermeasures.
+
+To sum up, keeping up with different versions of software and understanding the differences between technologies and threats are vital steps in maintaining a strong cyber security posture. Always update your software to the latest version, and continuously educate yourself on emerging threats and technologies to stay one step ahead of potential cyber attacks.

src/data/roadmaps/cyber-security/content/101-operating-systems/learn-for-each/105-navigating-using-gui-and-cli.md

@@ -1 +1,37 @@
-# Navigating using gui and cli
+# Navigating using GUI and CLI
+
+Graphical User Interface (GUI) and Command Line Interface (CLI) are the two essential methods to navigate through a computer system or a network device. Both these interfaces are crucial for understanding and managing cyber security.
+
+## Graphical User Interface (GUI)
+
+A Graphical User Interface (GUI) is a type of user interface that allows users to interact with a software program, computer, or network device using images, icons, and visual indicators. The GUI is designed to make the user experience more intuitive, as it enables users to perform tasks using a mouse and a keyboard without having to delve into complex commands. Most modern operating systems (Windows, macOS, and Linux) offer GUIs as the primary means of interaction.
+
+**Advantages of GUI:**
+
+- User-friendly and visually appealing
+- Easier for beginners to learn and navigate
+- Reduces the need to memorize complex commands
+
+**Disadvantages of GUI:**
+
+- Consumes more system resources (memory, CPU) than CLI
+- Some advanced features might not be available or accessibly as quickly compared to CLI
+
+## Command Line Interface (CLI)
+
+A Command Line Interface (CLI) is a text-based interface that allows users to interact with computer programs or network devices directly through commands that are entered via a keyboard. CLIs are used in a variety of contexts, including operating systems (e.g., Windows Command Prompt or PowerShell, macOS Terminal, and Linux shell), network devices (such as routers and switches), and some software applications.
+
+**Advantages of CLI:**
+
+- Faster and more efficient in performing tasks once commands are known
+- Requires fewer system resources (memory, CPU) than GUI
+- Provides more control and advanced features for experienced users
+
+**Disadvantages of CLI:**
+
+- Steeper learning curve for beginners
+- Requires memorization or reference material for commands and syntax
+
+By understanding how to navigate and use both GUI and CLI, you will be better equipped to manage and secure your computer systems and network devices, as well as perform various cyber security tasks that may require a combination of these interfaces. It is essential to be familiar with both methods, as some tasks may require the precision and control offered by CLI, while others may be more efficiently performed using a GUI.
+
+In the following sections, we will discuss some common CLI tools and their usage, along with how to secure and manage your computer systems and network devices using these interfaces. Stay tuned!

src/data/roadmaps/cyber-security/content/101-operating-systems/learn-for-each/106-understand-permissions.md

@@ -1 +1,34 @@
-# Understand permissions
+# Understand Permissions
+
+Understanding permissions is crucial for maintaining a secure environment in any system. Permissions determine the level of access and control users have over files, applications, and other system resources. By setting the appropriate permissions, you can effectively limit the potential for unauthorized access and data breaches.
+
+## Different Types of Permissions
+
+Permissions can be broadly categorized into three types:
+
+- **Read (R)**: This permission level allows users to view the content of a file or folder, without the ability to make any changes or execute actions.
+- **Write (W)**: This permission level grants users the ability to create, modify, or delete files and folders.
+- **Execute (X)**: This permission level allows users to run a file or application and execute actions within it.
+
+These permissions can be combined in different ways to form the desired access level. For example, a user may have read and write permissions for a file, allowing them to view and modify its contents, but not execute any actions within it.
+
+## Setting and Managing Permissions
+
+Permissions can be set and managed using various tools and methods, depending on the operating system being used:
+
+- **Windows**: Permissions are set through Access Control Lists (ACLs) in the security properties of a file or folder. This allows you to grant or deny specific permissions to users and groups.
+- **Mac**: Mac uses POSIX permissions to manage access control, which can be set using the "Get Info" window for a file or folder, or through Terminal commands.
+- **Linux**: Permissions on Linux systems are managed using the `chmod` command, along with the `chown` and `chgrp` commands to change the ownership of files and groups.
+
+It's essential to understand how these tools work and use them effectively to maintain a secure environment.
+
+## Best Practices for Implementing Permissions
+
+To ensure cyber security with permissions, follow these best practices:
+
+- **Least Privilege Principle**: Grant users the minimum level of access they need to perform their tasks. People should not have unnecessary access to sensitive information or resources.
+- **Regularly Review Permissions**: Regularly audit permissions to ensure they are up-to-date and align with the current organizational roles and responsibilities.
+- **Use Groups and Roles**: Group users based on their job roles and assign permissions to groups instead of individuals. This simplifies the permission management process.
+- **Implement Security Training**: Educate users about the importance of permissions and their responsibilities to maintain a secure environment.
+
+By understanding permissions and following best practices, you can enhance cyber security and minimize the risk of unauthorized access and data breaches.

src/data/roadmaps/cyber-security/content/101-operating-systems/learn-for-each/107-installing-apps.md

@@ -1 +1,29 @@
-# Installing apps
+# Installing Software and Applications
+
+In the realm of cyber security, installing apps safely and securely is vital to protect your devices and personal information. In this guide, we'll cover some essential steps to follow when installing apps on your devices.
+
+## Choose trusted sources
+
+To ensure the safety of your device, always choose apps from trusted sources, such as official app stores (e.g., Google Play Store for Android or Apple's App Store for iOS devices). These app stores have strict guidelines and often review apps for malicious content before making them available for download.
+
+## Research the app and its developer
+
+Before installing an app, it is essential to research the app and its developer thoroughly. Check for app reviews from other users and look for any red flags related to security or privacy concerns. Investigate the developer's web presence and reputation to ensure they can be trusted.
+
+## Check app permissions
+
+Before installing an app, always review the permissions requested. Be aware of any unusual permissions that do not correspond with the app's functionality. If an app is asking for access to your contacts, GPS, or microphone, and there isn't a reasonable explanation for why it needs this information, it could be a potential security risk.
+
+## Keep your device and apps updated
+
+To maintain your device's security, always install updates as soon as they become available. This applies not only to the apps but also to the operating system of your device. Updates often include security patches that fix known vulnerabilities, so it is essential to keep everything up to date.
+
+## Install a security app
+
+Consider installing a security app from a reputable company to protect your device against malware, viruses, and other threats. These apps can monitor for suspicious activity, scan for malicious software, and help keep your device secure.
+
+## Uninstall unused apps
+
+Regularly review the apps on your device and uninstall any that are no longer being used. This will not only free up storage space but also reduce potential security risks that might arise if these apps are not maintained or updated by their developers.
+
+By following these guidelines, you can significantly increase your device's security and protect your valuable data from cyber threats.

src/data/roadmaps/cyber-security/content/101-operating-systems/learn-for-each/108-performing-crud-on-files.md

@@ -1 +1,62 @@
-# Performing crud on files
+# Performing CRUD on Files
+
+When working with files in any system or application, understanding and performing CRUD operations (Create, Read, Update, and Delete) is essential for implementing robust cyber security measures.
+
+## File Creation
+
+- **Windows**: You can create new files using the built-in text editor (Notepad) or dedicated file creation software. You can also use PowerShell commands for quicker file creation. The `New-Item` command followed by the file path creates a file.
+
+    ```
+    New-Item -Path "C:\Example\example.txt" -ItemType "file"
+    ```
+
+- **Linux**: Unlike Windows, file creation is usually done through the terminal. The `touch` command helps create a file in the desired directory.
+
+    ```
+    touch /example/example.txt
+    ```
+
+## File Reading
+
+- **Windows**: You can read a file using standard file readers, such as Notepad, Wordpad, etc., or you can utilize PowerShell commands. The `Get-Content` command provides the file content.
+
+    ```
+    Get-Content -Path "C:\Example\example.txt"
+    ```
+
+- **Linux**: The `cat` command is the most common way to read the contents of a file in Linux.
+
+    ```
+    cat /example/example.txt
+    ```
+
+## File Updating
+
+- **Windows**: File updating can be accomplished using the previously mentioned text editors or PowerShell. The `Set-Content` or `Add-Content` commands are useful for updating a file.
+
+    ```
+    Set-Content -Path "C:\Example\example.txt" -Value "Updated content"
+    Add-Content -Path "C:\Example\example.txt" -Value "Appended content"
+    ```
+
+- **Linux**: Linux uses the built-in text editors, such as `nano` or `vim`, to update files. Alternatively, the `echo` command can append content to a file.
+
+    ```
+    echo "Appended content" >> /example/example.txt
+    ```
+
+## File Deletion
+
+- **Windows**: File deletion is performed by right-clicking the file and selecting 'Delete' or using PowerShell commands. The `Remove-Item` command followed by the file path can delete a file.
+
+    ```
+    Remove-Item -Path "C:\Example\example.txt"
+    ```
+
+- **Linux**: The `rm` command allows you to delete a file in Linux.
+
+    ```
+    rm /example/example.txt
+    ```
+
+By mastering these CRUD operations, you can enhance your cyber security knowledge and implement effective incident response and file management strategies.

src/data/roadmaps/cyber-security/content/101-operating-systems/learn-for-each/109-troubleshooting.md

@@ -1 +1,40 @@
-# Troubleshooting
+# Troubleshooting
+
+**Troubleshooting** is a crucial skill in the realm of cyber security, as it involves identifying, analyzing, and resolving various issues with computer systems, networks, and software. It is a systematic approach that requires logical thinking and the ability to deduce the possible cause of a problem from various symptoms. As an aspiring cyber security professional, sharpening your troubleshooting skills means you'll be better equipped to handle any security threats, vulnerabilities, and attacks on your organization's digital infrastructure.
+
+Below, we have outlined some key steps and best practices for effective troubleshooting in cyber security:
+
+## Identifying the Problem
+
+The first step in troubleshooting is to identify the problem itself. This may involve recognizing unusual system behavior, error messages, or even end-user reports. To identify the problem, look for symptoms such as slow performance, application crashes, or network connectivity issues.
+
+## Gathering Information
+
+Once the problem has been identified, gather as much information as possible about it. This means consulting event logs, system documentation, and users who may have experienced the issue firsthand. Additionally, pay attention to any error messages or anomalies in the system behavior that can provide valuable insights.
+
+## Formulate a Hypothesis
+
+After gathering all available information, come up with a hypothesis or an educated guess about what may be causing the issue. Keep in mind that you may not be able to determine a single cause at this stage, so try to identify all possible causes and prioritize them based on the available evidence.
+
+## Test the Hypothesis
+
+Test your hypothesis by attempting to confirm or refute it. To do this, apply a specific solution and observe any changes that occur. If there is no change, reconsider your hypothesis and apply another solution. Repeat this process until you've identified a cause or have exhausted all possible solutions.
+
+## Document and Communicate Findings
+
+Once you've identified and resolved the problem, document your findings and communicate them to relevant stakeholders. This will help to ensure that issues are addressed efficiently in the future and will also contribute to your organization's knowledge base.
+
+## Troubleshooting Best Practices
+
+- Develop a methodical approach: Take a step-by-step approach and use logic, pattern recognition, and experience to guide you through the troubleshooting process.
+- Collaborate: Engage with other professionals to discuss potential solutions, as well as share insights and experiences.
+- Stay informed: Continuously update your knowledge and skillset with the latest technologies, trends, and methods in the cyber security landscape.
+- Invest in tools: Utilize effective troubleshooting tools like network analyzers, penetration testing tools, or log analyzers to help you diagnose and resolve issues more efficiently.
+
+Mastering the art of troubleshooting is essential for successful cyber security professionals, and by employing the strategies laid out above, you'll be well on your way to enhancing your problem-solving capabilities in the field.
+
+---
+
+I hope this brief summary on troubleshooting has been informative and helps you further enhance your understanding of cyber security. Keep learning and good luck in your cyber security journey!
+
+*[Your Name Here], The Cyber Security Guide Author*

src/data/roadmaps/cyber-security/content/101-operating-systems/learn-for-each/110-common-commands.md

@@ -1 +1,83 @@
-# Common commands
+# Common Commands
+
+In this guide, we will cover essential common commands you need to know when starting your journey in cyber security. By becoming proficient in these commands, you will be able to navigate, analyze, and manage different aspects of systems and networks. The list will cover command prompts, shell commands, and other tools.
+
+*Please note this guide assumes you already have basic knowledge of command line interfaces (CLI)*
+
+## Operating System Commands
+
+These commands are useful for managing and understanding your operating system and its components.
+
+## Windows
+
+- `ipconfig`: Display the IP configuration for all network interfaces on the device.
+
+- `netstat`: Display active network connections, listening ports, and routing tables.
+
+- `systeminfo`: Display detailed information about the computer's hardware and software configuration.
+
+- `nslookup`: Look up the IP address of a domain or host.
+
+- `ping`: Send a series of network packets to test network connectivity.
+
+## Linux/Unix/MacOS
+
+- `ifconfig`: Display the IP configuration for all network interfaces on the device.
+
+- `netstat`: Display active network connections, listening ports, and routing tables.
+
+- `uname -a`: Display detailed information about the operating system.
+
+- `dig`: Look up the IP address of a domain or host.
+
+- `ping`: Send a series of network packets to test network connectivity.
+
+## File System Commands
+
+These commands are useful for navigating and managing file systems on your device.
+
+## Windows
+
+- `dir`: List files and directories in the current directory.
+
+- `cd`: Change the current directory.
+
+- `copy`: Copy files from one location to another.
+
+- `move`: Move files from one location to another.
+
+- `del`: Delete specified files.
+
+## Linux/Unix/MacOS
+
+- `ls`: List files and directories in the current directory.
+
+- `cd`: Change the current directory.
+
+- `cp`: Copy files from one location to another.
+
+- `mv`: Move files from one location to another.
+
+- `rm`: Delete specified files.
+
+## Network Analysis Commands
+
+These commands are useful for analyzing and troubleshooting network connections.
+
+- `traceroute` (Linux/Unix/MacOS) / `tracert` (Windows): Display the route and transit delay of packets across a network.
+
+- `tcpdump` (Linux/Unix/MacOS) / `Wireshark` (Windows): Capture and analyze network traffic.
+
+## Cyber Security Tools
+
+- `nmap`: Scan networks and hosts for open ports and network services.
+
+- `Metasploit`: A penetration testing framework that simplifies the discovery and exploitation of vulnerabilities.
+
+- `John the Ripper`: A password-cracking tool that automatically detects and cracks multiple password formats.
+
+- `Wireshark`: A network protocol analyzer that captures and analyzes network traffic.
+
+- `Aircrack-ng`: A suite of tools for auditing wireless networks.
+
+By familiarizing yourself with these common commands and tools, you'll have a solid foundation to build upon in your cyber security journey. As you progress, you will encounter more advanced tools and techniques, so keep learning and stay curious!

src/data/roadmaps/cyber-security/content/102-networking-knowledge/100-osi-model.md

@@ -1 +1,37 @@
-# Osi model
+# Understand the OSI model
+
+The **Open Systems Interconnection (OSI) model** is a framework that standardizes the functions of a telecommunication or computing system into seven distinct layers. This model is widely used to understand how different networking protocols and technologies work together to enable data transmission and communication.
+
+Given below are different layers of the OSI model, the primary functions they perform, and their relevance to network security.
+
+## Physical Layer
+
+The **Physical layer** deals with the physical connection between devices, like cables or wireless signals. It is responsible for transmitting raw data (in the form of bits) between devices over a physical medium, such as copper wires or fiber optic cables.
+
+## Data Link Layer
+
+The **Data Link layer** is responsible for creating a reliable link between two devices on a network. It establishes communication between devices by dividing the data into frames (small data units) and assigning each frame with a unique address. This layer also offers error detection and correction mechanisms to ensure reliable data transfer.
+
+## Network Layer
+
+The **Network layer** is responsible for routing data packets between different devices on a network, regardless of the physical connection medium. It determines the optimal path to transfer data between the source and destination devices and assigns logical addresses (IP addresses) to devices on the network.
+
+## Transport Layer
+
+The **Transport layer** is in charge of ensuring error-free and reliable data transmissions between devices. It achieves this by managing flow control, error checking, and data segmentation. This layer also establishes connections between devices and manages data transfer using protocols like Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).
+
+## Session Layer
+
+The **Session layer** manages sessions, which are continuous connections between devices. It establishes, maintains, and terminates connections between devices while ensuring proper synchronization and data exchange between the communication devices.
+
+## Presentation Layer
+
+The **Presentation layer** is responsible for translating or converting the data format between different devices, allowing them to understand each other's data. This layer also deals with data encryption and decryption, which is an essential aspect of network security.
+
+## Application Layer
+
+The **Application layer** is the interface between the user and the communication system. It is responsible for providing networking services for various applications, like email, web browsing, or file sharing.
+
+Each of these layers interacts with the adjacent layers to pass data packets back and forth. Understanding the OCI model is crucial for addressing potential security threats and vulnerabilities that can occur at each layer. By implementing strong network security measures at each layer, you can minimize the risk of cyber attacks and keep your data safe.
+
+In the next section, we will discuss network protocols and how they play an essential role in network communication and security.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/102-common-ports.md

@@ -1 +1,39 @@
-# Common ports
+# Common Ports and their Uses
+
+Ports are crucial in networking, as they facilitate communication between devices and applications. They act as endpoints in the networking process, enabling data transfer. We've compiled a list of commonly used ports to help you understand their significance in cyber security.
+
+## Transmission Control Protocol (TCP) Ports
+
+- **FTP (File Transfer Protocol) - Ports 20 and 21**: FTP is a widely used protocol for transferring files.
+
+- **SSH (Secure Shell) - Port 22**: SSH allows secure communication and remote access to devices over an unsecured network.
+
+- **Telnet - Port 23**: Telnet is a text-based protocol that allows you to interact with remote devices over networks.
+
+- **SMTP (Simple Mail Transfer Protocol) - Port 25**: SMTP is a protocol for sending and receiving emails.
+
+- **DNS (Domain Name System) - Port 53**: DNS translates human-readable domain names into IP addresses to facilitate communication between devices.
+
+- **HTTP (Hypertext Transfer Protocol) - Port 80**: HTTP is the primary protocol used for communication on the World Wide Web.
+
+- **POP3 (Post Office Protocol 3) - Port 110**: POP3 is a protocol for receiving emails from your email server.
+
+- **IMAP (Internet Message Access Protocol) - Port 143**: IMAP is a more advanced email protocol that allows you to access and manage your emails on the email server.
+
+- **HTTPS (Hypertext Transfer Protocol Secure) - Port 443**: HTTPS is an encrypted and secure version of HTTP.
+
+- **RDP (Remote Desktop Protocol) - Port 3389**: RDP is a Microsoft-developed protocol for remotely accessing Windows devices.
+
+## User Datagram Protocol (UDP) Ports
+
+- **DHCP (Dynamic Host Configuration Protocol) - Ports 67 and 68**: DHCP is used to allocate IP addresses to devices within a network.
+
+- **DNS (Domain Name System) - Port 53**: (same function as in TCP)
+
+- **TFTP (Trivial File Transfer Protocol) - Port 69**: TFTP is a simplified version of FTP for quick and easy file transfer.
+
+- **SNMP (Simple Network Management Protocol) - Port 161**: SNMP enables monitoring and managing network devices, including printers, routers, and switches.
+
+- **NTP (Network Time Protocol) - Port 123**: NTP is a standard protocol used to synchronize time across network devices.
+
+Understanding these common ports and their functions is essential for network administrators and cyber security professionals. Proper knowledge of these ports will help you identify and assess potential security risks, as well as implement robust network defense measures.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/103-ssl-and-tls-basics.md

@@ -1 +1,29 @@
-# Ssl and tls basics
+# SSL and TLS Basics
+
+Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are cryptographic protocols designed to provide secure communication over a computer network. They play a vital role in protecting sensitive information transmitted online, such as login credentials, financial information, and private user data.
+
+## Secure Sockets Layer (SSL)
+
+SSL is the predecessor to TLS and was first introduced in the 1990s. It creates an encrypted connection between a client (typically a web browser) and a server to ensure that any data transmitted remains private and secure. SSL uses a combination of symmetric and asymmetric encryption methods, as well as digital certificates, to establish and maintain secure communication.
+
+## Transport Layer Security (TLS)
+
+TLS is an improved and more secure version of SSL, with TLS 1.0 being released as an upgrade to SSL 3.0. The current version, as of this guide, is TLS 1.3. TLS provides a more robust and flexible security framework, addressing many of the vulnerabilities present in SSL. While many people still refer to SSL when discussing secure web communication, it's important to note that SSL has been deprecated, and TLS is the best-practice standard for secure communication.
+
+## Key Components
+
+* **Encryption**: SSL and TLS use powerful algorithms to protect data through encryption, ensuring it's unreadable by anyone without the proper decryption keys.
+* **Authentication**: SSL/TLS digital certificates verify the identities of clients and servers, providing trust and authenticity.
+* **Integrity**: These security protocols use message authentication codes to ensure that the data sent between clients and servers has not been tampered with during transmission.
+
+## Handshake Process
+
+SSL and TLS follow a series of steps, known as the "handshake process," to create a secure connection:
+
+- **Client hello**: The client initiates the handshake process by sending a message with supported cryptographic algorithms, random numbers, and session information.
+- **Server hello**: The server responds with its chosen cryptographic algorithms, random numbers, and its digital certificate. Optionally, the server can request the client's certificate for mutual authentication.
+- **Client verification**: The client verifies the server's certificate and may send its own if requested. It then creates a pre-master secret, encrypts it with the server's public key, and sends it to the server.
+- **Key generation and exchange**: Both the client and server generate the master secret and session keys using the pre-master secret and shared random numbers. These keys are used for encrypting and decrypting the data transmitted.
+- **Secured connection**: Once the keys are exchanged, the client and server can now communicate securely using the established encryption and keys.
+
+Secure communication is critical for any organization handling sensitive data. SSL and TLS serve as the backbone for protecting data in transit and play a significant role in ensuring the confidentiality, integrity, and authenticity of online communications.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/104-basics-of-nas-and-san.md

