Ben Cybersecurity portfolio - Ben — Cybersecurity Learner & Analyst

Blog

Cybersecurity is essential for protecting your personal and professional data. As a beginner, focusing on fundamental practices can significantly reduce your risk of cyber threats. Start by using strong, unique passwords for all your accounts and enable two-factor authentication wherever possible. Regularly update your software and operating systems to patch vulnerabilities. Avoid clicking on suspicious links or downloading attachments from unknown sources.<h3>Implementing Multi-Layered Security</h3>Beyond basic measures, consider implementing multi-layered security strategies such as firewalls and antivirus programs. Regularly back up your data on secure platforms to prevent loss from ransomware attacks. Stay informed about phishing tactics and educate yourself continuously to adapt to evolving cyber threats.

Top 5 Cybersecurity Practices Every Beginner Should Know

The cybersecurity landscape is rapidly evolving with new technologies and threats emerging in 2024. One major trend is the increased reliance on artificial intelligence (AI) to detect and respond to cyber threats faster than ever before. AI-driven security systems can analyze vast amounts of data to identify anomalies and potential breaches in real time. Additionally, with the expansion of remote work, securing cloud environments has become a top priority for organizations.<h3>Zero Trust Architecture Gains Momentum</h3>Another significant development is the growing adoption of Zero Trust Architecture, which assumes no user or device is trustworthy by default. This approach enforces strict identity verification and access controls to minimize risks. Companies are also investing in cybersecurity training for employees to reduce human error, which remains a leading cause of security breaches.

Emerging Trends in Cybersecurity for 2024

Working as a cybersecurity analyst involves monitoring networks, investigating suspicious activities, and responding to incidents to protect organizational data. The day often begins with reviewing security alerts and logs to identify any unusual behavior. Analysts collaborate with IT teams to implement security measures and ensure compliance with industry standards. Problem-solving and critical thinking are key skills used daily to anticipate and mitigate cyber threats.<h3>The Continuous Learning Journey</h3>Cybersecurity is a dynamic field that requires constant learning. Analysts stay updated with the latest threat intelligence and participate in training sessions to enhance their skills. They also conduct penetration testing and vulnerability assessments to proactively strengthen defenses. This behind-the-scenes work is crucial to maintaining a safe digital environment for users and businesses alike.

Data reporting dashboard on a laptop screen. 

A Day in the Life of a Cybersecurity Analyst

Explore my journey in cybersecurity with a focus on Linux, SQL, log analysis, and hands-on labs. Discover my skills, projects, and coursework in a clean and modern portfolio designed to showcase my tech-forward approach. TO VIEW MY EXEMPLARS AND MORE IN DEPTH SKILLS VISIT THE BLOG SECTION

Ben A Hewlett — Cybersecurity Learner & Analyst

An introductory course covering the fundamentals of cybersecurity, including threat analysis and risk management.

Google Cybersecurity Professional Certificate

Introduces networking concepts with an emphasis on securing network communications.

Networking Basics for Security

Teaches how to analyze system logs to identify security incidents and potential breaches.

Log Analysis and Threat Detection

Focused on securing Linux systems through permissions, firewalls, and best practices.

Linux Security Essentials

Covers SQL query techniques and data protection strategies in database environments.

SQL for Data Security

Covers core security principles and ethical hacking techniques to assess system vulnerabilities.

hacker hand stealing data from laptop top down 

Security Fundamentals and Ethical Hacking

Some of my skills include

Certificates and Achivements

Padlock on computer keyboard. Cyber security and data protection concept.

