In this episode, Steve and John dive into why securing systems is a must-know skill in cybersecurity. Learn the basics of system hardening, access control, and logging, plus practical tools and labs to get hands-on. They also explore how AI can boost your defense game — and why thinking like both an attacker and defender will set you apart.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Episode Resources:

Hands-On Labs & Platforms

1. TryHackMe 
   • Labs: Intro to Windows, Hardening, Linux Privilege Escalation, Pre-Security Path
   • Great for learning system hardening and exploitation from both Red and Blue perspectives.
   • Link: https://tryhackme.com
2. Hack The Box Academy 
   • Modules on Windows/Linux fundamentals, Active Directory hardening, and network security.
   • Link: https://www.hackthebox.com/
3. Cyber Defenders 
   • Real-world challenges with system logs, hardening tasks, and detection engineering.
   • Link: https://cyberdefenders.org/

Security Benchmarks & Guides

1. CIS Benchmarks 
   • Free hardening guidelines for Windows, Linux, macOS, network devices, and cloud platforms.
   • Link: https://www.cisecurity.org/cis-benchmarks
2. Microsoft Security Baselines 
   • Microsoft’s official security settings for Windows 10/11, Server, Office, and more.
   • Link: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines

Tools & Scripts

1. Windows Hardening Guide by Debloat Windows
   • Open-source PowerShell scripts to harden Windows easily.
   • Link: https://github.com/ChrisTitusTech/win10script
2. Lynis (Linux Hardening Audit Tool)
   • CLI tool that scans Linux systems and gives a security score with suggestions.
   • Link: https://cisofy.com/lynis/
3. Ansible Lockdown Roles
   • Prebuilt automation scripts for applying CIS hardening via Ansible.
   • Link: https://github.com/ansible-lockdown/

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Connect with us and leave us feedback:

1. Cybersecurity Mentors Podcast Swag: https://the-cybersecurity-mentors-pod.myspreadshop.com 
2. Mentorship - Sign up for a FREE session: https://www.cyberprofessionalservices.com/scheduling-free-consultation
3. Sign up for our Newsletter: https://sendfox.com/lp/m2vx85 
4. Join us on Discord: https://discord.com/invite/g4yRKjnD78
5. Follow our LinkedIn page: https://www.linkedin.com/company/cybersecurity-mentors-podcast
6. Check out our YouTube channel for more content: https://www.youtube.com/@CybersecurityMentorsPodcast
7. TCM Affiliate Link: https://certifications.tcm-sec.com/?ref=1

Send us fan mail via text