@@ -1 +1,34 @@
-# Basics of nas and san
+# Basics of NAS and SAN
+
+Network Attached Storage (NAS) and Storage Area Network (SAN) technologies play a crucial role in managing data within an organization and serve as the building blocks for a more comprehensive IT infrastructure.
+
+## Network Attached Storage (NAS)
+
+NAS is a high-capacity storage solution that operates on a data file level, allowing multiple users and clients to access, store, and retrieve data from a centralized location over a network. NAS devices are generally connected to a local area network (LAN) and use various file-sharing protocols, such as NFS (Network File System), SMB/CIFS (Server Message Block/Common Internet File System), or AFP (Apple Filing Protocol).
+
+Some key features of a NAS system include:
+
+- **Ease of Deployment**: NAS devices are simple to install and configure, facilitating quick integration into existing network infrastructures.
+- **Scalability**: NAS systems can be easily expanded to accommodate growing storage needs by adding more drives or units.
+- **Data Protection**: Most NAS devices offer data protection features such as RAID (Redundant Array of Independent Disks), data backup, and data encryption.
+
+## Storage Area Network (SAN)
+
+SAN is a high-performance, dedicated storage network designed to provide block-level data storage for applications and servers. Unlike NAS, which uses file-sharing protocols, SANs utilize block-based protocols such as Fibre Channel (FC) and iSCSI (Internet Small Computer System Interface) to handle storage requests.
+
+SANs offer several advantages in terms of performance, reliability, and scalability:
+
+- **Performance**: SANs can handle low-latency, high-speed data transfers, providing optimal performance for mission-critical applications and large-scale virtualization.
+- **Fault Tolerance**: SANs are designed to provide redundancy and failover capabilities, ensuring continued access to data in the event of hardware failures.
+- **Scalability**: SANs can be easily scaled by adding more disk arrays, switches, or connections to meet growing storage demands.
+
+## NAS vs. SAN: Choosing the Right Solution
+
+When it comes to deciding between NAS and SAN, there are several factors to consider:
+
+- **Cost**: NAS devices are generally more affordable than SANs, making them an attractive option for smaller organizations or environments with limited budgets.
+- **Infrastructure**: NAS solutions can be more easily integrated into existing network infrastructures, whereas SANs may require dedicated hardware, connections, and management tools.
+- **Performance Requirements**: If you need high-performance storage for intensive applications, SANs may be a more appropriate choice than NAS.
+- **Data Management**: While NAS solutions excel in handling file-based storage, SANs provide better support for block-level storage and can deliver improved performance for virtualized environments and database applications.
+
+It's essential to evaluate your organization's specific needs and requirements to determine which storage solution is the most appropriate fit. As you expand your knowledge in cyber security, a solid understanding of both NAS and SAN technologies will prove invaluable in implementing secure and efficient data storage systems.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/105-basics-of-subnetting.md

@@ -1 +1,53 @@
-# Basics of subnetting
+# Basics of Subnetting
+
+Subnetting is the process of dividing an IP network into smaller sub-networks called subnets. It allows better allocation of IP addresses and provides better organization, control, and security for the network. Here we go through some of the basic concepts of subnetting and why it's crucial for cybersecurity.
+
+## IP Addresses and Subnet Masks
+
+An IP address is a unique identifier for devices on a network. It consists of two parts: the network address and the host address. The network address indicates the network to which a device belongs, while the host address identifies the specific device within that network.
+
+Subnet masks are used to define which portion of an IP address is the network address and which is the host address. For example, in the IP address `192.168.1.5`, and subnet mask `255.255.255.0`, the network address is `192.168.1.0`, and the host address is `5`.
+
+## Why Subnetting?
+
+Subnetting has several advantages, including:
+
+- **Improved Network Performance**: Breaking a large network into smaller subnets helps reduce congestion and improve overall performance.
+- **Enhanced Security**: By isolating different parts of a network, you can control access and limit the spread of potential threats.
+- **Easier Administration**: Smaller networks are easier to manage and maintain, as it's simpler to track issues and allocate resources.
+
+## Subnetting Process
+
+The process of subnetting involves the following steps:
+
+- **Choose the Appropriate Subnet Mask**: Determine the right subnet mask for your network based on the number of required subnets and hosts. The more subnets you need, the more bits you will "borrow" from the host portion of the IP address.
+
+- **Divide the Network into Subnets**: Calculate the subnet addresses by incrementing the network portion of the IP address by the value of the borrowed bits.
+
+- **Determine Host Ranges**: Calculate the valid host addresses within each subnet by identifying the first and last usable IP addresses. Remember that the first address in a subnet is the network address, and the last address is used for broadcasting.
+
+- **Assign IP Addresses**: Allocate IP addresses to devices within their respective subnets, and configure devices with the correct subnet mask.
+
+## Example
+
+Let's suppose we have the network `192.168.1.0` with a subnet mask of `255.255.255.0`. We want to create four smaller subnets. Here's how we can do it:
+
+- `255.255.255.0` in binary is `11111111.11111111.11111111.00000000`. We can borrow 2 bits from the host portion to create four subnets: `11111111.11111111.11111111.11000000`, which is `255.255.255.192` in decimal format.
+
+- Our subnets will have the following network addresses:
+
+   - `192.168.1.0`
+   - `192.168.1.64`
+   - `192.168.1.128`
+   - `192.168.1.192`
+
+- The valid host ranges within each subnet are:
+
+   - `192.168.1.1 - 192.168.1.62`
+   - `192.168.1.65 - 192.168.1.126`
+   - `192.168.1.129 - 192.168.1.190`
+   - `192.168.1.193 - 192.168.1.254`
+
+- Allocate IP addresses from these host ranges to devices within their respective subnets, and configure devices with the correct subnet mask (`255.255.255.192`).
+
+Understanding the basics of subnetting is essential to properly configuring and securing your network. By efficiently dividing your network into smaller subnets, you can optimize performance, organization, and security.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/106-ip-terminology/100-public-vs-private-ip-addresses.md

@@ -1 +1,37 @@
-# Public vs private ip addresses
+# Public vs Private IP Addresses
+
+When it comes to IP addresses, they are categorized in two major types: Public IP Addresses and Private IP Addresses. Both play a key role in network communication; however, they serve different purposes. Let's examine them more closely:
+
+## Public IP Addresses
+
+A public IP address is a globally unique IP address that is assigned to a device or a network. This type of IP address is reachable over the Internet and enables devices to communicate with other devices, servers, and networks located anywhere in the world. 
+
+Here are some key features of public IP addresses:
+
+- Routable over the Internet.
+- Assigned by the Internet Assigned Numbers Authority (IANA).
+- Usually assigned to an organization or Internet Service Provider (ISP).
+- Can be either static (permanent) or dynamic (changes periodically).
+
+Example: `72.14.207.99`
+
+## Private IP Addresses
+
+Private IP addresses, on the other hand, are used within local area networks (LANs) and are not visible on the Internet. These addresses are reserved for internal use within an organization, home, or local network. They are often assigned by a router or a network administrator for devices within the same network, such as your computer, printer, or smartphone.
+
+Here are some key features of private IP addresses:
+
+- Not routable over the Internet (requires Network Address Translator (NAT) to communicate with public IP addresses).
+- Assigned by local network devices, such as routers or network administrators.
+- Reusable in different private networks (as they are not globally unique).
+- Static or dynamic (depending on the network's configuration).
+
+Private IP address ranges:
+
+- `10.0.0.0` to `10.255.255.255` (Class A)
+- `172.16.0.0` to `172.31.255.255` (Class B)
+- `192.168.0.0` to `192.168.255.255` (Class C)
+
+Example: `192.168.1.100`
+
+In summary, public IP addresses are used for communication over the Internet, whereas private IP addresses are used within local networks. Understanding the difference between these two types of IP addresses is essential for grasping the basics of network connectivity and cyber security.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/106-ip-terminology/101-localhost.md

@@ -1 +1,25 @@
-# Localhost
+# localhost
+
+Localhost (also known as loopback address) is a term used to define a network address that is used by a device (usually a computer or a server) to refer to itself. In other words, it's a way for your device to establish a network connection to itself. The most commonly used IP address for localhost is `127.0.0.1`, which is reserved as a loopback address in IPv4 networks. For IPv6 networks, it's represented by `::1`. 
+
+## Purpose and Usage of Localhost
+
+Localhost is useful for a variety of reasons, such as:
+
+- **Testing and Development**: Developers can use localhost to develop and test web applications or software without the need for connecting to external network resources.
+
+- **Network Services**: Some applications and servers use localhost to provide network services to the local system only, optimizing performance and security.
+
+- **Troubleshooting**: Localhost can be used as a diagnostic tool to test if the network stack on the device is functioning correctly.
+
+## Connecting to Localhost
+
+To connect to localhost, you can use several methods depending on the tasks you want to accomplish:
+
+- **Web Browser**: If you're running a local web server, you can simply enter `http://127.0.0.1` or `http://localhost` in your browser's address bar and access the locally hosted web application.
+
+- **Command Line**: You can use utilities like `ping`, `traceroute`, or `telnet` at the command prompt to verify connectivity and network functionality using localhost.
+
+- **Application Settings**: Some applications, such as web servers or database servers, may have configuration settings that allow you to bind them to the loopback address (`127.0.0.1` or `::1`). This will restrict the services to the local system and prevent them from being accessed by external sources.
+
+Remember, connections to localhost do not pass through your computer's physical network interfaces, and as such, they're not subject to the same security risks or performance limitations that a real network connection might have.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/106-ip-terminology/102-loopback.md

@@ -1 +1,22 @@
-# Loopback
+# loopback
+
+Loopback is an essential concept in IP terminology that refers to a test mechanism used to validate the operation of various network protocols, and software or hardware components. The primary function of the loopback feature is to enable a device to send a data packet to itself to verify if the device's network stack is functioning correctly.
+
+## Importance of Loopback
+
+The concept of loopback is critical for the following reasons:
+
+- **Troubleshooting**: Loopback helps in diagnosing and detecting network connectivity issues. It can also help ascertain whether an application or device is correctly processing and responding to incoming network traffic.
+- **Testing**: Loopback can be used extensively by developers to test software applications or components without external network access. This ensures that the software behaves as expected even without a working network connection.
+
+## Loopback Address
+
+In IP terminology, there's a pre-allocated IP address for loopback. For IPv4, the reserved address is `127.0.0.1`. For IPv6, the loopback address is `::1`. When a device sends a packet to either of these addresses, the packet is rerouted to the local device, making it the source and destination simultaneously.
+
+## Loopback Interface
+
+Apart from loopback addresses, there's also a network device known as the "loopback interface." This interface is a virtual network interface implemented in software. The loopback interface is assigned a loopback address and can be used to emulate network connections for various purposes, such as local services or inter-process communications.
+
+## Summary
+
+Loopback plays a crucial role in IP technology by enabling devices to run diagnostic tests and validate the correct functioning of software and hardware components. Using the loopback addresses for IPv4 (`127.0.0.1`) and IPv6 (`::1`), it allows network packets to circulate internally within the local device, facilitating developers to test and verify network operations.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/106-ip-terminology/102-wan.md

@@ -1 +1,31 @@
-# Wan
+# WAN
+
+A **Wide Area Network (WAN)** is a telecommunication network that extends over a large geographical area, such as interconnecting multiple local area networks (LANs). WANs commonly use leased lines, circuit switching, or packet switching to transmit data between LANs, allowing them to share resources and communicate with one another. A WAN can be privately owned and managed, or leased from telecommunication service providers.
+
+## Characteristics of WANs
+
+- **Large geographic coverage**: WANs can span across cities, states, and even countries, making them suitable for businesses with multiple locations requiring connectivity.
+
+- **Communication technologies**: WANs rely on multiple technologies for communication, such as fiber optic cables, leased line connections, satellite links, and even cellular networks.
+
+- **Data transmission rates**: WANs generally offer lower data transfer rates as compared to LANs, primarily due to the longer distances and increased complexity.
+
+- **Higher latency**: WANs can suffer from higher latency (delay in data transmission) due to the physical distance involved and routing of traffic through various devices and service providers.
+
+- **Security concerns**: Given the broad scope and involvement of third-party service providers, securing WAN connections is crucial to protect sensitive data transmission and maintain privacy.
+
+## Common WAN Technologies
+
+Here are a few widely-used WAN technologies:
+
+- **Leased Line**: A dedicated, point-to-point communication link provided by telecommunication service providers. It offers a fixed bandwidth and guaranteed quality of service (QoS), making it suitable for businesses requiring high-speed and consistent connectivity.
+
+- **Multiprotocol Label Switching (MPLS)**: A protocol for high-speed data transfer between network nodes. MPLS enables traffic engineering, Quality of Service (QoS), and efficient use of bandwidth by labeling data packets and directing them over a predetermined path.
+
+- **Virtual Private Network (VPN)**: A VPN works by creating an encrypted tunnel over the internet between the two communicating sites, effectively creating a private and secure connection over a public network.
+
+- **Software-Defined WAN (SD-WAN)**: A technology that simplifies the management and operation of WANs by decoupling the networking hardware from its control mechanism. It allows businesses to use a combination of transport resources, optimize network traffic, and improve application performance.
+
+## Conclusion
+
+Understanding the concept of WAN is essential in the context of cyber security, as it forms the backbone of connectivity between remote LANs. Ensuring security measures are taken to protect data transmission over WANs is crucial to maintaining the overall protection of businesses and their sensitive information.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/106-ip-terminology/103-cidr.md

@@ -1 +1,23 @@
-# Cidr
+# CIDR
+
+CIDR, or Classless Inter-Domain Routing, is a method of allocating IP addresses and routing Internet Protocol packets in a more flexible and efficient way, compared to the older method of Classful IP addressing. Developed in the early 1990s, CIDR helps to slow down the depletion of IPv4 addresses and reduce the size of routing tables, resulting in better performance and scalability of the Internet.
+
+## How CIDR works
+
+CIDR achieves its goals by replacing the traditional Class A, B, and C addressing schemes with a system that allows for variable-length subnet masking (VLSM). In CIDR, an IP address and its subnet mask are written together as a single entity, referred to as a _CIDR notation_. 
+
+A CIDR notation looks like this: `192.168.1.0/24`. Here, `192.168.1.0` is the IP address, and `/24` represents the subnet mask. The number after the slash (/) is called the _prefix length_, which indicates how many bits of the subnet mask should be set to 1 (bitmask). The remaining bits of the subnet mask are set to 0.
+
+For example, a `/24` prefix length corresponds to a subnet mask of `255.255.255.0`, because the first 24 bits are set to 1. This allows for 256 total IP addresses in the subnet, with 254 of these IPs available for devices (The first and last IP are reserved for the network address and broadcast address, respectively).
+
+## Advantages of CIDR
+
+- **Efficient IP allocation:** CIDR allows for more granular allocation of IPv4 addresses, reducing wasted IP space.
+- **Reduction of routing table size:** CIDR enables route aggregation (route summarization), which combines multiple network routes to a single routing table entry.
+- **Decreased routing updates:** By allowing routers to share more generalized routing information, the number of routing updates gets significantly reduced, improving network stability and reducing router workload.
+
+## CIDR in IPv6
+
+CIDR also plays a crucial role in the IPv6 addressing system, where the use of CIDR notation and address aggregation has become even more critical in managing the immense address space of IPv6 efficiently.
+
+In conclusion, CIDR is an essential component of modern IP networking systems, enabling better utilization of IP address space and improving the overall scalability and performance of the Internet. It's crucial for network administrators and security professionals to have a solid understanding of CIDR, as it plays a significant role in configuring, managing, and securing IP networks.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/106-ip-terminology/104-subnet-mask.md

@@ -1 +1,24 @@
-# Subnet mask
+# subnet mask
+
+A **subnet mask** is a crucial component of Internet Protocol (IP) addressing, acting as a "mask" to separate the network portion of an IP address from the host portion. It is a 32-bit number representing a sequence of 1's followed by a sequence of 0's, used to define the boundary of a subnet within a given IP address.
+
+The primary purpose of a subnet mask is to:
+
+- Define network boundaries
+- Facilitate IP routing
+- Break down large IP networks into smaller, manageable subnetworks (subnets)
+
+## Format
+
+The subnet mask is written in the same dotted-decimal format as IP addresses (i.e., four octets separated by dots). For instance, the default subnet mask for a Class A IP address is `255.0.0.0`, for Class B is `255.255.0.0`, and for Class C is `255.255.255.0`.
+
+## Importance in Cybersecurity
+
+Understanding and configuring subnet masks correctly is crucial in cybersecurity, as they:
+
+- Help to isolate different segments of your network, leading to greater security control and more efficient usage of resources
+- Facilitate the division of IP networks into smaller subnets, which can then be assigned to different departments, groups, or functions within an organization
+- Enhance network efficiency by preventing unnecessary broadcast traffic
+- Improve the overall network stability and monitoring capabilities
+
+To determine the appropriate subnet mask for different requirements, you can use various subnetting tools available online. Proper management of subnet masks is crucial for maintaining a secure, efficient, and well-functioning network.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/106-ip-terminology/105-default-gateway.md

@@ -1 +1,25 @@
-# Default gateway
+# default gateway
+
+In our journey through IP terminology, we now arrive at the topic of **Default Gateway**. Understanding the role and importance of the default gateway in a network is crucial for grasping the fundamentals of cyber security and data routing.
+
+## Overview
+
+The default gateway is basically a device (usually a router) on a network which serves as an access point for data traffic to travel from the local network to other networks, such as the internet. This device acts as a "middleman" between your computer and external networks, and is often set up by your internet service provider (ISP) or during the configuration of your own router.
+
+## Role in Networks
+
+In a nutshell, the default gateway plays the following roles:
+
+- **Packet Routing**: It directs the network packets from your local computer or device to their ultimate destination. When a packet with a destination IP address is not on the same network as the source device, the default gateway routes the packet to the appropriate external network.
+
+- **Address Resolution Protocol (ARP)**: The default gateway obtains the physical address (MAC address) of a computer that is located on another network by using ARP.
+
+- **Protection**: In many cases, the default gateway also serves as a layer of network protection by restricting access to certain external networks, as well as regulating traffic from the internet.
+
+## Configuration
+
+To benefit from the services of a default gateway, your device needs to be properly configured. Most devices and operating systems obtain their network settings (including the default gateway address) automatically using DHCP. But you can also configure network settings manually if needed.
+
+**Note**: Each device connected to a network must have a unique IP address. Also, remember that devices on the same network should use the same default gateway address.
+
+In conclusion, recognizing the significance of the default gateway and having a working knowledge of how it functions is an essential part of IP terminology, affecting both cyber security and efficient data routing. Continuing your education on the subject will better equip you to take advantage of your devices' networking features, as well as protect your valuable data from potential cyber threats.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/106-ip-terminology/index.md

@@ -1 +1,43 @@
-# Ip terminology
+# IP Terminology
+
+Understanding IP Terminology is essential in grasping the fundamentals of networking and cybersecurity. In this section, we'll cover essential terms in the world of IP networks.
+
+## Internet Protocol (IP)
+
+IP is a protocol that enables data exchange between computers over a network. Each device in the network has a unique IP address, enabling data packets to be sent correctly.
+
+## IPv4 and IPv6
+
+*IPv4*: It's the fourth version of IP, using 32-bit addresses and allowing a total of about 4.3 billion unique addresses.
+
+*IPv6*: To overcome the exhaustion of IPv4 addresses, IPv6 was introduced. It expands the number of unique addresses by using 128-bit addresses, providing a virtually limitless pool of addresses.
+
+## IP Address
+
+An IP address is a unique identifier for devices on the internet or a local network. It helps in routing the data packets between different devices in the network.
+
+## Subnets
+
+A subnet is a smaller, designated portion of a network. Subnet masks help to define and isolate each subnet to manage traffic.
+
+## DHCP (Dynamic Host Configuration Protocol)
+
+DHCP is a protocol that assigns IP addresses dynamically to devices when they connect to a network, as opposed to static IP addresses.
+
+## DNS (Domain Name System)
+
+DNS is the system responsible for translating human-readable domain names like www.example.com into IP addresses so that data can be routed correctly.
+
+## Ports
+
+A port is a communication endpoint within a networking device. It allows the device to differentiate multiple connections and applications. Protocols, such as HTTP and FTP, have assigned default ports (80 and 21, respectively).
+
+## NAT (Network Address Translation)
+
+NAT allows multiple devices in a private network to share a single public IP address when connecting to the internet. This conserves the number of IP addresses and adds an additional layer of privacy.
+
+## Firewall
+
+A firewall is a security measure that filters, monitors, and controls incoming and outgoing traffic in a network. It helps to protect devices and data from unauthorized access or malicious activities.
+
+By understanding these IP terminologies, you'll be better equipped to handle networking and cybersecurity tasks.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/107-network-topologies/100-star-topology.md

@@ -1 +1,20 @@
-# Star topology
+# Star
+
+In a star network topology, all devices (nodes) are connected to a central device, called a hub or switch. The central device manages the data transmission between the devices connected to it, creating a star-like structure. 
+
+## Advantages
+
+- **Easy to Install and Configure**: Adding new devices or removing existing ones is quite simple, as they only have to connect or disconnect from the central hub or switch.
+- **Fault-Tolerance**: If a device fails or a connection is broken, the rest of the devices can continue to communicate with each other without any major impact.
+- **Centralized Management**: The central hub or switch can easily manage and monitor the network devices, which makes troubleshooting and maintenance more efficient.
+- **Scalability**: It is easy to expand a star network by connecting additional devices to the central hub or switch, allowing for network growth without affecting performance.
+
+## Disadvantages
+
+- **Dependency on Central Hub or Switch**: If the central device fails, the entire network becomes inoperable. It is essential to ensure the reliability of the central device in a star network.
+- **Cost**: Since a central hub or switch is required, star topologies can be more expensive compared to other network topologies, especially when dealing with larger networks. Additionally, cabling costs can be higher due to individual connections to the central device.
+- **Limited Range**: The distance between devices is determined by the length of the cables connecting to the central hub or switch. Longer cable runs can increase latency and decrease network performance.
+
+## Applications
+
+Star topology is commonly used in home and office networks, as well as in local area networks (LANs). It is a suitable choice when centralized control and easier network management are necessary, or when scalability and easy addition of new devices are priority.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/107-network-topologies/101-ring-topology.md