Contact

In the Join tables in SQL portion of the Linux and SQL module, I learned how SQL joins allow analysts to combine information from multiple tables to uncover relationships that aren’t visible when looking at a single dataset. This is especially important in cybersecurity, where data is often spread across different logs, systems, and monitoring tools.🔑 Why Joins MatterMany databases store related information in separate tables. For example, an employees table might list employee IDs and names, while a machines table might list machine IDs and the employee responsible for each device. A join lets you merge these tables based on a shared column—such as employee_id—to produce a unified view of the data.This is essential for tasks like:<ul><li>Identifying which employee is associated with a compromised machine</li><li>Linking login activity to specific users</li><li>Connecting alerts to the systems they originated from</li></ul>🔍 INNER JOIN: The Core ConceptThe lesson focused heavily on INNER JOIN, which returns only the rows where both tables have matching values in the join column.I learned that:<ul><li>You specify the first table in the FROM clause</li><li>You use INNER JOIN to bring in the second table</li><li>You define the relationship using ON table1.column = table2.column</li></ul>This produces a result set containing only the rows where the shared column matches in both tables. For example, if both tables contain employee IDs 1188 and 1189, those are the only rows that appear in the final output.🧠 Understanding the Logic Behind JoinsThe course broke down the join process visually by showing a small subset of rows from each table. This helped reinforce that:<ul><li>Joins don’t add or remove data arbitrarily—they follow strict matching rules</li><li>If a value exists in one table but not the other, it won’t appear in an INNER JOIN result</li><li>The final output includes all columns from both tables for the matched rows</li></ul>This is extremely useful for cybersecurity investigations, where precision matters.🛠️ Writing a Join QueryI practiced writing join queries using syntax like:SELECT * FROM employees INNER JOIN machines ON employees.employee_id = machines.employee_id;This structure is the foundation for more advanced joins and multi-table analysis.📈 How This Applies to Cybersecurity WorkJoins are used constantly in security operations, including:<ul><li>Mapping suspicious machine activity back to the responsible user</li><li>Combining authentication logs with device inventories</li><li>Linking alerts to user accounts, departments, or physical locations</li><li>Building complete incident timelines from fragmented data sources</li></ul>Learning how to join tables effectively means I can extract more meaningful insights from SQL databases and perform deeper investigations.<h4>Summary</h4>By completing the Join tables in SQL section, I gained a solid understanding of how SQL joins—especially INNER JOIN—allow me to combine related data across tables. This skill is essential for cybersecurity analysis, enabling me to correlate events, identify responsible users, and build accurate incident narratives from structured data.

Join tables in SQL

I learned how network hardening works by adding multiple layers of security, a strategy known as defense in depth. Each tool or device strengthens the network and reduces the chances of successful attacks.I learned the purpose and function of four major network security components:<ul><li>Firewalls: They filter traffic based on rules, inspecting packet headers (and payloads in NGFWs) to allow or block connections. Every system should have its own firewall.</li><li>Intrusion Detection Systems (IDS): IDS tools monitor network activity and alert administrators when they detect signatures of known attacks or suspicious anomalies. They don’t block traffic; they only notify analysts.</li><li>Intrusion Prevention Systems (IPS): IPS devices actively block malicious traffic. They detect signatures and anomalies, then drop packets or block senders. Because they sit inline, a failure can disrupt connectivity.</li><li>Security Information and Event Management (SIEM): SIEM tools collect logs from across the network—firewalls, IDS, IPS, VPNs, proxies, DNS—and centralize them into one dashboard. They provide real‑time monitoring and help analysts identify suspicious activity.</li></ul>I also learned how full packet capture devices support investigations by recording all network traffic, which helps validate IDS alerts.Overall, I gained an understanding of how these tools fit into network architecture, how they complement each other, and how security analysts use them together to detect, monitor, and respond to threats. I also learned that organizations must balance cost, risk, and staffing when deciding which tools to deploy.

• Understanding Network Hardening & Monitoring 

In this exemplar, I review a sample system configuration and demonstrate how to apply OS hardening techniques to strengthen security. The scenario provided comes from a Google sample activity where numerous security controls were misconfigured, missing, or implemented incorrectly, making it an ideal case study for identifying weaknesses and applying proper remediation.You can read or download the image/visa screenshot above to see the exact configuration I analyzed, along with my recommendations for each issue found.I focus on:<ul><li>Detecting weak or missing authentication and authorization controls</li><li>Identifying improper file permissions and correcting them</li><li>Disabling unnecessary or risky services and background processes</li><li>Applying least‑privilege principles to user accounts and groups</li><li>Strengthening logging, auditing, and monitoring</li><li>Enforcing secure configuration baselines across the operating system</li></ul>This exemplar demonstrates my ability to evaluate a real-world system, pinpoint vulnerabilities, and apply structured hardening techniques to reduce the attack surface. By walking through each misconfiguration and explaining the fix, I show how OS hardening directly improves system integrity and resilience.It reflects my understanding of practical cybersecurity fundamentals: analyzing weaknesses, applying remediation steps, and validating that the hardened configuration meets security expectations.

Exemplar: Apply OS hardening technique

In this exemplar, I demonstrate my ability to work with SQL to extract meaningful insights from structured data. The focus is on writing clear, efficient queries that filter, sort, and combine information using real‑world logic.I showcase how to:<ul><li>Use SELECT statements to retrieve targeted data</li><li>Apply WHERE filters with AND, OR, and NOT to refine results</li><li>Work with comparison operators to isolate specific conditions</li><li>Sort and organize output using ORDER BY</li><li>Combine multiple criteria to answer practical business questions</li></ul>This example highlights my understanding of how SQL is used in everyday analysis — turning raw tables into usable information. Whether it’s filtering customer records, identifying trends, or narrowing down datasets for further processing, I’m comfortable writing queries that are both readable and effective.SQL is one of the core tools I use when working with data, and this exemplar reflects my ability to think logically, structure queries properly, and produce accurate results.