Kid or grown-up — same tower, same badge. 🏅 Today you'll learn the CORE so deeply it becomes instinct: switches that make letters 💡, doors with numbers 🚪, parcels inside parcels 📦, diaries that catch thieves 📖 — then you'll INVENT YOUR OWN alarm rule like real security engineers do! 🧪
Imagine a tall tower over a city of piggy-bank buildings 🐷🏢. All day and all night, little alarms fly up to your window: "a door opened at 3am!" · "someone tried 50 wrong passwords!" · "a big file just left the country!" Your job isn't to fix every alarm — it's to TRIAGE.
When many patients rush in, the nurse decides in seconds: bleeding badly → rush in! small cut → wait. You do that with alarms: real or false? how bad? who acts, how fast?
Tier 1 (you start here): watch alarms, first triage, pass on the real ones. Tier 2: dig deep & contain. Tier 3: hunt hidden attackers & build better alarms.
Calm + checklist + noticing small strange things + clear notes. Those are habits, not gifts — and habits can be practised. Which means this job is learnable by YOU.
Everything a computer knows is built on one idea: a switch that's off (0) or on (1) — we call it a bit. Why only two? Because a wire either has power or it doesn't — no confusion, no arguing! Group 8 bits = 1 byte, and you can make 256 patterns — enough for every letter. Tap bulbs to make 65 and watch the letter A appear!
👇 Tap the bulbs! Each is double the one before it. Add the ON ones together:
One server does many jobs at once — serving pages, taking email, allowing remote control. How does it keep them apart? Numbered doors, called PORTS. A guard who knows the doors by heart can spot a stranger instantly. Tap each door:
👉 "Someone at 102.89.44.10, using their door 51200, is knocking on OUR server 10.0.0.5, at door 22 (SSH — the remote control!)." Is that normal? That's the question you'll ask a thousand times. 🕵🏾
Messages don't teleport — they get wrapped in layers like a gift inside a box inside a bag. Engineers call this the OSI model. You don't need to memorise 7 names — you need the story. Tap to unwrap:
Every server keeps a diary. Each entry is a log. Guards read diaries all day hunting the ONE strange sentence. Tap the line that should worry you most:
Every single alarm, same 2 questions: (1) How bad? (2) What do I do? Do these enough times and your hand moves before your brain finishes reading — that's what "doing it in your sleep" really means. 😴
Guards don't only watch alarms — the best ones build them. A detection rule is just a sentence: "IF this happens THIS many times in THIS long, RING THE BELL!" Set your dials, then test your invention against 5 real situations. Catch the attacks... without waking everyone for nothing!
Too loose 🔔🔔🔔 → you catch every attack, but the bell rings for every innocent typo. Soon everyone ignores the bell — that's called alert fatigue, and it's how real companies get hacked.
Too tight 🤫 → nobody is disturbed... and the thief strolls right past you.
The art = the middle. Catch thieves, spare the innocent. That's a real job title: Detection Engineer — and you just did it!
Everything so far was practice. Now the real thing: two commands that tell you which doors are open on your own computer. A real analyst runs these on day one of any job.
Nothing is listening on 3389 → Remote Desktop is OFF. The door isn't just locked, it doesn't exist. In security, silence is an answer — a beginner thinks "it failed," an analyst reads "no listener found."
✅ Lines appeared here → the tool works → so the earlier silence was real. That habit — test your instrument before trusting its silence — separates an analyst from a guesser. 🕵🏾
🔍 Now read the line like an analyst — every piece means something:Normal on a Windows laptop. But every analyst remembers 445, because in 2017 the WannaCry ransomware spread worldwide through it — UK hospitals had to cancel operations.
👉 445 on your home network = normal. 445 reachable from the internet = emergency.
🧠 Your homework tonight: run netstat -ano | findstr LISTENING and read every line asking ONE question: 0.0.0.0 (open to the network) or 127.0.0.1 (talking only to itself)? That single distinction is genuine Tier-1 skill.
You've been hired to check "Mango Foods Ltd." Press scan, read the doors, then choose how to fix the dangerous one:
Scan only machines you own, or have written permission to test. Scanning someone else's computer is a criminal offence in many countries — including Nigeria under the Cybercrimes Act — even if you "just looked." That line is what separates an analyst from a suspect. 🛡️
That little | symbol in your command has an inventor, a birthday, and a story — and so does every other piece of it. Meet the people who built the way we talk to computers:
Early computers were huge, so people typed on a teletype — an electric typewriter on a wire. You typed a line; the computer printed back on paper. That's why Linux still calls terminals "tty" — short for teletype! 📜
At Bell Labs, Thompson built Unix (with Dennis Ritchie, who invented the C language to write it). Their brilliant choice: the part that reads your commands isn't locked inside — it's a separate, replaceable program called a shell, because it wraps the machine like a shell around a nut. 🌰
Because shells were replaceable, better ones came: Stephen Bourne's shell (1979), then Brian Fox's free version for GNU (1989) — named Bash, the "Bourne Again SHell" (a joke on "born again" 😄). Bash runs millions of servers today — including our mini cloud!
COMMAND.COM (MS-DOS days) → cmd.exe (the black box you just used!) → PowerShell (2006, created by Jeffrey Snover), which passes whole objects around instead of plain text.
Proposed by Doug McIlroy, added by Thompson in one night. The idea: don't build one giant program — build many small ones that each do ONE thing well, then connect them like garden hoses so output flows into the next. 🤯
C:\Users\You> or glory@server:~$ — the prompt is the computer saying "I'm ready, and here's where you're standing." The ~ means "your home folder" and $ means "ordinary user" (# means you're the boss — be careful!). 🚦
Press the button and watch your own command get taken apart, exactly the way the machine does it:
You've flipped bulbs; now let's do the maths, so you can turn ANY letter into binary on paper, with no computer at all. Two methods — both give the same answer:
Write the 8 values: 128 64 32 16 8 4 2 1. Walk left→right asking: "can I subtract this?" Yes → write 1 and subtract. No → write 0.
Keep halving and writing the remainder, then read the remainders backwards. 65÷2=32 r1 · 32÷2=16 r0 · 16÷2=8 r0 · 8÷2=4 r0 · 4÷2=2 r0 · 2÷2=1 r0 · 1÷2=0 r1 → backwards = 1000001 → pad to 8 = 01000001 ✅
8 switches = 256 patterns — enough for every English letter, digit and symbol with room to spare. And A=65? People agreed it, in committee meetings in the 1960s, creating ASCII — so every computer on Earth would read the same list. Today's Unicode extends it to every language and emoji! 🌍
This lesson + the Gateman lesson. Redo every drill until perfect scores. You started today!
IP, TCP/UDP, DNS, subnets — how knocks travel. You now have the base to follow any free course.
CompTIA Security+ is the respected entry cert. Paid exam, self-study friendly, no degree needed. Check current price first!
Legally defend pretend companies. Real experience without a job — write up every exercise; that log becomes your portfolio.
Search: "SOC Analyst Tier 1", "Security Analyst", "IT Support (Security)", "Junior Threat Analyst". NG: banks, fintechs, telecoms, MSSPs.