@@ -1 +1,17 @@
-# Ring topology
+# Ring
+
+Ring topology is a type of network configuration where each device is connected to two other devices, forming a circular layout or ring. In this topology, data packets travel from one device to another in a unidirectional manner until they reach the intended recipient or return to the sender, indicating that the recipient was not found in the network.
+
+## Advantages of Ring Topology
+
+- **Easy to Install and Configure:** Ring topology is relatively simpler to set up and maintain as it involves connecting each device to the two adjacent devices only.
+- **Predictable Data Transfer Time:** As data packets move in a circular pattern, it becomes easier to predict the maximum time required for a packet to reach its destination.
+- **Minimal Network Congestion:** The unidirectional flow of packets can significantly reduce the chances of network congestion, as the collision of data packets is less likely.
+
+## Disadvantages of Ring Topology
+
+- **Dependency on All Devices:** The malfunctioning of a single device or cable can interrupt the entire network, making it difficult to isolate the cause of the issue.
+- **Limited Scalability:** Adding or removing devices in a ring topology can temporarily disrupt the network as the circular pattern needs to be re-established.
+- **Slower Data Transfer:** Since data packets must pass through multiple devices before reaching the destination, the overall speed of data transfer can be slower compared to other topologies.
+
+Despite its drawbacks, ring topology can be a suitable option for small networks with a predictable data transfer pattern that require minimal maintenance and setup effort. However, for larger and more complex networks, other topologies like star, mesh, or hybrid configurations may provide better flexibility, reliability, and performance.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/107-network-topologies/102-mesh-topology.md

@@ -1 +1,19 @@
-# Mesh topology
+# Mesh
+
+Mesh topology is a network configuration that involves direct connections between each node or device within the network. In other words, each node is connected to every other node in the network, resulting in a highly interconnected structure. This topology is commonly used in wireless communication systems, where devices communicate with one another directly without the need for a centralized hub or switch.
+
+## Advantages of Mesh Topology
+
+- **Increased reliability**: Mesh topology is highly reliable, as the failure of one node or connection does not affect the performance of the entire network. If a connection fails, data can still travel through alternative routes within the network, ensuring uninterrupted communication.
+- **Fault tolerance**: Mesh networks have a high level of fault tolerance, as they can easily recover from hardware failures or network errors. This is especially useful for critical systems that require high availability and resilience.
+- **Scalability**: Mesh networks are highly scalable, as there are no limitations on the number of devices that can be added to the network. This is particularly useful for large organizations or rapidly changing environments that require the ability to easily grow and adapt.
+- **Improved data transmission**: The direct connections between nodes in a mesh network provide multiple pathways for data transmission, resulting in faster, more efficient communication with fewer bottlenecks or congestion points.
+
+## Disadvantages of Mesh Topology
+
+- **Complexity**: Mesh topology can be quite complex, particularly as the number of devices increases. This can lead to challenges in configuring, managing, and troubleshooting the network.
+- **High costs**: Implementing a mesh topology can be expensive due to the large number of connections and high-quality hardware required to maintain a reliable, efficient network.
+- **Increased latency**: As data travels through multiple nodes before reaching its destination, this can sometimes result in increased latency compared to other network topologies.
+- **Power consumption**: Wireless mesh networks, in particular, can consume more power than other topologies due to the need for each node to maintain multiple connections, potentially reducing the battery life of devices.
+
+In summary, mesh topology offers a robust, fault-tolerant, and scalable network configuration ideal for systems that demand high reliability and flexible growth. However, its complexity, costs, and potential latency and power consumption issues need to be carefully considered when deciding whether it is the most suitable network topology for a specific scenario.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/107-network-topologies/103-bus-topology.md

@@ -1 +1,21 @@
-# Bus topology
+# Bus
+
+A **bus topology** is a type of network configuration where all the devices or nodes in the network are connected to a single, central cable known as the bus, backbone or trunk. This common shared path serves as the medium for data transmission and communication amongst the nodes. 
+
+## How Bus Topology Works
+
+In a bus topology, every node has a unique address that identifies it on the network. When a node wants to communicate with another node in the network, it broadcasts a message containing the destination node's address as well as its own address. All the nodes connected to the bus receive the message, but only the intended recipient with the matching address responds.
+
+## Advantages of Bus Topology
+
+- **Easy to set up**: Bus topology is relatively simple in terms of installation, as it requires less cable and minimal hardware.
+- **Cost-effective**: Due to its simplicity and reduced cabling requirements, it's typically more affordable to implement than other topologies.
+- **Expandable**: New nodes can be easily added to the network by connecting them to the bus.
+
+## Disadvantages of Bus Topology
+
+- **Limited Scalability**: As the number of nodes increases, network performance may decrease due to increased collisions and data transmission time.
+- **Single point of failure**: If the central cable (bus) fails or gets damaged, the entire network will be affected and may result in a complete breakdown.
+- **Maintenance difficulty**: Troubleshooting and identifying issues within the network can be challenging due to the shared path for data transmission.
+
+Bus topology can be an effective solution for small networks with minimal devices. However, as network size and complexity increase, other topologies such as star, ring, or mesh may be more suitable for maintaining efficiency and reliability.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/107-network-topologies/index.md

@@ -1 +1,68 @@
-# Network topologies
+# Network Topologies
+
+Network topologies describe the arrangement of various devices in a network, their connections, and the flow of data between them. Understanding common network topologies can help you identify potential vulnerabilities and enhance your overall cybersecurity posture. Here, we'll briefly discuss the different types of network topologies and their advantages and disadvantages.
+
+## Bus Topology
+
+In a bus topology, all devices in the network are connected to a single communication medium (usually a coaxial cable) called a "bus." Data is transmitted in a single direction along the bus, and devices look for their address in the data to know if it's meant for them.
+
+**Advantages:**
+- Easy to set up and extend
+- Requires less cabling than other topologies
+
+**Disadvantages:**
+- If the main cable fails, the entire network fails
+- Performance degrades as more devices are added
+- Limited cable length and number of devices
+
+## Star Topology
+
+A star topology connects all devices to a central point or hub (typically a switch or a router). The central point is responsible for transmitting data between devices in the network.
+
+**Advantages:**
+- Easy to add or remove devices without affecting the rest of the network
+- If one device fails, it doesn't affect the entire network
+- Centralized management
+
+**Disadvantages:**
+- Requires more cabling than bus topology
+- If the central hub fails, the entire network fails
+
+## Ring Topology
+
+In a ring topology, devices are connected in a circular pattern, with each device having exactly two neighbors. Data is transmitted in one direction around the ring, passing through each device before reaching its destination.
+
+**Advantages:**
+- Equal access to resources for all devices
+- Can handle high-traffic loads
+
+**Disadvantages:**
+- Adding or removing devices can disrupt the network
+- If one device fails, it can affect the entire network
+- Data transmission can be slow due to the loop structure
+
+## Mesh Topology
+
+A mesh topology connects all devices directly to every other device in the network. It can be a full mesh (where every device is connected to every other device) or a partial mesh (where some devices are connected to all others, while others maintain only a few connections).
+
+**Advantages:**
+- High fault-tolerance and redundancy, making it more resilient
+- Eliminates the need for a central hub
+
+**Disadvantages:**
+- Requires a large number of cables, making it expensive and difficult to manage
+- Can be challenging to set up and maintain
+
+## Hybrid Topology
+
+A hybrid topology combines two or more different topologies, such as a star and ring topology, in a single network. It can be customized to fit specific network requirements and performance needs.
+
+**Advantages:**
+- Can be tailored to meet specific needs
+- Optimizes the strengths of various topologies
+
+**Disadvantages:**
+- Can be complex and difficult to manage
+- More expensive than other topologies
+
+Understanding these different network topologies can help you design a more secure and efficient network or improve the existing network structure in your organization. It's essential to consider factors such as scalability, reliability, and cost when selecting the best topology for your needs.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/108-common-protocols/100-ssh.md

@@ -1 +1,33 @@
-# Ssh
+# SSH
+
+SSH, or Secure Shell, is a cryptographic network protocol that provides a secure and encrypted method for managing network devices and accessing remote servers. SSH is widely used by administrators and developers to enable secure remote access, file transfers, and remote command execution over unsecured networks, such as the internet.
+
+## Key Features
+
+* **Encryption**: SSH uses a variety of encryption algorithms to ensure the confidentiality and integrity of data transmitted between the client and server.
+
+* **Authentication**: SSH supports multiple authentication methods, including password-based, public key, and host-based authentication, providing flexibility in securely verifying the identities of communicating parties.
+
+* **Port Forwarding**: SSH allows forwarding of network ports, enabling users to tunnel other protocols securely, such as HTTP or FTP, through an encrypted connection.
+
+* **Secure File Transfer**: SSH provides two file transfer protocols, SCP (Secure Copy Protocol) and SFTP (SSH File Transfer Protocol), to securely transfer files between a local client and remote server.
+
+## Common Use Cases
+
+* **Remote System Administration**: Administrators can securely access and manage remote systems, such as servers and network devices, using SSH to execute commands and configure settings.
+
+* **Secure File Transfers**: Developers and administrators can transfer files securely between systems using SCP or SFTP, protecting sensitive data from eavesdropping.
+
+* **Remote Application Access**: Users can securely access remote applications by creating an SSH tunnel, allowing them to connect to services that would otherwise be inaccessible due to firewalls or other network restrictions.
+
+## Tips for Secure SSH Usage
+
+* **Disable root login**: To reduce the risk of unauthorized access, it is recommended to disable direct root login and use a standard user account with sudo privileges for administration tasks.
+
+* **Use Key-Based Authentication**: To further enhance security, disallow password-based authentication and use public key authentication instead, making it more difficult for attackers to gain access through brute-force attacks.
+
+* **Limit SSH Access**: Restrict SSH access to specific IP addresses or networks, minimizing the potential attack surface.
+
+* **Keep SSH Software Updated**: Regularly update your SSH client and server software to ensure you have the latest security patches and features.
+
+In summary, SSH is a vital protocol for ensuring secure communication, remote access, and file transfers. By understanding its key features, use cases, and best practices, users can leverage the security benefits of SSH to protect their sensitive data and systems.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/108-common-protocols/101-rdp.md

@@ -1 +1,32 @@
-# Rdp
+# RDP
+
+**Remote Desktop Protocol (RDP)**, developed by Microsoft, is a proprietary protocol that enables users to connect to a remote computer over a network, and access and control its resources, as if they were using the computer locally. This is useful for users who need to work remotely, manage servers or troubleshoot issues on another computer.
+
+## How RDP Works
+
+RDP uses a client-server architecture, where the remote computer being accessed acts as the server and the user's computer acts as the client. The client establishes a connection with the server to access its resources, such as display, keyboard, mouse, and other peripherals.
+
+The protocol primarily operates on standard Transmission Control Protocol (TCP) port 3389 (although it can be customized) and uses the User Datagram Protocol (UDP) to provide a more robust and fault-tolerant communication channel.
+
+## Features of RDP
+
+- **Multi-platform support:** Although developed by Microsoft, RDP clients are available for various platforms, including Windows, macOS, Linux, and even mobile devices like Android and iOS.
+- **Secure connection:** RDP can provide encryption and authentication to secure the connection between client and server, ensuring that data transmitted over the network remains confidential and protected from unauthorized access.
+- **Dynamic resolution adjustment:** RDP can adapt the remote computer's screen resolution to fit the client's screen, providing a better user experience.
+- **Clipboard sharing:** RDP allows users to copy and paste content between the local and remote computers.
+- **Printer and file sharing:** Users can access and print files from their local computer to the remote one, and vice versa.
+
+## Security Considerations
+
+Though RDP is popular and useful, it does come with its share of security concerns. Some common risks include:
+
+- Unauthorized access: If an attacker successfully gains access to an RDP session, they may be able to compromise and control the remote computer.
+- Brute force attacks: Attackers may use brute force techniques to guess login credentials, especially if the server has a weak password policy.
+- Vulnerabilities: As a proprietary protocol, RDP can be susceptible to vulnerabilities that could lead to system breaches.
+
+To mitigate these risks, you should:
+
+- Use strong, unique passwords for RDP accounts and consider implementing two-factor authentication.
+- Limit RDP access to specific IP addresses or Virtual Private Networks (VPNs) to reduce exposure.
+- Apply security patches regularly to keep RDP up-to-date and minimize the risk of exploits.
+- Employ network-level authentication (NLA) to offer an additional layer of security.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/108-common-protocols/102-ftp.md

@@ -1 +1,31 @@
-# Ftp
+# FTP
+
+**File Transfer Protocol (FTP)** is a standard network protocol used to transfer files from one host to another host over a TCP-based network, such as the Internet. Originally developed in the 1970s, it's one of the earliest protocols for transferring files between computers and remains widely used today.
+
+## How FTP Works
+
+FTP operates on a client-server model, where one computer acts as the client (the sender or requester) and the other acts as the server (the receiver or provider). The client initiates a connection to the server, usually by providing a username and password for authentication, and then requests a file transfer.
+
+FTP uses two separate channels to carry out its operations:
+
+- **Control Channel:** This channel is used to establish the connection between the client and the server and send commands, such as specifying the file to be transferred, the transfer mode, and the directory structure.
+- **Data Channel:** This channel is used to transfer the actual file data between the client and the server.
+
+## FTP Modes
+
+FTP offers two modes of file transfer:
+
+- **ASCII mode:** This mode is used for transferring text files. It converts the line endings of the files being transferred to match the format used on the destination system. For example, if the file is being transferred from a Unix system to a Windows system, the line endings will be converted from LF (Unix) to CR+LF (Windows).
+- **Binary mode:** This mode is used for transferring binary files, such as images, audio files, and executables. No conversion of the data is performed during the transfer process.
+
+## FTP Security Concerns
+
+FTP has some significant security issues, primarily because it was designed before the widespread use of encryption and authentication mechanisms. Some of these concerns include:
+
+- Usernames and passwords are transmitted in plain text, allowing anyone who can intercept the data to view them.
+- Data transferred between the client and server is not encrypted by default, making it vulnerable to eavesdropping.
+- FTP does not provide a way to validate a server's identity, leaving it vulnerable to man-in-the-middle attacks.
+
+To mitigate these security risks, several secure alternatives to the FTP protocol have been developed, such as FTPS (FTP Secure) and SFTP (SSH File Transfer Protocol), which encrypt data transfers and provide additional security features.
+
+In conclusion, FTP is a commonly used protocol for transferring files between computers over a network. While it is easy to use, it has significant security vulnerabilities that make it a less desirable option for secure file transfers. It's essential to use more secure alternatives like FTPS or SFTP for transferring sensitive data.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/108-common-protocols/103-sftp.md

@@ -1 +1,27 @@
-# Sftp
+# SFTP
+
+**SFTP** (Secure File Transfer Protocol) is a network protocol designed to securely transfer files over an encrypted connection, usually via SSH (Secure Shell). SFTP provides file access, file transfer, and file management functionalities, making it a popular choice for secure file transfers between a client and a server.
+
+## Key features of SFTP
+
+* **Security**: SFTP automatically encrypts data before it is sent, ensuring that your files and sensitive data are protected from unauthorized access while in transit.
+
+* **Authentication**: SFTP relies on SSH for user authentication, allowing you to use password-based, public key, or host-based authentication methods.
+
+* **File Integrity**: SFTP uses checksums to verify that transferred files have maintained their integrity during transport, allowing you to confirm that files received are identical to those sent.
+
+* **Resume Capability**: SFTP offers support for resuming interrupted file transfers, making it an ideal choice for transferring large files or transferring files over potentially unreliable connections.
+
+## How SFTP works
+
+SFTP operates over an established SSH connection between the client and server. Upon successful SSH authentication, the client can issue commands to the server, such as to list, upload, or download files. The data transferred between the client and server is encrypted, ensuring that sensitive information is not exposed during the transfer process.
+
+## When to use SFTP
+
+SFTP is an ideal choice whenever you need to securely transfer files between a client and a server. Examples of when you might want to use SFTP instead of other protocols include:
+
+* Transferring sensitive data such as customer information, financial records, or intellectual property.
+* Uploading or downloading files to/from a remote server in a secure manner, especially when dealing with confidential data.
+* Managing files on a remote server, which may involve creating, renaming, or deleting files and directories.
+
+Overall, SFTP provides a secure and reliable way of transferring files over the internet, making it an essential tool for maintaining the integrity and confidentiality of your data in today's cyber security landscape.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/108-common-protocols/104-http-https.md

@@ -1 +1,23 @@
-# Http https
+# HTTP / HTTPS
+
+HTTP (Hypertext Transfer Protocol) and HTTPS (Hypertext Transfer Protocol Secure) are two important protocols that are crucial for transferring data over the internet. They form the primary means of communication between web servers and clients (browsers).
+
+## HTTP
+
+HTTP is an application-layer protocol that allows clients and servers to exchange information, such as web pages, images, and other content. When you visit a website, your browser sends an HTTP request to the server, which then responds with the requested data. This data is then rendered by your browser.
+
+HTTP operates on a stateless, request-response model. This means that each request is independent of the others, making it a fast and efficient way of transmitting data.
+
+However, HTTP has one significant drawback — it's not secure. Since it's transmitted in plain text, anyone intercepting the traffic can easily read the content of the messages. This makes HTTP unsuitable for sensitive information like passwords or credit card numbers.
+
+## HTTPS
+
+To address the security concerns of HTTP, HTTPS was introduced as a secure alternative. HTTPS uses encryption to ensure that data transmitted between the client and server is confidential and cannot be deciphered by a third-party.
+
+HTTPS uses either SSL (Secure Sockets Layer) or TLS (Transport Layer Security) to encrypt data. These cryptographic protocols provide end-to-end security, ensuring data integrity and authentication. When you visit a website with HTTPS, you can be confident that your information is being securely transmitted.
+
+To implement HTTPS, websites need to obtain an SSL/TLS certificate from a trusted Certificate Authority (CA). This certificate authenticates the website's identity and helps establish a secure connection between the client and server.
+
+## In Summary
+
+When browsing the internet, always look for the padlock icon in the address bar, which indicates a secure HTTPS connection. This helps protect your personal information from being intercepted by attackers. As a website owner or developer, it's crucial to prioritize implementing HTTPS, to provide a secure and trustworthy experience for your users.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/108-common-protocols/105-ssl-tls.md

@@ -1 +1,33 @@
-# Ssl tls
+# SSL / TLS
+
+**Secure Socket Layer (SSL)** and **Transport Layer Security (TLS)** are cryptographic protocols designed to provide security and data integrity for communications over networks. These protocols are commonly used for securing web traffic and ensuring that sensitive information, such as credit card numbers and login credentials, are transmitted securely between clients (e.g., web browsers) and servers.
+
+## SSL
+
+SSL was developed by Netscape in the mid-1990s and has gone through several iterations. The last version, SSLv3, was released in 1996. SSL was deprecated in 2015 due to security concerns, and it is not recommended for use in modern applications.
+
+## TLS
+
+TLS is the successor to SSL and is continually evolving with new versions and updates. The most recent version, TLS 1.3, was released in 2018. TLS is widely used and considered the standard for securing web traffic.
+
+## How SSL/TLS Works
+
+SSL/TLS operates by encrypting the data transmitted between a client and a server, ensuring that the data cannot be easily intercepted or tampered with. The encryption is achieved using a combination of cryptographic algorithms, key exchanges, and digital certificates. 
+
+Here are the key steps in setting up an SSL/TLS connection:
+
+- **Handshake:** The client and server will engage in a process called a "handshake" to establish a secure connection. During this process, the client and server agree on which version of SSL/TLS to use, and choose the cipher suites and cryptographic algorithms they will use to secure the communication.
+
+- **Key Exchange:** The client and server will perform a key exchange, a process by which they generate and securely share encryption keys. These keys will be used to encrypt and decrypt the data being transmitted between them.
+
+- **Certificate Verification:** The server will provide a digital certificate, which contains its public key and information about the server. The client checks the validity of the certificate by confirming that it was issued by a trusted Certificate Authority (CA) and has not expired.
+
+- **Secure Communication:** Once the handshake, key exchange, and certificate verification are complete, the client and server can begin securely transmitting data using the encryption keys they have shared.
+
+## Advantages of SSL/TLS
+
+- **Secure communication:** SSL/TLS provides a secure, encrypted tunnel for data to be transmitted between clients and servers, protecting sensitive information from eavesdropping, interception, and tampering.
+
+- **Authentication:** SSL/TLS uses digital certificates to authenticate the server and sometimes the client. This helps to ensure that the parties involved in the communication are who they claim to be.
+
+- **Data integrity:** SSL/TLS includes mechanisms to confirm that the data received has not been tampered with during transmission, maintaining the integrity of the information being sent.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/108-common-protocols/index.md

@@ -1 +1,35 @@
-# Common protocols
+# Common Protocols and their Uses
+
+In this section, we will discuss some of the most common protocols used in networking and their importance in maintaining cyber security. Protocols are a set of rules and procedures that define how data should be transmitted, formatted, and processed over a network.
+
+## HyperText Transfer Protocol (HTTP) and HTTPS
+
+HTTP, or HyperText Transfer Protocol, is the foundation of data communication on the World Wide Web. It defines how data should be formatted and transmitted between a client (like your browser) and a web server. HTTP is a stateless protocol, meaning each request and response pair is independent from others.
+
+HTTPS, or HTTP Secure, is a secure version of HTTP that encrypts data between the client and server using Secure Sockets Layer (SSL) or Transport Layer Security (TLS) to protect sensitive data from being intercepted or tampered with.
+
+## Transmission Control Protocol (TCP)
+
+TCP, or Transmission Control Protocol, is a reliable, connection-oriented protocol that ensures data is delivered correctly between applications over a network. It ensures accurate and complete data delivery by establishing a connection, segmenting data into smaller packets, verifying the receipt of packets, and reordering packets to their original sequence.
+
+## Internet Protocol (IP)
+
+Internet Protocol (IP) is responsible for delivering packets from the source host to the destination host based on their IP addresses. IP is the primary protocol in the Internet Layer of the Internet Protocol Suite and has two main versions - IPv4 and IPv6.
+
+## User Datagram Protocol (UDP)
+
+UDP, or User Datagram Protocol, is a connectionless communication protocol used for fast and efficient data transmission. Unlike TCP, UDP does not provide error checking or guarantee delivery, making it suitable for real-time applications like video streaming and online gaming where low latency is crucial.
+
+## Domain Name System (DNS)
+
+The Domain Name System (DNS) is responsible for translating human-readable domain names (like www.example.com) into corresponding IP addresses that computers understand. This process is called domain name resolution. DNS is an essential component of internet communication, as it allows users to access websites using easy-to-remember names instead of numerical IP addresses.
+
+## File Transfer Protocol (FTP)
+
+File Transfer Protocol (FTP) is a standard network protocol used for transferring files from one host to another over a TCP-based network, such as the Internet. FTP is commonly used for sharing files and transferring files between a client and a server.
+
+## Simple Mail Transfer Protocol (SMTP)
+
+Simple Mail Transfer Protocol (SMTP) is the standard protocol for sending email messages across a network. It defines how email messages should be formatted, encrypted, and relayed between email clients, servers, and other email systems.
+
+Understanding these common protocols and their roles in network communication is vital for ensuring the proper implementation of cyber security measures. It will help you better identify potential vulnerabilities and make informed decisions on network defense strategies.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/109-virtualization-technologies/100-vmware.md

@@ -1 +1,35 @@
-# Vmware
+# VMWare
+
+_VMware_ is a global leader in virtualization and cloud infrastructure solutions. Established in 1998, they have been at the forefront of transforming the IT landscape. VMware's virtualization platform can be applied to a wide range of areas such as data centers, desktops, and applications.
+
+## VMware Products and Technologies
+
+Some of the popular VMware products include the following:
+
+- **VMware vSphere**: It is the most well-known VMware product, and it forms the foundation of the virtual infrastructure. vSphere enables you to create, manage and run multiple virtual machines on a single physical server. It essentially provides better utilization of hardware resources and enhanced server management.
+
+- **VMware Workstation**: This desktop virtualization product allows you to run multiple isolated operating systems on a single Windows or Linux PC. It enables you to create and manage virtual machines effortlessly and is primarily targeted at developers and IT professionals.
+
+- **VMware Fusion**: Similar to the Workstation but designed specifically for Mac users, Fusion allows you to run Windows and Linux applications on a Mac without requiring a reboot.
+
+- **VMware Horizon**: This product focuses on providing remote access to virtual desktops and applications. It helps organizations to securely deliver resources to users, improve desktop management, and reduce costs associated with maintaining traditional PCs.
+
+- **VMware NSX**: NSX is VMware's network virtualization and security platform. It is designed to work in tandem with VMware vSphere and other virtualization platforms, providing advanced networking and security features like micro-segmentation, distributed firewalling, and load balancing.
+
+- **VMware vSAN**: vSAN is a software-defined storage solution that allows you to decouple storage functions from the underlying hardware. With vSAN, you can pool together direct-attached storage devices across multiple vSphere servers and create a shared datastore that can be easily managed and scaled.
+
+## Benefits of VMware Virtualization
+
+VMware's virtualization technologies offer various advantages, such as:
+
+- **Increased efficiency**: By consolidating multiple physical servers into virtual machines running on fewer physical servers, resource utilization is improved, which reduces energy and hardware costs.
+
+- **Flexibility**: Virtualization allows you to run multiple operating systems and applications simultaneously, which increases productivity and enables you to switch between tasks more quickly.
+
+- **Scalability**: VMware makes it easy to add or remove virtual machines and resources as needed, allowing you to scale your IT infrastructure efficiently.
+
+- **Business continuity**: Virtualization ensures high availability and disaster recovery by replicating your virtual machines and enabling automatic failover to other servers in case of any hardware failure.
+
+- **Simplified management**: Virtualized environments can be managed from a central location, reducing the time and effort required to maintain and monitor IT resources.
+
+In conclusion, VMware is an industry-leading company providing various virtualization products and services that cater to different types of users and environments. As a user, you should evaluate your requirements and choose the right VMware product for your needs to fully reap the benefits of virtualization.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/109-virtualization-technologies/101-virtualbox.md

@@ -1 +1,37 @@
-# Virtualbox
+# VirtualBox
+
+VirtualBox is a powerful, open-source and feature-rich virtualization software created by Oracle Corporation. It allows users to set up and run multiple guest operating systems, referred to as "virtual machines" (VMs), within a single host computer. VirtualBox operates on a wide range of operating systems, including Windows, macOS, Linux, and Solaris, making it highly versatile for different users and environments.
+
+## Key Features
+
+- **Cross-platform compatibility**: VirtualBox can be installed and used on a variety of host operating systems. This is beneficial for users who work with multiple platforms and require access to different applications or environments across them.
+
+- **Snapshot functionality**: This feature allows users to take a snapshot of their virtual machine, capturing its current state. This can be useful for testing updates or changes, as users can revert to their previous snapshot if conflicts or issues arise.
+
+- **USB device support**: VirtualBox allows users to access USB devices connected to their host computer, such as flash drives, printers, or webcams, from within their guest operating system.
+
+- **Shared folders**: Users can easily share files between their host system and virtual machines using a shared folder feature. This simplifies file transfers and resource sharing between your host computer and your virtual environments.
+
+## Setting up VirtualBox
+
+- Download and install the latest version of VirtualBox from the [official website](https://www.virtualbox.org/).
+- Once installed, launch the VirtualBox application.
+- Click on "New" to create a new virtual machine and follow the wizard to configure the VM settings, such as the operating system, memory allocation, and virtual hard disk.
+- Once the VM is configured, click "Start" to launch the virtual machine.
+- Install your desired guest operating system within the virtual machine.
+
+## Advantages of VirtualBox
+
+- Open-source software: VirtualBox is free and its source code is available for users to modify and contribute to.
+
+- Simple user interface: VirtualBox has an intuitive and easy-to-use interface, making it user-friendly for beginners and professionals alike.
+
+- Regular updates and improvements: Oracle Corporation and the community behind VirtualBox regularly release updates, bug fixes, and new features, ensuring that the software remains up-to-date and dynamic.
+
+## Considerations
+
+While VirtualBox has numerous benefits, there are certain performance limitations when compared to other, more advanced virtualization solutions, such as VMware or Hyper-V. Users working with resource-intensive operating systems or applications may experience some performance differences when utilizing VirtualBox as their choice of virtualization software.
+
+---
+
+In conclusion, VirtualBox is a powerful and flexible tool for creating and managing virtual environments on a variety of host operating systems. With its open-source nature, cross-platform compatibility, and user-friendly interface, it is an excellent choice for cybersecurity enthusiasts and professionals looking to explore virtualization technologies.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/109-virtualization-technologies/102-esxi.md

@@ -1 +1,21 @@
-# Esxi
+# esxi
+
+VMware ESXi is a Type 1 hypervisor and the core building block for VMware's virtualization technology. It represents a bare-metal hypervisor, which means it is installed directly onto your physical server's hardware, without the need for a supporting operating system. This results in elevated performance, reduced overhead, and efficient resource allocation. 
+
+Key features and benefits of ESXi include:
+
+- **Bare-metal performance**: ESXi can provide better performance by executing directly on the hardware, without the need for an additional operating system layer.
+
+- **Security**: ESXi has a smaller footprint and is more resistant to attacks due to its limited scope and stringent VMware policies.
+
+- **Resource allocation**: ESXi allows for efficient allocation of resources, such as memory and CPU time, as it directly controls hardware.
+
+- **Scalability**: ESXi provides a simple and efficient environment to run multiple virtual machines (VMs) on a single server, which can reduce the need for additional hardware.
+
+- **Centralized management**: VMware offers vSphere, a centralized management platform that integrates seamlessly with ESXi, making it easy to deploy, manage, and maintain large-scale virtual infrastructure.
+
+- **Compatibility**: ESXi is compatible with a wide variety of hardware, which makes deployment and implementation more flexible and cost-effective.
+
+To get started with ESXi, you'll need to have compatible hardware and download the ESXi ISO from VMware's website. After installing it on your server, you can manage the virtual machines through VMware vSphere Client or other third-party tools. For more advanced management features, such as high availability, fault tolerance, and distributed resource scheduling, consider investing in VMware vSphere to fully leverage ESXi's potential.
+
+In summary, VMware's ESXi enables organizations to create, run, and manage multiple virtual machines on a single physical server. With its bare-metal performance, robust security, and seamless integration with management tools, ESXi is a powerful solution for businesses looking to optimize their IT infrastructure through virtualization technologies.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/109-virtualization-technologies/104-proxmox.md

@@ -1 +1,25 @@
-# Proxmox
+# proxmox
+
+Proxmox is an open-source platform for enterprise-level virtualization. It is a complete server virtualization management solution that allows system administrators to create and manage virtual machines in a unified environment.
+
+## Key Features
+
+* **Server Virtualization**: Proxmox enables you to turn your physical server into multiple virtual servers, each running its own operating system, applications, and services. This helps to maximize server usage and reduce operating costs.
+
+* **High Availability**: Proxmox VE supports high availability and failover. In case of hardware or software failure, automatic migration of virtual machines can prevent downtime for critical applications and services.
+
+* **Storage**: Proxmox offers a variety of storage solution options, including local (LVM, ZFS, directories), network (iSCSI, NFS, GlusterFS, Ceph), and distributed storage (Ceph RBD).
+
+* **Live Migration**: Live migration is a crucial feature that allows you to move running virtual machines from one host to another with minimal downtime.
+
+* **Operating System Support**: Proxmox VE supports a wide range of guest operating systems, including Linux, Windows, BSD, and others.
+
+* **Web Interface**: Proxmox offers a powerful and user-friendly web interface for managing your virtual environment. This allows you to create, start, stop or delete virtual machines, monitor their performance, manage their storage, and more from any web browser.
+
+* **Role-based Access Control**: Proxmox VE provides a role-based access control system, allowing you to create users with specific permissions and assign them to different parts of the Proxmox system.
+
+* **Backup and Restore**: Proxmox offers built-in backup and restore functionality, allowing you to easily create full, incremental, or differential backups of your virtual machines and easily restore them when needed.
+
+## Conclusion
+
+As a powerful and feature-rich virtualization solution, Proxmox Virtual Environment enables administrators to manage their virtual infrastructure more efficiently and reliably. Boasting an easy-to-use web interface, comprehensive storage options, and support for multiple operating systems, Proxmox VE is an excellent choice for managing your virtual environment.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/109-virtualization-technologies/index.md

@@ -1 +1,38 @@
-# Virtualization technologies
+# Common Virtualization Technologies
+
+Virtualization technologies play a critical role in improving the efficiency, flexibility, and resilience of IT infrastructure. These technologies allow multiple operating systems and applications to run simultaneously on a single physical machine, enhancing the utilization of hardware resources and reducing costs. In the context of cybersecurity, virtualization tools provide additional layers of security and isolation, making it more difficult for attackers to compromise the entire system.
+
+In this section, we will discuss the following aspects of virtualization technologies:
+
+## What is Virtualization?
+
+Virtualization is the process of creating virtual instances of physical resources, such as hardware platforms, storage devices, or network resources. It enables operating systems, applications, and data to run on a shared pool of resources, which can be dynamically allocated and managed according to the needs of the system.
+
+## Types of Virtualization
+
+There are various types of virtualization, such as:
+
+- **Server virtualization**: The creation of multiple virtual servers on a single physical server to optimize resource utilization and facilitate fault isolation.
+- **Desktop virtualization**: The separation of a user's computer environment from the physical device, enabling centralized management, improved security, and simplified maintenance.
+- **Network virtualization**: The process of combining multiple physical networks into a single virtual network, offering better performance, security, and ease of management.
+- **Storage virtualization**: The pooling of physical storage resources from multiple storage devices into a single, virtualized storage environment, allowing for simplified management, improved efficiency, and enhanced scalability.
+
+## Benefits of Virtualization
+
+Some of the key benefits of virtualization technologies include:
+
+- **Improved resource utilization**: By virtualizing resources, organizations can make better use of their hardware and IT infrastructure, ultimately reducing costs and environmental impact.
+- **Increased agility**: Virtualization allows IT teams to provision resources quickly, enabling them to respond rapidly to changing business needs.
+- **Enhanced security**: By isolating virtual environments, organizations can prevent the spread of malware and minimize the impact of security breaches.
+- **Disaster recovery and business continuity**: Virtualization simplifies backup, replication, and recovery processes, ensuring that businesses can resume operations quickly after a disaster.
+
+## Popular Virtualization Software and Solutions
+
+There are several virtualization software and solutions available in the market, such as:
+
+- **VMware**: A leader in virtualization technology, offering solutions for server, desktop, storage, and network virtualization.
+- **Microsoft Hyper-V**: A built-in virtualization solution for Windows Server, allowing for server, desktop, and storage virtualization.
+- **Citrix XenServer**: An open-source virtualization platform that supports server, desktop, and network virtualization.
+- **Oracle VM VirtualBox**: A free and open-source virtualization solution that supports server, desktop, and storage virtualization.
+
+To protect your organization's information assets and ensure the security of your virtualized environments, it's essential to understand virtualization technologies and implement best practices. In the sections that follow, we will discuss essential security measures and techniques to improve the overall cybersecurity posture of your virtualized infrastructure.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/110-virutalization-basics/100-hypervisor.md

@@ -1 +1,29 @@
-# Hypervisor
+# Hypervisor
+
+A **hypervisor** is a software component that plays a vital role in virtualization technology. It enables multiple operating systems to run simultaneously on a single physical host. In the context of cybersecurity, using a hypervisor allows users to create and manage multiple isolated virtual environments, commonly known as **virtual machines (VMs)**, which can help protect sensitive data and applications from threats.
+
+There are two primary types of hypervisors:
+
+- **Type 1 hypervisors** (*Bare-metal Hypervisors*) - These hypervisors run directly on the host's hardware, without the need for an underlying operating system, offering better performance and security. Examples of type 1 hypervisors include VMware ESXi, Microsoft Hyper-V, and Xen.
+
+- **Type 2 hypervisors** (*Hosted Hypervisors*) - These hypervisors run as an application on an existing operating system, which makes them less performant and potentially less secure. However, they are generally easier to set up and manage. Examples of type 2 hypervisors include Oracle VirtualBox, VMware Workstation, and Parallels Desktop.
+
+## Benefits of using a Hypervisor
+
+Utilizing a hypervisor in your cybersecurity strategy can provide several benefits, such as:
+
+- **Isolation:** Each VM operates in a separate environment, decreasing the chance that a security breach on one VM will affect the others.
+- **Flexibility:** VMs can be easily created, modified, or destroyed, allowing for easy management and reduced downtime.
+- **Resource Management:** Hypervisors can effectively manage resources among the various VMs, ensuring that no single VM monopolizes the available resources.
+- **Snapshotting:** Hypervisors can create snapshots of a VM's state, allowing for easy recovery and rollback in case of a security incident or system failure.
+
+## Hypervisor Security Considerations
+
+Though hypervisors can enhance your cybersecurity posture, it's essential to be aware of potential security risks and best practices. Some security considerations include:
+
+- **Secure configuration and patch management:** Ensure that the hypervisor is configured securely, and patches are applied promptly to protect against known vulnerabilities.
+- **Limiting hypervisor access:** Restrict access to the hypervisor by allowing only authorized users and implementing strong authentication and access controls.
+- **Monitoring:** Implement continuous monitoring and logging mechanisms to detect and respond to potential security threats in the virtual environment.
+- **Network Segmentation:** Isolate sensitive VMs on separate networks or virtual LANs (VLANs) to minimize the risk of unauthorized access or lateral movement within the virtualized environment.
+
+In conclusion, a hypervisor is a powerful tool in cybersecurity and virtualization. By understanding its types, benefits, and security considerations, you can make informed decisions on how to best leverage hypervisor technology to protect your digital assets.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/110-virutalization-basics/101-vm.md

@@ -1 +1,41 @@
-# Vm
+# VM
+
+Virtualization technology enables the creation of multiple virtual environments, known as Virtual Machines (VMs), within a single physical computer. VMs function independently of each other, allowing users to run various operating systems and applications in a single hardware platform.
+
+## What are Virtual Machines?
+
+A virtual machine (VM) is a virtual environment that emulates a physical computer, allowing you to run an operating system and applications separately from the underlying hardware. VMs allow for efficient utilization of computer resources, as they enable multiple instances of a system to run on the same physical machine. 
+
+## Key Components of VMs
+
+## Hypervisor
+
+A hypervisor, also known as a virtual machine monitor (VMM), is the software responsible for creating, managing, and monitoring the virtual environments on a host machine. There are two types of hypervisors:
+
+- **Type 1 Hypervisors:** Also known as "bare-metal" or "native" hypervisors. They run directly on the hardware and manage the virtual machines without requiring an underlying operating system.
+- **Type 2 Hypervisors:** Known as "hosted" hypervisors. They are installed as an application on a host operating system, which then manages the virtual machines.
+
+## Guest Operating System
+
+The guest operating system, or guest OS, is the operating system installed on a virtual machine. Since VMs are independent of each other, you can run different operating systems and applications on each one without any conflicts. 
+
+## Virtual Hardware
+
+Virtual hardware refers to the resources allocated to a virtual machine, such as CPU, RAM, storage, and networking. Virtual hardware is managed by the hypervisor and ensures that each VM has access to a required set of resources without interfering with other VMs on the host machine.
+
+## Benefits of Virtual Machines
+
+- **Resource Efficiency:** VMs optimize the use of hardware resources, reducing costs and enabling more efficient use of energy.
+- **Isolation:** VMs provide a secure and isolated environment for applications and operating systems, reducing the risk of conflicts and potential security threats.
+- **Flexibility:** VMs allow for the easy deployment, migration, and backup of operating systems and applications. This makes it simple to test new software, recover from failures, and scale resources as needed.
+- **Cost Savings:** With the ability to run multiple workloads on a single physical machine, organizations can save on hardware, maintenance, and operational expenses.
+
+## Popular Virtualization Software
+
+There is a wide range of virtualization software available, including:
+
+- VMware vSphere: A Type 1 hypervisor commonly used in enterprise environments for server virtualization.
+- Microsoft Hyper-V: A Type 1 hypervisor integrated into the Windows Server operating system.
+- Oracle VM VirtualBox: A Type 2 hypervisor that runs on Windows, macOS, and Linux hosts, popular for desktop virtualization.
+
+In conclusion, virtual machines play a critical role in modern computing, providing a flexible and efficient method to optimize computing resources, isolate applications, and enhance security. Understanding VMs and virtualization technology is an essential part of any comprehensive cybersecurity guide.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/110-virutalization-basics/102-guest-os.md

@@ -1 +1,27 @@
-# Guest os
+# GuestOS
+
+A Guest OS (Operating System) is an essential component in virtualization. It is an operating system that runs within a virtual machine (VM) created by a host operating system or a hypervisor. In this scenario, multiple guest operating systems can operate on a single physical host machine, sharing resources provided by the host.
+
+## Key Features of Guest OS
+
+- **Resource Sharing**: The guest OS shares the host's resources, such as CPU, memory, and storage, while having a virtualized environment of its own.
+- **Isolation**: Each guest OS operates independently of others on the same host machine, ensuring that the performance or security of one system does not affect the others.
+- **Customization**: You can install and manage different types of guest operating systems on the same host, catering to specific requirements or user preferences.
+- **Portability**: The guest OS and its associated data can be easily moved to another host machine, simplifying the management of multiple systems for businesses and individuals.
+
+## Use Cases for Guest OS
+
+- **Testing and Development**: By providing a separate environment to experiment with different applications, guest operating systems are appropriate for testing and development.
+- **Security**: Sandbox environments can be created within the guest OS for analyzing malware or executing potentially unsafe applications, without affecting the host machine's performance or security.
+- **Legacy Applications**: Some older applications may not be compatible with modern operating systems. Having a guest OS with an older OS version helps to run these legacy applications.
+- **Resource Optimization**: Virtualization enables businesses to make the most of their hardware investments, as multiple guest OS can share the resources of a single physical machine.
+
+## Guest OS Management
+
+To manage guest operating systems effectively, you must use virtualization software or a hypervisor. Some popular options include:
+
+- **VMware**: VMware provides tools like VMware Workstation and Fusion to create, manage, and run guest OS within virtual machines.
+- **Oracle VirtualBox**: Oracle's VirtualBox is an open-source hypervisor that supports the creation and management of guests operating systems across multiple host OS platforms.
+- **Microsoft Hyper-V**: Microsoft's free hypervisor solution, Hyper-V, is capable of creating and managing guest operating systems on Windows-based host machines.
+
+In conclusion, a guest operating system plays a vital role in virtualization, allowing users to operate multiple OS within virtual machines on a single host, optimizing resources, and providing the flexibility to work with a variety of applications and environments.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/110-virutalization-basics/103-host-os.md

@@ -1 +1,15 @@
-# Host os
+# HostOS
+
+A **Host Operating System (OS)** is the primary operating system installed on a computer that runs directly on the hardware. It serves as the base layer for virtualization, providing resources and an environment for virtual machines (also known as guest operating systems) to operate.
+
+In virtualization, the host OS allows you to run multiple guest OSs on a single physical hardware system simultaneously, which share resources (such as memory, storage, and CPU) managed by the host OS.
+
+Some key points regarding Host OS in virtualization include:
+
+- _Responsibilities_: The host OS manages hardware resources, including the allocation of those resources to the guest operating systems. It is also responsible for running the virtualization software or hypervisor that creates, manages, and interacts with the virtual machines.
+
+- _Types of Virtualization_: Host OS can be used in two types of virtualization: full virtualization and paravirtualization. In full virtualization, guest operating systems run unmodified, while in paravirtualization, guest operating systems need to be modified to efficiently run on the host OS.
+
+- _Security Considerations_: Protecting the host OS is crucial since its vulnerability can potentially affect every virtual machine running on the host. To secure the host, ensure that it is regularly updated, uses strong authentication measures, follows strict access controls, and employs network security best practices.
+
+By understanding host OS and its roles in virtualization, you can better manage your virtual environment and ensure optimal performance and security for your virtual machines.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/110-virutalization-basics/index.md

@@ -1 +1,37 @@
-# Virutalization basics
+# Understand basics of Virtualization
+
+**Virtualization** is a key concept in the world of cybersecurity and IT infrastructure. It involves the creation of virtual (rather than physical) instances of resources, such as operating systems, servers, storage devices, and network components. By leveraging virtualization, multiple virtual instances can run on the same hardware simultaneously, resulting in more efficient use of resources, improved scalability, and reduced costs.
+
+Let's take a brief look at some virtualization basics:
+
+## Types of Virtualization
+
+- **Server Virtualization**: Server virtualization is the process of partitioning a physical server into multiple virtual servers. This allows several virtual machines (VMs) to run on a single server, each using a different operating system and each isolated from the others.
+
+- **Storage Virtualization**: Storage virtualization involves the pooling of multiple storage devices into a single, virtualized storage unit. It simplifies storage management and allows for better resource utilization.
+
+- **Network Virtualization**: Network virtualization is the process of combining hardware and software network resources and functionality into a single, virtualized network. It facilitates management and provisioning of resources, as well as improves network automation and flexibility.
+
+- **Application Virtualization**: Application virtualization involves the separation of an application from its underlying operating system, allowing applications to run on various platforms without having to be installed on each device. This streamlines deployment, management, and updates of applications.
+
+## Advantages of Virtualization
+
+- **Cost Savings**: Virtualization reduces the need for physical hardware, resulting in reduced power consumption, cooling, and physical space requirements.
+
+- **Scalability**: Virtual instances can be easily created, decommissioned, or scaled up or down depending on the needs of the organization. This allows for better utilization of resources, on-demand capacity, and rapid deployment of new applications or services.
+
+- **Improved Security**: Virtualized environments can provide security benefits through isolation between VMs, reducing the potential impact of a security breach.
+
+- **Disaster Recovery**: Virtualization enables easier backup and replication of VMs, which simplifies disaster recovery planning and reduces downtime in the event of hardware failure or data loss.
+
+## Popular Virtualization Solutions
+
+- **VMware**: VMware is a widely used virtualization platform that provides various solutions, such as vSphere, for server virtualization, NSX for network virtualization, and vSAN for storage virtualization.
+
+- **Microsoft Hyper-V**: Hyper-V is a Windows Server-based virtualization platform, allowing you to create and manage VMs on Windows or Linux operating systems.
+
+- **Citrix XenServer**: XenServer is another popular virtualization solution that provides a scalable, high-performance server virtualization platform.
+
+- **Oracle VirtualBox**: VirtualBox is a free, open-source virtualization solution that supports various operating systems, making it a popular choice for developers and researchers.
+
+Understanding the basics of virtualization can help you better maintain, secure, and optimize your IT infrastructure. As you continue your journey through cybersecurity, consider diving deeper into the various aspects of virtualization and explore how it can benefit your organization.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/100-nslookup.md

@@ -1 +1,39 @@
-# Nslookup
+# nslookup
+
+**Nslookup** is a network administration command-line tool designed for retrieving information about Domain Name System (DNS) records. DNS is responsible for translating domain names into IP addresses, allowing users to access websites and resources by using human-readable names (e.g., www.example.com) instead of numerical IP addresses.
+
+## Uses
+
+* Query DNS servers to verify the configuration of domain names
+* Find the IP address of a specific domain name
+* Troubleshoot DNS-related issues and errors
+* Identify the authoritative DNS servers for a domain
+
+## How to Use
+
+- **Open Command Prompt or Terminal**: Press `Windows key + R`, type `cmd`, and press Enter to open Command Prompt on Windows. On macOS or Linux, open Terminal.
+
+- **Running Nslookup**: To start using Nslookup, type `nslookup` and hit Enter. You'll now see the `>` prompt, indicating you are in Nslookup mode.
+
+- **Query DNS Records**: In Nslookup mode, you can query different types of DNS records by typing the record type followed by the domain name. For instance, to find the A (address) record of www.example.com, type `A www.example.com`. To exit Nslookup mode, type `exit`.
+
+## Commonly Used Record Types
+
+Below are some of the most-commonly queried DNS record types:
+
+* **A**: Stands for 'Address'; returns the IPv4 address associated with a domain name
+* **AAAA**: Stands for 'Address', for IPv6; returns the IPv6 address associated with a domain name
+* **NS**: Stands for 'Name Server'; returns the authoritative DNS servers for a specific domain
+* **MX**: Stands for 'Mail Exchange'; returns the mail server(s) responsible for handling email for a specific domain
+* **CNAME**: Stands for 'Canonical Name'; returns the domain name that an alias is pointing to
+* **TXT**: Stands for 'Text'; returns additional text information that can be associated with a domain, like security policies (e.g., SPF)
+
+## Example
+
+If you want to find the A (IPv4) record for example.com, follow these steps:
+
+- Open Command Prompt or Terminal
+- Type `nslookup` and hit Enter
+- Type `A example.com` and hit Enter
+
+This will return the IPv4 address associated with the domain name example.com.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/101-iptables.md

@@ -1 +1,63 @@
-# Iptables
+# iptables
+
+**IPTables** is a command-line utility for configuring and managing packet filtering rules within the Linux operating system. It allows the system administrator to define and manage the firewall rules that control the incoming and outgoing network traffic. IPTables is an essential tool for securing Linux systems and ensuring proper network traffic flow.
+
+## How IPTables Works
+
+IPTables is built upon a framework called _Netfilter_, which is embedded in the Linux kernel. Netfilter provides various operations on packets, such as filtering, modifying, and redirecting. IPTables makes use of these operations by providing a user-friendly interface to define rules based on various criteria like source IP address, destination IP address, protocol, and port numbers.
+
+IPTables organizes rules into chains, where each chain consists of a list of rules. There are three default chains: INPUT, OUTPUT, and FORWARD. These chains represent the different stages a packet goes through in the network stack:
+
+- **INPUT**: Applied to incoming packets destined for the local system.
+- **OUTPUT**: Applied to outgoing packets originating from the local system.
+- **FORWARD**: Applied to packets being routed through the local system.
+
+## Basic IPTables Usage
+
+To list the current IPTables rules, use the following command:
+
+```
+iptables -L
+```
+
+To add a new rule to a specific chain, use the `-A` flag followed by the chain name and the rule details:
+
+```
+iptables -A INPUT -s 192.168.1.2 -j DROP
+```
+
+This command adds a rule to the INPUT chain that drops all packets coming from the IP address 192.168.1.2.
+
+To delete a rule from a specific chain, use the `-D` flag followed by the chain name and the rule number:
+
+```
+iptables -D INPUT 3
+```
+
+This command removes the third rule in the INPUT chain.
+
+To insert a rule at a specific position in a chain, use the `-I` flag followed by the chain name, rule number, and the rule details:
+
+```
+iptables -I INPUT 2 -s 192.168.1.3 -j DROP
+```
+
+This command inserts a rule at position 2 in the INPUT chain that drops all packets coming from the IP address 192.168.1.3.
+
+## Saving and Restoring IPTables Rules
+
+By default, IPTables rules are temporary and will be lost upon a system reboot. To save the current rules and make them persistent, use the following command:
+
+```
+iptables-save > /etc/iptables/rules.v4
+```
+
+To restore the rules from a saved file, use the following command:
+
+```
+iptables-restore < /etc/iptables/rules.v4
+```
+
+## Conclusion
+
+IPTables is a powerful tool for managing packet filtering rules in Linux systems. With proper configuration, it can greatly enhance your system's security and ensure smooth network traffic flow. Understanding IPTables can help you diagnose and resolve network-related issues while providing essential protection from cyber threats.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/102-packet-sniffers.md

@@ -1 +1,30 @@
-# Packet sniffers
+# Packet Sniffers
+
+Packet sniffers are essential network troubleshooting tools that capture and inspect data packets passing through a network. They're especially useful for detecting security vulnerabilities, monitoring network traffic, and diagnosing network-related issues.
+
+## How Packet Sniffers Work
+
+Packet sniffers work by actively listening to the network traffic and extracting data from the packets transmitted across the network. They can either capture all packets or filter them based on specific criteria, like IP addresses, protocols, or port numbers.
+
+## Common Features
+
+Some of the main features offered by packet sniffers include:
+
+- **Capture and analysis**: Packet sniffers can capture and analyze individual data packets, providing detailed information about the packet's header, payload, and other relevant information.
+- **Filtering**: To make it easier for users to locate specific network traffic, packet sniffers often feature filtering options that can narrow down the data to a single protocol, port number, or IP address.
+- **Packet injection**: Some packet sniffers can inject data packets into the network, which is useful for testing security mechanisms or for simulating traffic in a network environment.
+- **Graphical representation**: Packet sniffers may also provide graphical representations for data, making it easier to visualize network traffic patterns and identify potential congestion points or other issues.
+
+## Popular Packet Sniffers
+
+There are numerous packet sniffers available, both open-source and commercial. Some popular packet sniffers include:
+
+- [Wireshark](https://www.wireshark.org/): A popular open-source packet analyzer with advanced features and support for various platforms.
+- [tcpdump](https://www.tcpdump.org/): A command-line packet sniffer and analyzer primarily used in Unix-based systems.
+- [Npcap](https://nmap.org/npcap/): A packet capture framework for Windows that supports Windows 10 and newer versions.
+
+## Cyber Security & Packet Sniffers
+
+Packet sniffers are valuable tools for cybersecurity professionals. They can help identify unauthorized or malicious network activity, track down the source of specific traffic patterns or attacks, and assist with the development of network security policies. When using packet sniffers, it's important to keep in mind that monitoring other users' network activity without their consent may raise legal and ethical issues.
+
+To sum up, packet sniffers are powerful tools that can provide valuable insights into network traffic and security, ultimately helping to maintain and secure any given network environment.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/103-ipconfig.md

@@ -1 +1,67 @@
-# Ipconfig
+# ipconfig
+
+**IPConfig** is a command-line tool that is available on Windows operating systems. It is used to display the current network configuration settings of a computer, such as IP address, subnet mask, and default gateway. This tool helps users diagnose and troubleshoot network connectivity issues by providing essential details about the system's network connections.
+
+## Using IPConfig
+
+To use IPConfig, open the Command Prompt or PowerShell and enter the following command:
+
+```
+ipconfig
+```
+
+This command will display the network configuration details for all the active network connections on your system.
+
+## IPConfig Options
+
+IPConfig has several options that can provide more comprehensive information or perform different tasks, such as:
+
+- **/all**: This option displays the full configuration data for all the network connections, including DHCP (Dynamic Host Configuration Protocol) server and lease information.
+
+  ```
+  ipconfig /all
+  ```
+
+- **/release**: This command releases the IP address obtained from the DHCP server for the specified network adapter or all network adapters if none is specified.
+
+  ```
+  ipconfig /release
+  ```
+
+- **/renew**: This command requests a new IP address from the DHCP server for the specified network adapter or all network adapters if none is specified.
+
+  ```
+  ipconfig /renew
+  ```
+
+- **/flushdns**: This option clears the DNS (Domain Name System) resolver cache, which stores the recent DNS queries and their corresponding IP addresses.
+
+  ```
+  ipconfig /flushdns
+  ```
+
+- **/registerdns**: This command refreshes all DHCP leases and re-registers DNS names for your system.
+
+  ```
+  ipconfig /registerdns
+  ```
+
+- **/displaydns**: This option displays the contents of the DNS resolver cache, allowing you to view recently resolved domain names and IP addresses.
+
+  ```
+  ipconfig /displaydns
+  ```
+
+- **/setclassid**: This command allows you to modify the DHCP class ID for the specified network adapter.
+
+  ```
+  ipconfig /setclassid
+  ```
+
+- **/showclassid**: This option displays the DHCP class ID for the specified network adapter.
+
+  ```
+  ipconfig /showclassid
+  ```
+
+In conclusion, IPConfig is a powerful and handy tool for managing and troubleshooting network connections on Windows systems. It allows you to view and modify network configuration settings, lease IP addresses, and interact with the DNS resolver cache easily.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/104-netstat.md

@@ -1 +1,25 @@
-# Netstat
+# netstat
+
+Netstat, short for 'network statistics', is a command-line tool that provides valuable information about the network connections, routing tables, and network interface statistics on a computer system. Netstat can help in diagnosing and troubleshooting network-related issues by displaying real-time data about network traffic, connections, routes, and more.
+
+## Key Features
+
+* **Network Connections:** Netstat can show open and active network connections, including inbound and outbound, as well as display the ports on which your system is currently listening.
+* **Routing Tables:** Netstat provides information about your system's routing tables, which can help you identify the path a packet takes to reach its destination.
+* **Network Interface Statistics:** Netstat displays statistics for network interfaces, covering details such as packets transmitted, packets received, errors, and more.
+
+## Common Netstat Commands
+
+* `netstat -a`: Displays all active connections and listening ports
+* `netstat -n`: Displays active connections without resolving hostnames (faster)
+* `netstat -r`: Displays the routing table
+* `netstat -i`: Displays network interfaces and their statistics
+* `netstat -s`: Displays network protocol statistics (TCP, UDP, ICMP)
+
+## Example Use Cases
+
+- **Identify Open Ports:** You can use netstat to determine which ports are open and listening on your system, helping you identify potential security vulnerabilities.
+- **Monitor Network Connections:** Netstat allows you to monitor active connections to ensure that nothing unauthorized or suspicious is connecting to your system.
+- **Troubleshoot Network Issues:** By displaying routing table information, netstat can help you understand the pathways your system takes to reach various destinations, which can be crucial when diagnosing network problems.
+
+Netstat is a versatile and powerful tool for gaining insights into your system's network behavior. Armed with this knowledge, you'll be better equipped to address potential vulnerabilities and monitor your system's health in the context of cyber security.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/105-port-scanners.md

@@ -1 +1,36 @@
-# Port scanners
+# Port Scanners
+
+Port scanners are essential tools in the troubleshooting and cybersecurity landscape. They are designed to detect open or closed network ports on a target system. Network ports serve as communication endpoints for various applications and services running on a device, and knowing the status of these ports can help identify potential security vulnerabilities or confirm that specific services are running as intended.
+
+In this section, we will explore the following aspects of port scanners:
+
+- **Why port scanners are important**
+- **Types of port scanners**
+- **Popular port scanning tools**
+
+## Why port scanners are important
+
+Port scanners can help in the following situations:
+
+- **Identifying open ports:** Open ports might expose your system to attacks if they are left unsecured. A port scanner can help you identify which network ports are open and need to be secured.
+- **Detecting unauthorized services:** Scanning for open ports can help you find if any unauthorized applications are running on your network, as these services might open ports that you are not aware of.
+- **Testing firewall rules:** Port scanners can also verify if your firewall rules are effective and configured correctly.
+- **Troubleshooting network issues:** By detecting open and closed ports, port scanners can help you diagnose network problems and ensure your applications and services are running smoothly.
+
+## Types of port scanners
+
+There are three main types of port scanners:
+
+- **TCP Connect:** This scanner initiates a full TCP connection between the scanner and the target device. It goes through the entire process of establishing a TCP connection, including a three-way handshake. This type of scan is accurate but more easily detectable.
+- **TCP SYN or Half-Open scan:** This scanner only sends a SYN packet (a request to start a connection) to the target device. If the target device responds with a SYN/ACK packet, the port is considered open. This type of scan is faster and less detectable, as it doesn't establish a full connection.
+- **UDP Scan:** This scanner targets User Datagram Protocol (UDP) ports, which are typically used for streaming and real-time communication applications. It sends UDP packets to the target device, and if there's no response, the port is considered open. This type of scan can be less accurate, as some devices may not respond to UDP probes.
+
+## Popular port scanning tools
+
+Here are some popular and widely used port scanning tools:
+
+- **Nmap:** Nmap (Network Mapper) is a free, open-source tool that is highly versatile and powerful. It offers various types of scans, including TCP Connect, TCP SYN, and UDP scans.
+- **Masscan:** Masscan is a high-speed port scanner that is typically used for large-scale scanning, thanks to its ability to scan the entire internet within a few minutes.
+- **Angry IP Scanner:** It is a cross-platform port scanner that is very user-friendly and suitable for beginners. It supports both TCP and UDP scanning.
+
+Remember to always use port scanners responsibly and only on your own systems or where you have permission to perform a scan. Unauthorized port scanning can have legal and ethical implications.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/106-ping.md

@@ -1 +1,35 @@
-# Ping
+# ping
+
+**Ping** is a fundamental networking tool that helps users to check the connectivity between two devices, typically a source computer, and a remote device, such as a server or another computer. The name "ping" comes from the sonar terminology, where a signal is sent out and a response is expected to verify the presence of an object.
+
+The ping command operates by sending Internet Control Message Protocol (ICMP) Echo Request packets to the target host and waiting for an ICMP Echo Reply. By sending multiple requests and calculating the time interval between sending the request and receiving a reply, the tool provides valuable information about the quality and reliability of the network connection.
+
+## Using Ping
+
+To use the ping command, open a command prompt or terminal window, and type `ping` followed by the IP address or hostname of the target device. For example:
+
+```
+ping example.com
+```
+
+## Interpreting Ping Results
+
+The output of the ping command will display the following information:
+
+- **Sent**: The number of packets sent to the target device.
+- **Received**: The number of packets received from the target device (if connectivity is successful).
+- **Lost**: The number of packets that did not reach the target device, indicating a problem in the connection.
+- **Minimum, Maximum, and Average Round Trip Time (RTT)**: Provides an estimate of the time it takes for a single packet to travel from the source device to the destination and back again.
+
+## Troubleshooting with Ping
+
+Ping is particularly useful for diagnosing and troubleshooting network connectivity issues. Some common scenarios in which it can help include:
+
+- Verifying if a remote device is active and responding.
+- Identifying network latency or slow network connections.
+- Troubleshooting routing problems and packet loss.
+- Testing the resolution of domain names to IP addresses.
+
+By understanding and utilizing the ping command, users can diagnose and resolve various network-related issues to ensure a stable and secure online experience.
+
+Remember that some devices or servers may be configured not to respond to ICMP requests, which might result in no response or a "Request timed out" message after using the ping command. This behavior is usually configured to prevent potential security risks or attacks, so don't panic if you encounter this while troubleshooting.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/107-dig.md

@@ -1 +1,38 @@
-# Dig
+# dig
+
+`dig`, short for the Domain Information Groper, is a powerful and flexible command-line tool used to perform DNS queries and obtain valuable information about domains, IPs, and DNS records. This utility, available on UNIX-based systems like Linux and macOS, provides an essential function to help diagnose and resolve various issues related to domain name resolution and network connectivity. It is highly useful for network administrators and cybersecurity professionals when troubleshooting DNS-related problems.
+
+## Features
+
+- **DNS Querying**: `dig` can retrieve various types of DNS records such as A, AAAA, MX, NS, CNAME, and many others.
+- **Flexibility**: With various command-line options, `dig` allows users to customize their queries easily.
+- **User-friendly Formatting**: `dig` provides readable and straightforward responses, simplifying the interpretation of DNS records and related information.
+- **Batch Mode**: The tool enables users to perform multiple DNS queries in a batch file, increasing efficiency.
+
+## Basic Usage
+
+Here's a basic example of how to use `dig` to perform a DNS query:
+
+```
+dig example.com
+```
+
+This command will return the A (IPv4) record for `example.com`.
+
+To perform a specific type of DNS query, such as fetching an AAAA (IPv6) record, use the following command:
+
+```
+dig example.com AAAA
+```
+
+## Common Options
+
+Some common options to use with `dig` include:
+
+- `+short`: Condenses the output, providing only essential information.
+- `-t`: Specifies the type of DNS record to query (e.g., `A`, `AAAA`, `MX`, `NS`, etc.).
+- `+tcp`: Forces `dig` to use TCP instead of the default UDP for the DNS query.
+
+## Conclusion
+
+In summary, `dig` is a valuable command-line tool for performing DNS queries and troubleshooting domain name resolution problems. Its power and flexibility make it an essential tool for any network administrator or cybersecurity professional.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/108-arp.md

@@ -1 +1,32 @@
-# Arp
+# arp
+
+ARP is a crucial network protocol used to map IP addresses to their corresponding MAC (Media Access Control) addresses. This mapping is crucial, as devices on a network use MAC addresses to communicate with one another. As IP addresses are easier to remember and utilize for humans, ARP helps in converting these logical addresses to physical addresses that devices can understand.
+
+## Why ARP is important
+
+In a network, when a device wants to send data to another device, it needs to know the recipient's MAC address. If the sender only knows the IP address, it can use ARP to determine the corresponding MAC address. The mapping is stored in the device's ARP cache, which holds a record of both the IP and MAC addresses. This allows devices to quickly identify and communicate with others on the network.
+
+## ARP Request and Reply
+
+Here are the basic steps involved in the ARP process:
+
+- The sender creates an ARP request packet with its own IP and MAC addresses, and the recipient's IP address. The packet is broadcast to all devices on the local network.
+- Each device on the network receives the ARP request, checks if the IP address is its own, and replies to the sender as needed.
+- The sender receives the ARP reply containing the recipient's MAC address and updates its ARP cache with the new information.
+- Finally, the sender uses the MAC address to transmit data packets to the intended recipient.
+
+## Troubleshooting with ARP
+
+If you're having issues with network communication or want to investigate your network, the ARP table can be a helpful tool. You can view your device's ARP cache using commands specific to your operating system:
+
+- **Windows**: Open Command Prompt and type `arp -a`
+- **Linux**: Open Terminal and type `arp`
+- **macOS**: Open Terminal and type `arp -a`
+
+The output will display the IP and MAC addresses of devices on the network that the system has interacted with.
+
+## ARP Spoofing and Security Concerns
+
+As crucial as ARP is, it can be exploited by attackers for malicious purposes. ARP spoofing, also known as ARP poisoning, is a form of cyberattack in which an attacker sends fake ARP requests to a network to link their MAC address with an IP address that legitimately belongs to another device. This enables the attacker to intercept and manipulate network traffic or launch denial-of-service (DoS) attacks.
+
+To mitigate ARP spoofing, consider implementing security measures such as monitoring ARP traffic, using a static ARP table, or employing security solutions like intrusion detection and prevention systems. Additionally, maintaining a secure and up-to-date network infrastructure can help reduce potential vulnerabilities.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/109-protocol-analyzers.md

@@ -1 +1,31 @@
-# Protocol analyzers
+# Protocol Analyzers
+
+Protocol analyzers, also known as packet analyzers or network analyzers, are tools used to capture and analyze the data packets transmitted across a network. These tools help in monitoring network traffic, identifying security vulnerabilities, troubleshooting network problems, and ensuring that the network is operating efficiently. By analyzing the packets on a network, you can gain insights into the performance of your network infrastructure and the behavior of various devices and applications on it.
+
+## Features & Uses of Protocol Analyzers
+
+- **Traffic Monitoring & Analysis**: Protocol analyzers allow you to monitor the traffic on your network in real-time, which helps identify bottlenecks, network congestion, and other performance issues.
+
+- **Security Analysis**: Analyzing network traffic can help identify unusual traffic patterns, potential security threats or breaches, and malicious activities. By studying the data packets, you can detect unauthorized access, malware infections, or other cyber attacks.
+
+- **Protocol Debugging**: These tools enable you to analyze different network protocols (such as HTTP, FTP, and SMTP) and their respective packets, which proves useful in troubleshooting issues related to application performance and communication.
+
+- **Bandwidth Utilization**: Protocol analyzers allow you to analyze the volume of network traffic and how the available bandwidth resources are being used, helping you optimize the network for better performance.
+
+- **Network Troubleshooting**: By capturing and analyzing packet data, you can identify network problems and take corrective measures to improve the overall performance and stability of the network.
+
+## Popular Protocol Analyzers
+
+Here's a list of some widely-used protocol analyzers:
+
+- **Wireshark**: Wireshark is an open-source packet analyzer with support for numerous protocols. It is one of the most popular and widely-used network troubleshooting tools available.
+
+- **TCPDump**: TCPDump is a command-line packet analyzer that allows you to capture network traffic and view it in a human-readable format, making it easy to analyze.
+
+- **Ethereal**: Ethereal is another open-source packet analyzer that provides a graphical user interface for capturing, filtering, and analyzing network traffic.
+
+- **Nmap**: Nmap is a popular network scanning tool that also includes packet capture and analysis capabilities, allowing you to analyze the network for vulnerabilities and other issues.
+
+- **Microsoft Message Analyzer**: Microsoft Message Analyzer is a versatile protocol analyzer developed by Microsoft that provides deep packet inspection and analysis of network traffic, including encrypted traffic.
+
+In conclusion, protocol analyzers are essential tools for network administrators, security professionals, and developers alike to ensure the performance, security, and stability of their networks. By understanding how these tools work and using them effectively, you can take proactive measures to maintain and improve the health of your network.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/110-nmap.md

@@ -1 +1,35 @@
-# Nmap
+# nmap
+
+**Nmap** (Network Mapper) is an open-source network scanner that is widely used in cyber security for discovering hosts and services on a computer network. Nmap allows you to efficiently explore and scan networks to identify open ports, running services, and other security vulnerabilities.
+
+## Features of Nmap
+
+* **Host Discovery**: Nmap facilitates finding hosts on the network using various techniques such as ICMP echo requests, TCP SYN/ACK probes, and ARP scans.
+
+* **Port Scanning**: Nmap can identify open ports on target hosts, which can reveal potential security vulnerabilities and provide crucial information during a penetration test.
+
+* **Service and Version Detection**: Nmap can detect the name and version of the services running on target hosts. This information helps to identify software that might be outdated or have known security flaws.
+
+* **Operating System Detection**: Nmap can make intelligent guesses about the operating system of a target host, which can be useful for tuning your attack strategy based on the vulnerabilities of specific systems.
+
+* **Scriptable**: Nmap has a built-in scripting engine (NSE) that allows users to write custom scripts for automating and extending its functionality.
+
+## How to use Nmap
+
+Nmap can be installed on various platforms such as Windows, Linux, and macOS. After installation, Nmap can be used via the command line with different options and flags, depending on the desired scan type.
+
+For example, to perform a simple host and port discovery, the following command can be used:
+
+```bash
+nmap -sn -p 80,443 192.168.0.0/24
+```
+
+This command will perform a "ping scan" (`-sn`) on the specified IP range (`192.168.0.0/24`) and check for open ports 80 and 443.
+
+## Important Notes
+
+* While Nmap is a valuable tool for cyber security professionals, it can also be used by malicious attackers to gather information about potential targets. It is essential to use Nmap responsibly and only on networks and systems that you have permission to scan.
+
+* Scanning large networks can generate considerable traffic and may impact the performance of the target hosts. It is important to configure your scans appropriately and be mindful of potential network disruptions.
+
+For more information and usage examples, refer to the [official Nmap documentation](https://nmap.org/book/man.html).

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/111-route.md

@@ -1 +1,59 @@
-# Route
+# route
+
+`route` is a command-line utility that allows you to view and manipulate the IP routing table in your computer. The primary function of the routing table is to determine the best path for sending IP packets to their destination. Properly managing this table is crucial for network administrators, as it plays a direct role in your computer's ability to communicate with other devices on the network effectively.
+
+## Using the Route Command
+
+The syntax for the route command is as follows:
+
+```
+route [COMMAND] [OPTIONS]
+```
+
+Here are some basic commands that you can use with `route`:
+
+- **route add** - Adds a new route to the table
+- **route delete** - Removes a route from the table
+- **route change** - Modifies a specific route in the table
+- **route get** - Retrieves information about a specific route
+- **route show** - Displays the entire routing table
+
+Please note that, to modify the routing table, administrative privileges may be needed.
+
+## Examples of Route Usage
+
+- **View the routing table**
+
+```
+route -n
+```
+
+This command will display the current routing table in a numerical format, which includes the destination, gateway, and interface.
+
+- **Add a new route**
+
+```
+sudo route add -net 192.168.2.0 netmask 255.255.255.0 gw 192.168.1.1
+```
+
+This command adds a new route to the destination network 192.168.2.0 with a netmask of 255.255.255.0 and a gateway of 192.168.1.1.
+
+- **Delete a route**
+
+```
+sudo route delete -net 192.168.2.0 netmask 255.255.255.0
+```
+
+This command removes the route to the destination network 192.168.2.0 with a netmask of 255.255.255.0.
+
+- **Change an existing route**
+
+```
+sudo route change -net 192.168.2.0 netmask 255.255.255.0 gw 192.168.1.2
+```
+
+This command modifies the existing route to the destination network 192.168.2.0 with a new gateway of 192.168.1.2.
+
+## Conclusion
+
+The `route` command is an essential tool for network administrators and anyone involved in cyber security. Understanding and being able to manipulate the IP routing table can help ensure that your computer is able to communicate effectively with other devices on the network, thus contributing to a more secure and efficient network environment.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/112-tcpdump.md

@@ -1 +1,64 @@
-# Tcpdump
+# tcpdump
+
+Tcpdump is a powerful command-line packet analyzer tool that allows you to monitor and intercept network traffic on your system. This utility is beneficial for troubleshooting network connectivity problems and analyzing network protocols. Tcpdump can capture and display the packet headers on a particular network interface or a specific port.
+
+## Key Features
+
+* Capture packets in real-time
+* Display captured packets in a human-readable format
+* Write packets to a file and read saved packet files
+* Filter packets based on specific conditions such as IP addresses, protocol, or port
+
+## Basic Usage
+
+To start using Tcpdump, open your terminal/command line and enter the following command:
+
+```bash
+tcpdump -i any
+```
+
+This command will capture packets on all network interfaces. The output will display source and destination IP addresses, port numbers, and packet length.
+
+## Common Tcpdump Commands
+
+Here are some essential tcpdump commands for different tasks:
+
+- **Monitor a specific interface**: To monitor a specific network interface, replace `<INTERFACE>` with the name of the interface you want to monitor:
+
+   ```bash
+   tcpdump -i <INTERFACE>
+   ```
+
+- **Capture specific number of packets:** To capture a specific number of packets, use the `-c` option followed by the number of packets you want to capture:
+
+   ```bash
+   tcpdump -i any -c 10
+   ```
+
+- **Save captured packets to a file:** Tcpdump can save the captured packets to a file for further analysis. To save the packets in a file, use the `-w` option followed by the file name:
+
+   ```bash
+   tcpdump -i any -w capture.pcap
+   ```
+
+- **Filter captured packets**: You can filter the captured packets by various parameters such as IP addresses, protocol, or port numbers. Some examples of the filter are:
+
+   * Capture packets from/to a specific IP address:
+
+     ```bash
+     tcpdump -i any host 192.168.1.1
+     ```
+    
+   * Capture packets related to a specific port:
+
+     ```bash
+     tcpdump -i any port 80
+     ```
+    
+   * Capture packets by protocol (e.g., icmp, tcp, or udp):
+
+     ```bash
+     tcpdump -i any icmp
+     ```
+
+You can learn more about tcpdump filters and advanced options from its official documentation or by typing `man tcpdump` in your terminal. Tcpdump is an invaluable tool for any network administrator and will help you get to the root of any network issues.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/113-tracert.md

@@ -1 +1,34 @@
-# Tracert
+# tracert
+
+Tracert, short for "Trace Route", is a command-line utility that helps in diagnosing network connectivity issues by displaying the route taken by data packets to reach a specific destination. It identifies each hop along the path and calculates the time it takes for the data packets to travel from one point to another. Tracert can be particularly useful in determining potential delays or interruptions in network communication.
+
+## How to Use Tracert
+
+- Open `Command Prompt` on your Windows computer or `Terminal` on Linux or macOS.
+- Type `tracert` followed by the target destination, which can either be an IP address or a domain name. For example: `tracert example.com`
+
+The output will show a list of hops in sequential order, with each line representing a single hop, its IP address, hostname, and the round-trip time (in milliseconds) for the data packets to reach that point.
+
+## Interpreting Tracert Results
+
+When analyzing the results of a tracert command, consider the following:
+
+- *Hops*: These are the individual steps the data packets take to reach the destination. If the route appears excessively long, there may be an issue with the network configuration or an inefficient routing path.
+- *Round-trip Time (RTT)*: This measures how long it takes for data packets to travel from the source to the destination and back. If the RTT is consistently high or increases significantly between specific hops, there could be a network delay, bottleneck, or congestion.
+- *Request Timed Out*: If you see this error, it means that a data packet failed to reach a specific hop within the given time. This could be an indication of a connection failure, firewall blocking, or packet loss.
+
+However, note that some routers may be configured to discard or de-prioritize ICMP echo requests (the packets used by tracert) due to security reasons or traffic management, which might result in incomplete or inaccurate tracert results.
+
+## Limitations and Alternatives
+
+While tracert is a handy troubleshooting tool, it has some limitations:
+
+- It relies on ICMP (Internet Control Message Protocol) packets, which may be filtered or blocked by firewalls or other network devices.
+- The results might be affected by short-lived network congestions or latency spikes which are not necessarily representative of the average performance.
+- It provides limited insight into the underlying causes of network issues (e.g., hardware failures, software misconfigurations).
+
+For more advanced network troubleshooting and analysis, you may consider other tools such as:
+
+- `ping`: To test basic connectivity and latency towards a specific host or IP address.
+- `nslookup` or `dig`: To look up DNS records, diagnose DNS problems, or verify proper domain name resolution.
+- `mtr` (My Traceroute): Available on Linux and macOS, it combines the functionality of both "traceroute" and "ping," providing real-time, continuous statistics on each hop's performance.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/111-troubleshooting-tools/index.md

@@ -1 +1,41 @@
-# Troubleshooting tools
+# Troubleshooting Tools
+
+In this section, we will discuss various troubleshooting tools that you can use to diagnose and resolve network-related issues. Possessing a strong understanding of these tools is crucial for maintaining a secure and efficient network.
+
+## Ping
+
+`Ping` is a basic command-line tool used to test the reachability of a network host. It sends ICMP Echo Request packets to the target host and waits for an ICMP Echo Reply. If the target host is reachable, you will receive the packets back with round-trip time statistics.
+
+Usage: `ping [target host/IP]`
+
+## Traceroute/tracert
+
+`traceroute` (Linux) and `tracert` (Windows) are command-line tools used to display the path taken by packets across a network. They can help to identify routing problems, latency, and packet loss.
+
+Usage: `traceroute [target host/IP]` or `tracert [target host/IP]`
+
+## Nslookup
+
+`nslookup` is a network administration command-line tool used to query Domain Name System (DNS) servers for host information or IP address resolution.
+
+Usage: `nslookup [hostname]`
+
+## Netstat
+
+The `netstat` command is a versatile command-line tool that displays network connections, routing tables, and network interface statistics. It can help identify critical connections, open ports, and listening services.
+
+Usage: `netstat [-options]`
+
+## Nmap
+
+`Nmap` (Network Mapper) is an open-source tool for network discovery and security auditing. It can scan for open ports, running services, and identify network vulnerabilities.
+
+Usage: `nmap [-options] [target host/IP]`
+
+## Wireshark
+
+`Wireshark` is a widely-used network protocol analyzer that allows you to capture and analyze network traffic in real-time. It provides detailed information about packets, protocols, and network behavior that aids in troubleshooting and security analysis.
+
+Download link: [https://www.wireshark.org/download.html](https://www.wireshark.org/download.html)
+
+Understanding these troubleshooting tools and their applications will help you resolve network issues more effectively and maintain a secure IT infrastructure. Remember to balance security and functionality when managing your network. Practicing good cyber hygiene, staying updated with the latest threats, and continuously assessing your network security will help you stay one step ahead of potential attackers.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/112-auth-methodologies/100-kerberos.md

@@ -1 +1,35 @@
-# Kerberos
+# Kerberos
+
+Kerberos is a network authentication protocol designed to provide strong authentication for client/server applications. It was developed by MIT in the 1980s and is named after the three-headed dog from Greek mythology that guarded the gates of Hades, symbolizing the protocol's aim to provide secure authentication in a potentially hostile network environment.
+
+## How Kerberos works
+
+Kerberos relies on a trusted third party called the Key Distribution Center (KDC). The KDC maintains a database of secret keys for each user and service on the network. The protocol uses symmetric key cryptography, meaning that both the client and the server know the same shared encryption key.
+
+The main goal of Kerberos is to prove the identity of both the client and the server to each other so that they can securely exchange information. To achieve this, the protocol uses tickets - encrypted messages containing information about the client's identity, the server's identity, and a shared session key.
+
+Here is a high-level summary of the Kerberos authentication process:
+
+- The client requests a ticket from the KDC by providing its username.
+- The KDC generates a ticket, encrypts it using the client's secret key, and sends it back to the client.
+- The client decrypts the ticket and obtains a session key that it will use to securely communicate with the server.
+- To access a specific service, the client requests a service ticket from the KDC. The request includes its ticket and the target server's identifier.
+- The KDC generates a service ticket, encrypts it using the server's secret key, and sends it back to the client.
+- The client sends the service ticket to the server along with a message, encrypted using the session key, to establish its identity.
+- The server decrypts the service ticket, extracts the session key, and uses it to decrypt the client's message.
+- After verifying the client's identity, the server allows access to the requested service and sends an encrypted message to confirm authentication.
+
+## Benefits of Kerberos
+
+- **Secure**: Kerberos provides strong authentication using encrypted tickets, making it difficult for attackers to intercept and forge.
+- **Centralized**: The KDC centralizes authentication management, making it easier to control and maintain user access.
+- **Scalable**: The protocol is designed to support large networks, making it a popular choice for enterprise environments.
+- **Interoperable**: Kerberos is an open standard supported by many different platforms and vendors.
+
+## Limitations
+
+- **KDC reliance**: The KDC is a single point of failure. If it's compromised or goes offline, authentication on the network will be disrupted.
+- **Time-sensitive**: Kerberos is sensitive to time differences between servers and clients. Synchronized clocks are necessary to maintain accurate ticket lifetimes and prevent replay attacks.
+- **Complexity**: The protocol can be complex to set up and requires proper management of secret keys.
+
+In summary, Kerberos is a robust and widely used authentication protocol that helps secure client/server communications. Its centralized management and strong security measures make it an excellent choice for organizations with demanding authentication requirements. However, it also has its limitations and complexities that must be carefully managed to maintain a secure and efficient authentication process.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/112-auth-methodologies/101-ldap.md

@@ -1 +1,25 @@
-# Ldap
+# LDAP
+
+LDAP is a protocol used to access directory services, i.e., a hierarchical database that holds information about various objects, such as users, groups, computer accounts, and more. In the context of cybersecurity, it's essential in storing information related to authentication, authorization, and user profiles. LDAP is primarily utilized in enterprise environments as a centralized system for managing user accounts and their permissions.
+
+**How LDAP works**
+- It is based on a client-server model, where the client sends a request to the server (usually an LDAP directory server), and the server responds accordingly.
+- LDAP servers store directory entries in a hierarchical (tree-like) structure, starting from the root (known as the "base DN") and following a series of branches down to individual entries.
+- Each entry in the LDAP directory has a distinguished name (DN), which uniquely identifies the entry in the hierarchy.
+
+**LDAP in Cyber Security**
+In cybersecurity, LDAP servers are often used for the following purposes:
+- **Authentication**: LDAP stores user account and password information, which can be used to authenticate users to access specific applications or resources.
+- **Authorization**: Using LDAP directory groups, you can manage access controls for users and grant or deny permissions based on their role or membership.
+- **User Management**: LDAP provides a single, centralized repository for managing user account information, making it easier to maintain consistent user data across multiple systems or applications.
+
+**LDAP Security Best Practices**
+To enhance the security of your LDAP implementation, consider adopting these best practices:
+
+- Use secure protocols like LDAPS (LDAP over SSL) or StartTLS to encrypt the data transmitted between the client and the LDAP server.
+- Implement strong access control rules to ensure that only authorized clients can access the LDAP directory.
+- Regularly update and patch both client-side and server-side LDAP software to protect against known vulnerabilities.
+- Limit the searchable scope on the client-side, to minimize the risk of information disclosure.
+- Use strong authentication methods, such as multi-factor authentication (MFA), to secure access to the LDAP directory.
+
+In conclusion, LDAP is a critical component in many enterprise-level cybersecurity architectures, as it plays a vital role in handling authentication and authorization processes. To ensure the security of your LDAP implementation, it's crucial to follow best practices and carefully manage access to directory services.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/112-auth-methodologies/102-sso.md

@@ -1 +1,43 @@
-# Sso
+# SSO
+
+Single Sign-On, or SSO, is an authentication mechanism that allows users to access multiple applications, systems, or websites by entering their login credentials only once. This means that a user can quickly and conveniently navigate between multiple platforms without the need to authenticate multiple times, providing both a seamless user experience and an added layer of security.
+
+## Key Components of SSO
+
+There are typically three main components involved in the Single Sign-On process:
+
+- **User:** The individual who wants to access multiple applications within an environment.
+- **Service Provider (SP):** The application or website the user is trying to access.
+- **Identity Provider (IdP):** The third-party platform that securely stores and manages user identities, ensuring only authorized users can access the applications.
+
+## How SSO Works
+
+SSO operates by leveraging a centralized authentication system, usually provided by an Identity Provider (IdP). When a User attempts to access a Service Provider (SP), the following process occurs:
+
+- The User requests access to a Service Provider.
+
+- The Service Provider checks if the User is already authenticated to the Identity Provider.
+
+- If not, the User is redirected to the Identity Provider's login page.
+
+- The User submits their login credentials to the Identity Provider.
+
+- If the credentials are valid, the Identity Provider issues an encrypted token called a "security assertion".
+
+- The User presents this token to the Service Provider as proof of authentication.
+
+- The Service Provider validates the token and grants access to the User.
+
+## Benefits of SSO
+
+- **Improved User Experience:** Users spend less time logging in, allowing them to focus on their work without being repeatedly prompted for authentication.
+
+- **Reduced Password Fatigue:** Users only need to remember one set of login credentials, minimizing the need to write down or reuse passwords, which can be a security risk.
+
+- **Enhanced Security:** By limiting the number of times a user enters their login credentials, SSO reduces the risk of phishing attacks and potential password breaches.
+
+- **Simplified Identity Management:** Centralizing authentication through a single Identity Provider makes it easier for administrators to manage access rights and monitor user activity across multiple platforms.
+
+- **Reduced Help Desk Costs:** With fewer password-related issues to address, help desk teams can focus on more critical tasks, resulting in lower support costs.
+
+Overall, implementing Single Sign-On in your organization can dramatically improve both user experience and system security. However, it is essential to choose a reliable Identity Provider and ensure secure integration with all relevant Service Providers.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/112-auth-methodologies/103-certificates.md

@@ -1 +1,40 @@
-# Certificates
+# Certificates
+
+Certificates, also known as digital certificates or SSL/TLS certificates, play a crucial role in the world of cybersecurity. They help secure communications between clients and servers over the internet, ensuring that sensitive data remains confidential and protected from prying eyes.
+
+## What is a Certificate?
+
+A digital certificate is an electronic document that uses a digital signature to bind a public key with a specific identity, such as a website domain or an organization. It contains information about the certificate holder, the certificate's validity period, and the public key of the entity that the certificate represents.
+
+## Certificate Authorities (CAs)
+
+Certificates are issued and signed by trusted third-party organizations called Certificate Authorities (CAs). CAs are responsible for verifying the authenticity of organizations or individuals making the request and ensuring that they, indeed, own the domain for which the certificate is issued.
+
+Some well-known CAs include:
+
+- DigiCert
+- Let's Encrypt
+- GlobalSign
+- Sectigo (formerly Comodo)
+- Entrust
+
+## Types of Certificates
+
+Different types of certificates serve different purposes and offer varying levels of validation:
+
+- **Domain Validation (DV)**: These certificates validate the ownership of the domain but do not contain any information about the organization that owns it. DV certificates offer a basic level of security and are suitable for websites that don't process sensitive data, such as blogs or portfolio sites.
+- **Organization Validation (OV)**: OV certificates verify the ownership of the domain and contain information about the organization that owns it. This type of certificate provides an enhanced level of trust and is recommended for business websites where users need to know the identity of the organization they are dealing with.
+- **Extended Validation (EV)**: EV certificates provide the highest level of identity validation by conducting a rigorous verification process that involves checking the organization's legal status, physical presence, and domain ownership. Websites with an EV certificate display a green padlock or bar in the browser address bar, increasing user trust and confidence.
+
+## Importance of Certificates
+
+Digital certificates offer various benefits in the realm of cybersecurity, such as:
+
+- **Authentication**: Certificates help to establish the authenticity of a domain or an organization, allowing users to trust that they are communicating with a legitimate entity.
+- **Encryption**: By using public key encryption, certificates enable secure communication between clients and servers, protecting sensitive data from being intercepted by malicious actors.
+- **Integrity**: Certificates ensure that the data transferred between parties remains intact and unaltered during transmission, preventing tampering or manipulation by malicious actors.
+- **Trust**: With the assurance that a website has a valid certificate from a trusted CA, users are more likely to trust and engage with the site, leading to increased conversion rates and customer loyalty.
+
+## Conclusion
+
+Digital certificates provide a crucial layer of security and trust for online communications. Understanding their role in cybersecurity, the different types of certificates, and the importance of acquiring certificates from trusted CAs can greatly enhance your organization's online security posture and reputation.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/112-auth-methodologies/104-local-auth.md

@@ -1 +1,41 @@
-# Local auth
+# Local Auth
+
+In this section, we will discuss local authentication, which is a crucial aspect of ensuring the security of your computer systems and networks.
+
+## What is Local Authentication?
+
+Local authentication is the process of verifying a user's identity on a single, isolated system, such as a computer or a server. It refers to the direct checking of user credentials (such as username and password) against a locally stored database, instead of relying on a centralized authentication service.
+
+## How Does Local Authentication Work?
+
+In a local authentication setup, user and password information is stored on the same system where authentication takes place. When a user attempts to log in, the system checks the provided credentials against the stored data. If they match, access is granted, otherwise, it is denied.
+
+Here is a high-level overview of how local authentication works:
+
+- User attempts to log in by entering their credentials, typically a username and password.
+- System checks the provided credentials against a local database.
+- If the credentials match an entry in the database, access is granted to the user.
+- If the credentials do not match any entries in the database, access is denied and an error message is displayed.
+
+## Advantages and Disadvantages of Local Authentication
+
+## Advantages
+- **Simplicity**: Local authentication is simple to set up, as it doesn't require any external authentication services or additional infrastructure.
+- **No Dependency on Internet Connectivity**: Since user credentials are stored locally, users can still authenticate even if there is no internet connection.
+
+##  Disadvantages
+- **Scalability**: Managing and maintaining user accounts on individual systems becomes difficult when the number of systems and users increases.
+- **Increased Risk**: Information about user accounts, including passwords, may be stored in plain text, making them vulnerable to unauthorized access.
+- **Incomplete Security**: Local authentication alone may not provide sufficient security to protect sensitive information, necessitating the use of additional security measures such as secure socket layer (SSL) and two-factor authentication (2FA).
+
+## Best Practices for Local Authentication
+
+To ensure the security of your system while using local authentication:
+
+- Always use strong, unique passwords for each user account.
+- Regularly update and patch the system to keep it secure against known vulnerabilities.
+- Consider implementing additional security measures, such as encryption, to protect sensitive data.
+- Periodically review user accounts to ensure they have the appropriate access privileges and are no longer needed.
+- Implement logs and monitoring to detect any suspicious activity on your system relating to user authentication.
+
+In conclusion, local authentication can be an effective method for authenticating users on a single system. However, it is important to be aware of its limitations and make sure to implement additional security measures when necessary to keep your data safe.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/112-auth-methodologies/105-radius.md

@@ -1 +1,31 @@
-# Radius
+# RADIUS
+
+**RADIUS** (Remote Authentication Dial-In User Service) is a widely used client-server protocol that offers centralized authentication, authorization, and accounting (AAA) management for users connecting to a network. Developed in 1991, RADIUS allows the transfer of user authentication and configuration information between devices and servers on a network.
+
+## How RADIUS Works
+
+RADIUS uses the User Datagram Protocol (UDP) for communication between the client and the server. When a user attempts to connect to a network, the client (like a VPN server or wireless access point) forwards the authentication request to the RADIUS server. The server then checks the user's credentials against its user database or forwards the request to another authentication server.
+
+Upon successful authentication, the RADIUS server sends back an **Access-Accept** message, as well as user-specific access policies (such as VLAN assignments or firewall rules). If the authentication fails, the server sends an **Access-Reject** message. Additionally, RADIUS tracks and reports user activity, making it responsible for the accounting aspect of AAA.
+
+## Benefits of RADIUS
+
+- **Centralized Management**: RADIUS allows administrators to manage user authentication and policies from a central location. This significantly simplifies the management of large and diverse networks.
+
+- **Scalability**: RADIUS servers can manage authentication for thousands of users and devices, making it well-suited for large organizations.
+
+- **Flexibility**: Being a widely adopted standard, RADIUS is compatible with various devices, such as routers, switches, VPN gateways, and wireless access points. It also allows for integration with other authentication services, like LDAP or Active Directory.
+
+- **Security**: RADIUS encrypts passwords during transmission, minimizing risks associated with data breaches. Additionally, it can enforce various access policies to further strengthen network security.
+
+## RADIUS vs. TACACS+
+
+Another popular AAA protocol is Terminal Access Controller Access-Control System Plus (TACACS+). While both RADIUS and TACACS+ provide similar functionality, there are notable differences:
+
+- RADIUS combines authentication and authorization, while TACACS+ separates them, allowing for greater flexibility and more granular control.
+- RADIUS uses UDP for communication, whereas TACACS+ uses TCP, ensuring reliable and ordered delivery of packets.
+- TACACS+ encrypts the entire payload, while RADIUS only encrypts the password.
+
+Organizations may choose between RADIUS and TACACS+ based on their specific requirements, network setup, and device compatibility.
+
+In conclusion, RADIUS plays a crucial role in implementing a robust and efficient AAA framework, simplifying network administration while ensuring security and compliance.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/112-auth-methodologies/index.md

@@ -1 +1,29 @@
-# Auth methodologies
+# Authentication Methodologies
+
+Authentication methodologies are techniques and processes employed in order to verify the identity of a user, device, or system attempting to access restricted data or resources within a network. This is a crucial backbone of cyber security as it ensures that only verified and authorized users can interact with sensitive data and services. In this section, we will explore various authentication methodologies that you can implement to enhance the security of your network.
+
+## Password-based Authentication
+
+One of the most widely adopted authentication methods is the use of passwords. A user provides a username and a secret password, which are then compared to stored credentials. If the provided credentials match the stored ones, access is granted. This method can be strengthened by enforcing strong password policies, such as requiring a combination of upper and lowercase letters, numbers, and special characters.
+
+## Multi-factor Authentication (MFA)
+
+MFA involves the use of two or more independent factors to verify a user's identity. These factors usually fall into three categories:
+
+- **Knowledge**: Something the user knows (e.g., password, PIN).
+- **Possession**: Something the user has (e.g., hardware token, mobile phone).
+- **Inherence**: Something the user is (e.g., biometrics, such as fingerprints or facial recognition).
+
+By requiring multiple factors, an attacker would need to bypass more than just a single barrier to gain unauthorized access, significantly increasing the security of the system.
+
+## Certificate-based Authentication
+
+This methodology involves the use of digital certificates to authenticate a user or device. Digital certificates are electronic documents containing cryptographic keys and details about the subject they represent. The certificate is issued by a trusted Certificate Authority (CA), ensuring that the public key within the certificate belongs to the user, device or server. This method allows for secure transactions and interactions, as it assures entities involved that the data is coming from a verified and trusted source.
+
+## Single Sign-on (SSO)
+
+SSO is an authentication process that enables users to access multiple related, but independent, software systems using a single set of credentials. By centralizing the authentication process, SSO simplifies user management and reduces the risk of password-related security breaches (e.g., reuse, weak passwords). Popular SSO solutions include OAuth, SAML, and OpenID Connect.
+
+---
+
+To maintain a strong cyber security posture, implementing effective authentication methodologies is essential. Each method has its own strengths and weaknesses, and the best approach depends on your organization's individual needs and resources. By choosing the right mix of authentication methods, you can ensure that only authorized users have access to your sensitive systems and data, significantly reducing the risk of cyber threats.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/functions-of-each/100-dhcp.md

@@ -1 +1,21 @@
-# Dhcp
+# DHCP
+
+DHCP, or Dynamic Host Configuration Protocol, is a network management protocol that simplifies IP address assignment, as well as other network configuration details, to devices in a network. It accomplishes this by automatically assigning IP addresses to devices based on their MAC addresses when they connect to the network. This dynamic approach to IP address allocation eliminates manual tracking and configuration, making it easier for network administrators to manage their networks.
+
+## Key Features
+
+- **Automated IP address allocation**: DHCP uses a range of IP addresses, known as a "pool" or "scope," to automatically assign IP addresses to devices on the network. This helps avoid IP address conflicts and ensures efficient use of available IP addresses.
+
+- **Lease management**: DHCP allows for temporary assignment of IP addresses, called "leases." Leases have expiration periods, after which the IP addresses are returned to the pool, so they can be reassigned to other devices.
+
+- **Centralized configuration**: DHCP also provides a mechanism for central management of network settings, such as DNS servers, default gateways, and subnet masks. This helps maintain a consistent network configuration and reduces the potential for errors.
+
+## Benefits
+
+* **Reduced administration effort**: DHCP reduces the time and effort required to manage IP address assignments in a network, as it automatically assigns and reclaims IP addresses based on lease management.
+
+* **Scalability**: DHCP is helpful for both small and large networks. It allows the easy integration and removal of new devices, without manual IP address assignments.
+
+* **Consistency**: DHCP enables consistent management of network settings, which helps reduce errors and ensures that devices in the network can access the necessary resources.
+
+In summary, DHCP simplifies IP address management and network configuration for network administrators, ensuring efficient use of IP addresses and streamlining network administration. This is particularly valuable in large networks with numerous devices or when devices frequently need to connect or disconnect from the network.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/functions-of-each/101-dns.md

@@ -1 +1,23 @@
-# Dns
+# DNS
+
+The Domain Name System, or DNS, is a core component of the internet infrastructure. It is often described as the phonebook of the internet, as it translates human-readable domain names (such as www.example.com) into IP addresses (such as 192.0.2.1) that computers use to identify each other on the network.
+
+Here are the key concepts and functions of DNS:
+
+- **Domain Name Resolution**: DNS servers, also known as name servers, are responsible for resolving domain names into IP addresses. When you enter a URL in your browser or click on a link, a DNS query is sent to a DNS resolver, which contacts a series of DNS servers to get the correct IP address for the requested domain. Once the IP address is obtained, your browser can then establish a connection with the web server hosting the domain.
+
+- **Hierarchical Structure**: DNS follows a hierarchical structure, with the Root DNS servers at the top. Below the root servers are Top-Level Domain (TLD) servers, which are responsible for managing domain names with specific TLDs (such as .com, .org, .net). After that, there are Second-Level Domain (SLD) servers that manage domain names under specific TLDs (for example, example.com).
+
+- **Caching**: To speed up the domain name resolution process and reduce the load on DNS servers, resolvers and servers often store the results of previous DNS queries in a cache. Cached results have a Time to Live (TTL) value determined by the domain's owner, and once that TTL expires, the resolver will re-query the DNS servers to obtain the updated information.
+
+- **DNS Records**: Domain owners configure various types of DNS records to provide specific information about their domains. Some common DNS record types include:
+
+  - A Record: Address record that maps a domain name to an IPv4 address
+  - AAAA Record: Address record for mapping a domain name to an IPv6 address
+  - CNAME Record: Canonical name record that maps one domain name (alias) to another domain name (canonical)
+  - MX Record: Mail exchange record that specifies the mail server responsible for handling email for the domain
+  - TXT Record: Text records providing additional information about the domain, often used for verification or security purposes
+
+- **DNS Security**: Cyber threats such as DNS hijacking, cache poisoning, and Distributed Denial of Service (DDoS) attacks have highlighted the importance of DNS security. Several security measures and protocols, including DNSSEC (Domain Name System Security Extensions), help protect DNS servers and their records from these threats.
+
+In summary, DNS is a critical component of the internet, enabling users to connect to websites and online services using easily memorable domain names instead of numerical IP addresses. DNS servers, hierarchically organized and employing caching mechanisms, efficiently manage and resolve domain name queries while implementing security measures to maintain the integrity and safety of the internet infrastructure.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/functions-of-each/102-ntp.md

@@ -1 +1,25 @@
-# Ntp
+# NTP
+
+**NTP** (Network Time Protocol) is a crucial aspect of cybersecurity, as it helps in synchronizing the clocks of computer systems and other devices within a network. Proper time synchronization is vital for various functions, including authentication, logging, and ensuring the accuracy of digital signatures. In this section, we will discuss the importance, primary functions, and potential security risks associated with NTP.
+
+## Importance of NTP in Cybersecurity
+
+- **Authentication**: Many security protocols, such as Kerberos, rely on accurate timekeeping for secure authentication. Time discrepancies may lead to authentication failures, causing disruptions in network services and affecting the overall security of the system.
+- **Logging and Auditing**: Accurate timestamps on log files are essential for identifying and investigating security incidents. Inconsistent timing can make it challenging to track malicious activities and correlate events across systems.
+- **Digital Signatures**: Digital signatures often include a timestamp to indicate when a document was signed. Accurate time synchronization is necessary to prevent tampering or repudiation of digital signatures.
+
+## Primary Functions of NTP
+
+- **Clock Synchronization**: NTP helps in coordinating the clocks of all devices within a network by synchronizing them with a designated reference time source, usually a central NTP server.
+- **Time Stratum Hierarchy**: NTP uses a hierarchical system of time servers called "stratum" to maintain time accuracy. Servers at a higher stratum provide time to lower stratum servers, which in turn synchronize the clocks of client devices.
+- **Polling**: NTP clients continually poll their configured NTP servers at regular intervals to maintain accurate time synchronization. This process allows for the clients to adjust their clocks based on the information received from the server.
+
+## Security Risks and Best Practices with NTP
+
+While NTP is essential for maintaining accurate time synchronization across a network, it is not without security risks:
+
+- **NTP Reflection/Amplification Attacks**: These are a type of DDoS (Distributed Denial of Service) attack that leverages misconfigured NTP servers to amplify malicious traffic targeted at a victim's system. To mitigate this risk, ensure your NTP server is securely configured to prevent abuse by attackers.
+- **Time Spoofing**: An attacker can manipulate NTP traffic to alter the time on client devices, potentially causing authentication failures or allowing unauthorized access. Use authentication keys with NTP to ensure the integrity of time updates by verifying the server's identity.
+- **Untrusted Servers**: Obtain time from a reliable time source to prevent tampering. Always configure clients to use trusted NTP servers, like pool.ntp.org, which provides access to a global group of well-maintained NTP servers.
+
+By understanding and implementing these crucial aspects of NTP, you can improve the overall security posture of your network by ensuring accurate time synchronization across all systems.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/functions-of-each/103-ipam.md

@@ -1 +1,21 @@
-# Ipam
+# IPAM
+
+IP Address Management (IPAM) is a critical aspect of cyber security, as it helps organizations efficiently manage and track their IP addresses, DNS, and DHCP services. In any network, devices like servers, routers, and switches are assigned unique IP addresses, which enables them to communicate with each other. Efficient and secure management of these IP addresses is vital for maintaining network security and prevent unauthorized access.
+
+## Functions of IPAM
+
+- **IPv4 and IPv6 address management:** IPAM enables organizations to manage and keep track of their IPv4 and IPv6 addresses. It allows for the allocation, assignment, and control of IP addresses in networks, preventing conflicts and errors.
+
+- **DNS integration:** A well-organized IPAM system can integrate with DNS services to provide consistent and accurate information about the network. This helps organizations in keeping their DNS records up-to-date and secure.
+
+- **DHCP integration:** IPAM works hand-in-hand with DHCP services to manage and monitor IP address leases within the network. This ensures that devices are assigned dynamic IP addresses and automatically updated when a lease expires.
+
+- **Network discovery and auditing:** IPAM enables network discovery, scanning, and auditing to ensure that all connected devices are accounted for and comply with security policies. Regular network discovery can also identify rogue devices or unauthorized access.
+
+- **Policy compliance:** IPAM can help enforce policies related to IP address assignment and usage within an organization. This may include restrictions on the use of certain types of addresses or preventing specific devices from obtaining an IP address.
+
+- **Inventory management and allocation:** IPAM allows organizations to maintain an inventory of available IP addresses, subnets, and address pools. This streamlines IP allocation processes and ensures that addresses are optimally utilized.
+
+- **Reporting and analytics:** An IPAM system can provide detailed reports on IP address usage, allocation history, and other statistics. This information can help organizations identify trends, optimize their networks, and improve overall security.
+
+In conclusion, IPAM plays a vital role in cyber security by enabling organizations to manage and monitor their IP address spaces efficiently. Implementing a comprehensive IPAM solution can help organizations maintain secure and effective network communication, comply with policies, and prevent unauthorized access.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/index.md

@@ -1 +1,21 @@
-# Networking knowledge
+# Networking Knowledge
+
+In the world of cyber security, having a strong foundation in networking knowledge is crucial. It's important to understand the fundamental concepts and mechanisms that govern how data is transferred, communicated, and secured across digital networks.
+
+## Topics
+
+* **Network Architecture**: Learn about the different networking models, such as the OSI model and TCP/IP model, which define how data is structured, transmitted, and received in a network. 
+
+* **Network Protocols**: Familiarize yourself with various network protocols that are essential for effective communication between devices, including HTTP, HTTPS, FTP, and more. These protocols ensure that data is transmitted reliably and securely across networks.
+
+* **IP Addressing and Subnetting**: Gain an understanding of IP addresses (both IPv4 and IPv6), how they are assigned, and how subnetting works to divide networks into smaller segments for better management and security.
+
+* **Routing and Switching**: Learn about the roles of routers and switches in a network, as well as related technologies and protocols like DHCP, NAT, and various routing protocols (such as OSPF and BGP). 
+
+* **Wireless Networking**: Delve into the world of wireless networks by studying the different types of wireless technologies like Wi-Fi, Bluetooth, and cellular networks. Understand the security concerns and best practices associated with wireless communication.
+
+* **Network Security**: Explore various techniques and tools used to defend networks from cyber threats, including firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and VPNs. Learn about security protocols like SSL/TLS, encryption algorithms, and secure access control mechanisms.
+
+* **Network Troubleshooting**: Understand common network issues and how to resolve them, using various network troubleshooting tools and methodologies like ping, traceroute, and Wireshark.
+
+By developing a strong foundation in networking knowledge, you will be well-equipped to tackle various cyber security challenges and protect your digital assets from potential threats. Remember, the ever-evolving landscape of cyber security demands continuous learning and updating of skills to stay ahead in the game.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/100-vlan.md

@@ -1 +1,26 @@
-# Vlan
+# VLAN
+
+A **VLAN** or **Virtual Local Area Network** is a logical grouping of devices or users within a network, based on shared attributes like location, department, or security requirements. VLANs play a crucial role in improving network security, enabling better resource allocation, and simplifying network management.
+
+## Key Features of VLANs
+
+* **Isolation:** VLANs isolate traffic between different groups, helping to minimize the risk of unauthorized access to sensitive data.
+* **Scalability:** VLANs allow network administrators to grow and change networks with ease, without causing disruptions.
+* **Cost Effectiveness:** VLANs can reduce the need for additional hardware by reusing existing switches and networks for added functionality.
+* **Improved Performance:** By narrowing the broadcast domain, VLANs can improve network performance by reducing unnecessary traffic.
+
+## Types of VLANs
+
+- **Port-based VLANs:** In this type, devices are separated based on their physical connection to the switch. Each port is assigned to a specific VLAN.
+- **Protocol-based VLANs:** Devices are grouped based on the network protocol they use. For example, all IP devices can be assigned to one VLAN, while IPX devices can be assigned to another.
+- **MAC-based VLANs:** Devices are assigned to VLANs based on their MAC addresses. This approach offers better security and flexibility but requires more administrative effort.
+
+## Creating and Managing VLANs
+
+VLANs are created and managed through network switches that support VLAN configuration. Switches use a VLAN ID (ranging from 1 to 4094) to uniquely identify each VLAN. VLAN Trunking Protocol (VTP) and IEEE 802.1Q standard are typically used to manage VLANs between different switches.
+
+## Security Considerations
+
+VLANs play a crucial role in network security; however, they are not foolproof. VLAN hopping and unauthorized access can still occur if proper measures, such as Private VLANs and Access Control Lists (ACLs), are not implemented to secure the network.
+
+In summary, VLANs offer a flexible and secure way to manage and segment networks based on needs and requirements. By understanding their purpose, types, and security considerations, network administrators can efficiently use VLANs to improve overall network performance and security.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/101-dmz.md

@@ -1 +1,20 @@
-# Dmz
+# DMZ
+
+A **DMZ**, also known as a **Demilitarized Zone**, is a specific part of a network that functions as a buffer or separation between an organization's internal, trusted network and the external, untrusted networks like the internet. The primary purpose of a DMZ is to isolate critical systems and data from the potentially hostile external environment and provide an extra layer of security.
+
+## Purpose of DMZ
+
+- **Security**: By segregating critical systems, a DMZ reduces the risk of unauthorized access and potential damage from external threats. This is achieved by implementing strong access controls, firewalls, and intrusion detection and prevention systems (IDS/IPS) to monitor and filter traffic between the DMZ and internal networks.
+- **Content Filtering**: It enables organizations to place publicly accessible servers (e.g., web and email servers) within the DMZ without exposing the entire internal network to potential attacks. This ensures that only authorized traffic is allowed to pass through.
+- **Ease of Management**: DMZ aids in simplifying security management processes as it provides a centralized location for implementing, auditing, and monitoring security policies, rules, and configurations for public-facing resources.
+
+## Components of DMZ
+
+The key components in a DMZ include:
+
+- **Firewalls**: These devices are used to control and manage traffic between the DMZ, internal, and external networks. They can be configured to allow, deny, or restrict access based on pre-defined security policies and rules.
+- **Proxies**: Proxy servers act as intermediaries between the internal network and the internet. They help to screen and filter incoming and outgoing web traffic, providing an additional layer of security.
+- **Intrusion Detection and Prevention Systems (IDS/IPS)**: These tools continuously monitor and analyze network traffic, looking for signs of unauthorized access or malicious activities, and automatically take appropriate actions to mitigate threats.
+- **Public-Facing Servers**: These are the servers hosted within the DMZ, designed to serve content and resources to external users. They are typically configured with additional security measures to further reduce the risk of compromise.
+
+As the author of this guide, I hope this brief summary about DMZ helps you enhance your understanding of cyber security terminologies and their importance in protecting organizations' networks and data. Keep reading for more insights!

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/102-arp.md

@@ -1 +1,17 @@
-# Arp
+# ARP
+
+ARP is a protocol used by the Internet Protocol (IP) to map an IP address to a physical address, also known as a Media Access Control (MAC) address. ARP is essential for routing data between devices in a Local Area Network (LAN) as it allows for the translation of IP addresses to specific hardware on the network.
+
+## How It Works
+
+When a device wants to communicate with another device on the same LAN, it needs to determine the corresponding MAC address for the target IP address. ARP helps in this process by broadcasting an ARP request containing the target IP address. All devices within the broadcast domain receive this ARP request and compare the target IP address with their own IP address. If a match is found, the device with the matching IP address sends an ARP reply which contains its MAC address.
+
+The device that initiated the ARP request can now update its ARP cache (a table that stores IP-to-MAC mappings) with the new information, and then proceed to send data to the target's MAC address.
+
+## Security Concerns
+
+While ARP is crucial for the functioning of most networks, it also presents certain security risks. ARP poisoning, for example, occurs when an attacker sends fake ARP messages with the goal to associate their MAC address with the IP address of a target device. This can lead to Man-in-the-Middle (MITM) attacks where the attacker can intercept, modify, or block traffic intended for the target device.
+
+To mitigate ARP poisoning attacks, organizations can implement security measures such as static ARP entries, dynamic ARP inspection, and ensuring that their network devices are updated with the latest security patches.
+
+By understanding ARP and the potential security risks it presents, you can help protect your network by incorporating appropriate security solutions and staying vigilant against potential threats.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/103-vm.md

@@ -1 +1,23 @@
-# Vm
+# VM
+
+A **Virtual Machine (VM)** is a software-based emulation of a computer system that operates on a physical hardware, also known as a host. VMs provide an additional layer of isolation and security as they run independent of the host's operating system. They can execute their own operating system (called the guest OS) and applications, allowing users to run multiple operating systems on the same hardware simultaneously.
+
+Virtual machines are commonly used in cybersecurity for tasks such as:
+
+- **Testing and analysis**: Security researchers often use VMs to study malware and vulnerabilities in a safe and contained environment without risking their primary system.
+
+- **Network segmentation**: VMs can be used to isolate different network segments within an organization, to help prevent the spread of malware or limit the impact of an attack.
+
+- **System recovery**: VMs can act as backups for critical systems or applications. In the event of a system failure, a VM can be spun up to provide continuity in business operations.
+
+- **Software development and testing**: Developers can use VMs to build and test software in a controlled and reproducible environment, reducing the risks of incompatibilities or unexpected behaviors when the software is deployed on a live system.
+
+Key terminologies associated with VMs include:
+
+- **Hypervisor**: Also known as Virtual Machine Monitor (VMM), is a software or hardware component that creates, runs, and manages virtual machines. Hypervisors are divided into two types - Type 1 (bare-metal) and Type 2 (hosted).
+
+- **Snapshot**: A snapshot is a point-in-time image of a virtual machine that includes the state of the guest OS, applications, and data. Snapshots are useful for quickly reverting a VM back to a previous state if needed.
+
+- **Live Migration**: This refers to the process of moving a running virtual machine from one physical host to another with minimal or no disruption to the guest OS and its applications. Live migration enables load balancing and ensures minimal downtime during hardware maintenance.
+
+Understanding and effectively utilizing virtual machines plays a significant role in enhancing the security posture of an organization, allowing for agile incident response and proactive threat analysis.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/104-nat.md

@@ -1 +1,25 @@
-# Nat
+# NAT
+
+Network Address Translation (NAT) is a key element in modern network security. It acts as a middleman between devices on your local area network (LAN) and the external internet. NAT helps to conserve IP addresses and improve privacy and security by translating IP addresses within private networks to public IP addresses for communication on the internet.
+
+## How NAT works
+
+NAT is implemented on a router, firewall or a similar networking device. When devices in the LAN communicate with external networks, NAT allows these devices to share a single public IP address, which is registered on the internet. This is achieved through the following translation types:
+
+- **Static NAT:** A one-to-one mapping between a private IP address and a public IP address. Each private address is mapped to a unique public address.
+- **Dynamic NAT:** A one-to-one mapping between a private IP address and a public IP address, but the public address is chosen from a pool rather than being pre-assigned.
+- **Port Address Translation (PAT):** Also known as NAT Overload, PAT maps multiple private IP addresses to a single public IP address, using unique source port numbers to differentiate the connections.
+
+## Advantages of NAT
+
+- **Conservation of IP addresses:** NAT helps mitigate the shortage of IPv4 addresses by allowing multiple devices to share a single public IP address, reducing the need for organizations to purchase additional IP addresses.
+- **Security and Privacy:** By hiding internal IP addresses, NAT adds a layer of obscurity, making it harder for attackers to target specific devices within your network.
+- **Flexibility:** NAT enables you to change your internal IP address scheme without having to update the public IP address, reducing time and effort in reconfiguring your network.
+
+## Disadvantages of NAT
+
+- **Compatibility issues:** Certain applications and protocols may encounter issues when operating behind a NAT environment, such as IP-based authentication or peer-to-peer networking.
+- **Performance impact:** The translation process may introduce latency and reduce performance in high-traffic networks.
+- **End-to-End Connectivity:** NAT generally breaks the end-to-end communication model of the internet, which can cause issues in some scenarios.
+
+In summary, NAT plays a crucial role in modern cybersecurity by conserving IP addresses, obscuring internal networks and providing a level of security against external threats. While there are some disadvantages, its benefits make it an essential component in network security.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/105-ip.md

@@ -1 +1,38 @@
-# Ip
+# IP
+
+IP, or Internet Protocol, is a fundamental concept in cybersecurity that refers to the way data is transferred across networks, specifically the internet. It is a core component of the internet's architecture and serves as the primary building block for communication between devices connected to the network.
+
+## IP Address
+
+An IP address is a unique identifier assigned to each device connected to a network, like a computer or smartphone. It comprises a series of numbers separated by dots (e.g., 192.168.1.1). IP addresses can be either IPv4 (32-bit) or the newer IPv6 (128-bit) format, which provides more available addresses. They allow devices to send and receive data packets to and from other devices on the internet.
+
+## IP Routing
+
+IP routing is the process of directing data packets from one IP address to another via routers. These routers help find the most efficient path for the data to take as it travels across networks, ensuring that communication is fast and reliable.
+
+## IP Protocols
+
+Two main IP protocols exist for transferring data over the internet: Transmission Control Protocol (TCP) and User Datagram Protocol (UDP). Each protocol has its own unique characteristics and use cases.
+
+- **TCP**: Designed to ensure error-free, in-order transmission of data packets, TCP is used for applications where reliability is more important than speed, such as file transfers, email, and web browsing.
+- **UDP**: A faster, connectionless protocol that doesn't guarantee the order or integrity of data packets, making it suitable for real-time applications like video streaming and online gaming.
+
+## IP Security Risks
+
+IP-based attacks can disrupt communication between devices and even result in unauthorized access to sensitive data. Such attacks include:
+
+- **IP Spoofing**: Manipulating an IP address to disguise the source of traffic or impersonate another device on the network.
+- **DDoS Attacks**: Overwhelming a target IP address or network with a massive amount of traffic, making services unavailable to users.
+- **Man-in-the-Middle Attacks**: Interceptors intercept and potentially modify data in transit between two IP addresses, enabling eavesdropping, data theft, or message alteration.
+
+## IP Security Best Practices
+
+To safeguard against IP-based threats, consider implementing the following cybersecurity best practices:
+
+- Deploy firewalls to filter out malicious traffic and block unauthorized access.
+- Use VPNs to encrypt data in transit and hide your IP address from potential attackers.
+- Regularly update network devices and software to patch vulnerabilities.
+- Employ intrusion detection and prevention systems (IDPS) to monitor and counter threats.
+- Educate users about safe internet habits and the importance of strong, unique passwords.
+
+Understanding IP and its associated security risks is crucial in ensuring the safe and efficient transfer of data across networks. By following best practices, you can help protect your network and devices from potential cyber threats.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/106-dns.md

@@ -1 +1,23 @@
-# Dns
+# DNS
+
+**DNS** is a key component in the internet infrastructure that translates human-friendly domain names (e.g., `www.example.com`) into IP addresses (e.g., `192.0.2.44`). This translation process enables us to easily connect to websites and other online resources without having to remember complex numeric IP addresses.
+
+The DNS operates as a distributed and hierarchical system which involves the following components:
+
+- **DNS Resolver**: Your device's initial contact point with the DNS infrastructure, often provided by your Internet Service Provider (ISP) or a third-party service like Google Public DNS.
+
+- **Root Servers**: The authoritative servers on the top of the DNS hierarchy that guide DNS queries to the appropriate Top-Level Domain (TLD) servers.
+
+- **TLD Servers**: These servers manage the allocation of domain names for top-level domains, such as `.com`, `.org`, etc.
+
+- **Authoritative Name Servers**: These are the servers responsible for storing the DNS records pertaining to a specific domain (e.g., `example.com`).
+
+Some common DNS record types you might encounter include:
+
+- **A (Address) Record**: Maps a domain name to an IPv4 address.
+- **AAAA (Address) Record**: Maps a domain name to an IPv6 address.
+- **CNAME (Canonical Name) Record**: Maps an alias domain name to a canonical domain name.
+- **MX (Mail Exchange) Record**: Specifies the mail servers responsible for handling email for the domain.
+- **TXT (Text) Record**: Contains human-readable or machine-readable text, often used for verification purposes or providing additional information about a domain.
+
+As an essential part of the internet, the security and integrity of the DNS infrastructure are crucial. However, it's vulnerable to various types of cyber attacks, such as DNS cache poisoning, Distributed Denial of Service (DDoS) attacks, and DNS hijacking. Proper DNS security measures, such as DNSSEC (DNS Security Extensions) and monitoring unusual DNS traffic patterns, can help mitigate risks associated with these attacks.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/107-dhcp.md

@@ -1 +1,23 @@
-# Dhcp
+# DHCP
+
+**Dynamic Host Configuration Protocol (DHCP)** is a network protocol that enables automatic assignment of IP addresses to devices on a network. It is an essential component of IP networking and aims to simplify the process of configuring devices to communicate over an IP-based network.
+
+## Key Features of DHCP
+
+- **Automatic IP Address Assignment**: DHCP eliminates the need for manual IP address assignment by automatically providing devices with the necessary IP addresses, reducing the risk of duplicate addressing.
+- **Network Configuration**: In addition to IP addresses, DHCP can also provide other essential network information such as subnet mask, default gateway, and DNS server information.
+- **IP Address Reuse**: When a device leaves the network or no longer needs an IP address, DHCP allows the address to be reused and assigned to a different device.
+- **Lease Duration**: DHCP assigns IP addresses for a specific period called a "lease." After a lease expires, the device must request a new IP address or get its current address renewed.
+
+## How DHCP Works
+
+The DHCP process consists of four main steps:
+
+- **DHCP Discover**: A device (client) looking to join a network sends a broadcast message known as a "DHCP Discover" message to locate a DHCP server.
+- **DHCP Offer**: Upon receiving the "DHCP Discover" broadcast, the DHCP server responds with a unicast "DHCP Offer" message containing the necessary network configuration information (e.g., IP address) for the client.
+- **DHCP Request**: The client receives the offer and sends back a "DHCP Request" message to confirm the IP address assignment and other network information.
+- **DHCP Acknowledgment (ACK)**: Finally, the DHCP server sends an "ACK" message confirming the successful assignment of IP address and network settings. The client can now use the allocated IP address to communicate over the network.
+
+## Importance in Cyber Security
+
+Understanding DHCP is crucial for network professionals and cyber security experts as it can be a potential attack vector. Adversaries can exploit DHCP by setting up rogue DHCP servers on the network, conducting man-in-the-middle attacks or even conducting denial-of-service attacks. Consequently, securing DHCP servers, monitoring network traffic for anomalies, and employing strong authentication and authorization methods are essential practices for maintaining network security.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/108-router.md

@@ -1 +1,33 @@
-# Router
+# Router
+
+A **router** is a networking device responsible for forwarding data packets between computer networks. It acts as a traffic coordinator, choosing the best possible path for data transmission, thus ensuring smooth communication between networks. Routers are an integral part of the internet, helping to establish and maintain connections between different networks and devices.
+
+## Functionality of Routers
+
+- **Routing Decisions**: Routers analyze incoming data packets and make decisions on which path to forward the data based on destination IP addresses and network conditions.
+
+- **Connecting Networks**: Routers are essential in connecting different networks together. They enable communication between your home network and the broader internet, as well as between different networks within an organization.
+
+- **Managing Traffic**: Routers manage the flow of data to ensure optimal performance and avoid network congestion. They can prioritize certain types of data, such as video streaming, to ensure a better user experience.
+
+## Types of Routers
+
+- **Wired Routers**: Utilize Ethernet cables to connect devices to the network. They typically come with multiple ethernet ports for devices such as computers, gaming consoles, and smart TVs.
+
+- **Wireless Routers**: Provide network access without needing physical cables. Wireless routers use Wi-Fi to transmit data between devices and are the most common type of router found in homes and offices.
+
+- **Core Routers**: Operate within the backbone of the internet, directing data packets between major networks (such as ISPs). These routers are high-performance devices capable of handling massive amounts of data traffic.
+
+## Router Security
+
+As routers are a critical gateway between your network and the internet, it's essential to keep them secure. Some common router security practices include:
+
+- Changing default passwords and usernames: Manufacturers often set simple default passwords, which can be easily guessed or discovered by attackers. It's important to set a strong, unique password for your router.
+
+- Regular firmware updates: Router manufacturers release updates to address security vulnerabilities and improve performance. Keep your router's software up to date.
+
+- Disable remote management: Some routers have a feature that allows remote access, which can be exploited by hackers. If you don't need this feature, disable it.
+
+- Create a guest network: If your router supports it, create a separate network for guests to use. This isolates them from your primary network, ensuring that they cannot access your devices or data.
+
+By understanding routers and their role in cybersecurity, you can take the necessary steps to secure your network and protect your data.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/109-switch.md

@@ -1 +1,18 @@
-# Switch
+# Switch
+
+A **switch** is a networking device that connects devices together on a computer network. It filters and forwards data packets between different devices by using their MAC (Media Access Control) addresses to identify them. Switches play an essential role in managing traffic and ensuring that data reaches its intended destination efficiently.
+
+## Key Features and Functions
+- **Intelligent Traffic Management:** Switches monitor the data packets as they travel through the network, only forwarding them to the devices that need to receive the data. This optimizes network performance and reduces congestion.
+- **Layer 2 Switching:** Switches operate at the data link layer (Layer 2) of the OSI (Open Systems Interconnection) model. They use MAC addresses to identify devices and determine the appropriate path for data packets.
+- **Broadcast Domains:** A switch creates separate collision domains, breaking up a single broadcast domain into multiple smaller ones, which helps minimize the impact of broadcast traffic on network performance.
+- **MAC Address Table:** Switches maintain a MAC address table, storing the mapping of MAC addresses to the appropriate physical interfaces, helping the switch identify the destination of the data packets efficiently.
+
+## Types of Switches
+
+Switches can be categorized into two main types:
+
+- **Unmanaged Switch:** These switches are simple plug-and-play devices that require no configuration. They are best suited for small networks or places where advanced features and customized settings are not necessary.
+- **Managed Switch:** These switches offer a higher level of control and customization, allowing network administrators to monitor, manage, and secure network traffic. Managed switches are typically used in enterprise-level networks or environments that require advanced security features and traffic optimization.
+
+By understanding the role and functionality of switches within computer networks, you can better navigate the complexities of cyber security and make informed decisions for optimizing network performance and security.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-the-terminology/110-vpn.md

@@ -1 +1,15 @@
-# Vpn
+# VPN
+
+A **Virtual Private Network** (VPN) is a technology that provides secure and encrypted connections between devices over a public network, such as the internet. VPNs are primarily used to protect your internet activity and privacy from being accessed or monitored by external parties, such as hackers or government agencies.
+
+The main components of a VPN are:
+
+- **VPN client**: The software installed on your device that connects to the VPN server.
+- **VPN server**: A remote server that handles and encrypts your internet traffic before sending it to its intended destination.
+- **Encryption**: The process of converting your data into unreadable code to protect it from unauthorized access.
+
+When you connect to a VPN, your device's IP address is replaced with the VPN server's IP address, making it seem as if your internet activity is coming from the server's location. This allows you to access content and websites that may be blocked or restricted in your region, and also helps to protect your identity and location online.
+
+Using a reliable VPN service is an essential part of maintaining good cyber security, especially when using public Wi-Fi networks or accessing sensitive information online.
+
+Keep in mind, however, that not all VPNs are created equal. Make sure to do your research and choose a reputable VPN provider with a strong focus on privacy and security. Some popular and trusted VPN services include ExpressVPN, NordVPN, and CyberGhost.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-these/100-man.md

@@ -1 +1,50 @@
-# Man
+# MAN
+
+The **man** pages, short for "manual pages," is a reference/documentation system available in Unix-based operating systems. Man pages provide detailed information about various commands, utilities, and configuration files, aimed at helping users understand and properly use these tools and features.
+
+## Man Command
+
+The `man` command is used to access the contents of man pages. To look up the manual page for a particular command or utility, simply type `man` followed by the command or utility you want to learn about.
+
+Here's an example:
+
+```bash
+man ls
+```
+
+This example will display the man page for the `ls` command, which is used to list the contents of a directory.
+
+## Man Page Sections
+
+Man pages are divided into sections, which cover different topics such as general commands, system calls, library functions, device drivers, and more. Each section is numbered, and you may see the same command or utility listed in different sections. 
+
+The section numbers are as follows:
+
+- **General commands**: User-level commands and utilities
+- **System calls**: Functions provided by the kernel
+- **Library functions**: Functions within program libraries
+- **Special files**: File-system nodes like device files
+- **File formats**: Various file formats and conventions
+- **Games and screensavers**
+- **Miscellaneous**: Miscellaneous topics
+- **System administration commands**: Commands for system administration tasks
+
+To access a specific section of a man page, include the section number before the command name. For example, to access section 4 of the `tty` man page, type:
+
+```bash
+man 4 tty
+```
+
+## Navigation and Search
+
+Once you're inside a man page, you can navigate and search using the following key bindings:
+
+- `Up` and `Down` arrow keys or `j` and `k` to scroll line by line
+- `Enter` to scroll one line at a time
+- `Space` to scroll one screen/page at a time
+- `/` followed by a search query to search within the man page
+- `n` to jump to the next instance of the search term
+- `N` to jump to the previous instance of the search term
+- `q` to quit the man page and return to the command prompt
+
+The man pages are an invaluable resource for understanding how and when to use specific commands and utilities on Unix-based systems. Make it a habit to refer to them whenever you encounter an unfamiliar command or need a reference for using a specific utility.

src/data/roadmaps/cyber-security/content/102-networking-knowledge/understand-these/101-lan.md

@@ -1 +1,39 @@
-# Lan
+# LAN
+
+A **Local Area Network (LAN)** is a vital component of cyber security that you must understand. This chapter covers a brief introduction to LAN, its basic functionalities and importance in maintaining a secure network environment.
+
+## What is LAN?
+
+LAN stands for Local Area Network, which is a group of computers and other devices interconnected within a limited geographical area, like an office, school campus or even a home. These networks facilitate sharing of resources, data and applications among connected devices. They can be wired (Ethernet) or wireless (Wi-Fi).
+
+## Key Components of LAN
+
+LAN comprises several key components, including:
+
+- **Workstations**: End user devices like computers, laptops or smartphones connected to the network.
+- **Servers**: Computers that provide resources and services to the workstations.
+- **Switches**: Networking devices that connect workstations and servers, and distribute network traffic efficiently.
+- **Routers**: Devices that connect the LAN to the internet or other networks (e.g., Wide Area Networks or WANs).
+
+## Importance of LAN
+
+LANs play a fundamental role in modern organizations, providing:
+
+- **Resource Sharing**: They allow sharing of resources such as printers, scanners, storage drives and software applications across multiple users.
+- **Communication**: They enable faster communication between connected devices and allow users to collaborate effectively using email, chat or VoIP services.
+- **Data Centralization**: They allow data storage and retrieval from central servers rather than individual devices, which simplifies data management and backups.
+- **Scalability**: LANs can be easily expanded to accommodate more users and resources to support business growth.
+
+## LAN Security
+
+Understanding LAN is crucial for maintaining a secure network environment. Since a LAN connects multiple devices, it forms the central point of various security vulnerabilities. Implementing effective security measures is vital to prevent unauthorized access, data leaks, and malware infections. Some best practices for securing your LAN include:
+
+- **Firewalls**: Deploy hardware-based and software-based firewalls to protect your network from external and internal threats.
+- **Antivirus Software**: Use antivirus applications on workstations and servers to prevent malware infections.
+- **Wireless Security**: Implement robust Wi-Fi security measures like WPA2 encryption and strong passwords to prevent unauthorized access.
+- **Access Controls**: Implement network access controls to grant authorized users access to specific resources and data.
+- **Network Segmentation**: Divide the network into separate zones based on required access levels and functions to contain potential threats.
+- **Regular Updates**: Keep your workstations, servers and network devices up-to-date with security patches and updates to fix vulnerabilities.
+- **Network Monitoring**: Use network monitoring tools to keep track of network traffic and identify potential threats or anomalies.
+
+By understanding the components and importance of LAN, you can effectively contribute to improving your organization's cyber security posture. In the next chapter, we will discuss additional cyber security topics that you need to be familiar with.