Skip to main content

​
You made it

Five days ago, you walked in knowing what a password was. Now you can explain the CIA Triad, identify threat actors, diagram a network, run an incident response process, and build a USB Rubber Ducky payload that types commands faster than any human. That’s a real skill set - the same foundation that professional cybersecurity analysts, penetration testers, and incident responders build on throughout their careers. Let’s review what you covered each day and lock it in.

​
Week in review

Theme: What are we protecting, and how?
  • Security controls - You learned the four categories (technical, physical, operational, managerial) and six types (preventive, detective, deterrent, corrective, compensating, directive) of security controls
  • CIA Triad - Confidentiality, Integrity, and Availability: the three pillars that define what “secure” means
  • Authentication - How systems verify identity: something you know, something you have, something you are, and multi-factor authentication
  • Team formation - You formed teams, assigned roles, and began building your company for the Donuts & Dragons wargame

​
Key concepts to remember

These are the frameworks and models that cybersecurity professionals use daily. If you remember nothing else from this week, remember these.

CIA Triad

The foundation of all security decisions:
  • Confidentiality - Only authorized people can access the data
  • Integrity - Data is accurate and hasn’t been tampered with
  • Availability - Systems and data are accessible when needed
Every security control you implement protects one or more of these three properties.

Defense in depth

No single security control is sufficient. Layer multiple controls so that if one fails, the next one catches the threat.Think of the castle model: moat → walls → guards → locked doors → vault. An attacker must defeat every layer to succeed. A defender only needs one layer to hold.

PICERL incident response

The six phases of handling a security incident:
  1. Preparation - Plans, tools, and training before an incident
  2. Identification - Detecting that an incident is happening
  3. Containment - Stopping the spread
  4. Eradication - Removing the threat
  5. Recovery - Restoring normal operations
  6. Lessons Learned - Documenting what happened and improving

Cyber Kill Chain

Lockheed Martin’s seven-stage attack model:
  1. Reconnaissance - Research the target
  2. Weaponization - Build the attack tool
  3. Delivery - Send the weapon to the target
  4. Exploitation - Trigger the vulnerability
  5. Installation - Establish persistence
  6. Command & Control - Remote control the compromised system
  7. Actions on Objectives - Achieve the goal

​
Career paths in cybersecurity

Cybersecurity is one of the fastest-growing career fields in technology. There are currently over 500,000 unfilled cybersecurity positions in the United States alone. Here are some of the paths you can pursue.
What you do: Monitor security systems, investigate alerts, analyze logs, and serve as the first responder when something suspicious happens.Day-to-day: You sit in a Security Operations Center (SOC), watch dashboards, triage alerts, and escalate real threats. This is where most cybersecurity careers start.Skills from this camp: SIEM tools (Day 3), threat identification (Day 2), incident response (Day 4)Typical salary range: 60,000−60,000-100,000
What you do: Companies hire you to hack them - legally. You find vulnerabilities in their systems before real attackers do, then write reports explaining what you found and how to fix it.Day-to-day: You probe networks, test web applications, attempt social engineering, and use tools like the USB Rubber Ducky, Metasploit, and Burp Suite to simulate real attacks.Skills from this camp: Keystroke injection (Day 5), attack techniques (Day 2), social engineering (Day 2)Typical salary range: 80,000−80,000-130,000
What you do: When a breach happens, you lead the response. You contain the damage, investigate what happened, remove the threat, and restore operations.Day-to-day: You follow the PICERL framework, coordinate with legal and management, preserve forensic evidence, and write post-incident reports.Skills from this camp: PICERL (Day 4), forensics (Day 4), containment strategies (Day 4)Typical salary range: 75,000−75,000-120,000
What you do: Build, configure, and maintain the security infrastructure - firewalls, intrusion detection systems, encryption, access controls, and monitoring platforms.Day-to-day: You design network architectures, write firewall rules, deploy security tools, automate security workflows, and respond to vulnerability scan findings.Skills from this camp: Network architecture (Day 3), security controls (Day 1), defense in depth (Day 1)Typical salary range: 90,000−90,000-140,000
What you do: Design the overall security strategy and systems architecture for an organization. You decide which controls go where and how they work together.Day-to-day: You create security blueprints, evaluate new technologies, define security requirements for projects, and ensure compliance with frameworks and regulations.Skills from this camp: Defense in depth (Day 1), compliance frameworks (Day 4), network design (Day 3)Typical salary range: 120,000−120,000-180,000
What you do: Investigate cyber crimes by analyzing digital evidence - hard drives, memory dumps, network logs, and mobile devices. Your work often supports law enforcement and legal proceedings.Day-to-day: You create forensic images of devices, recover deleted files, trace attacker movements through logs, and write expert reports that hold up in court.Skills from this camp: Forensic concepts (Day 4), chain of custody (Day 4), evidence preservation (Day 4)Typical salary range: 65,000−65,000-110,000
What you do: Lead the entire cybersecurity program for an organization. You set strategy, manage the security team, report to the board of directors, and make risk decisions that affect the whole company.Day-to-day: You manage budgets, communicate risk to executives, oversee compliance, and balance security needs against business priorities. This is typically a 15-20 year career destination.Skills from this camp: Risk management (Day 1), compliance (Day 4), understanding all domains of securityTypical salary range: 180,000−180,000-350,000+

​
Certifications to pursue

Certifications prove your knowledge to employers. Here’s a recommended path, starting from where you are now.
Start with Security+. It’s the most widely recognized entry-level cybersecurity certification, and you already have a head start - the content from this camp covers a significant portion of the Security+ exam domains.

​
Resources for continued learning

Your learning doesn’t stop when camp ends. Here are the resources to keep building your skills.

Hak5

The creators of the USB Rubber Ducky. Explore their community forums, Discord server, and educational videos. The payload library has hundreds of community-contributed DuckyScript examples.

TryHackMe

Guided, beginner-friendly cybersecurity labs. You learn by doing - each room walks you through a concept with hands-on exercises in a browser-based virtual environment. Free tier available.

Hack The Box

Hands-on penetration testing challenges. More advanced than TryHackMe - you hack into virtual machines with real vulnerabilities. Great for building practical offensive security skills.

CyberStart

Free cybersecurity training platform designed for students. Gamified challenges that teach real skills through progressively harder levels.

NIST Cybersecurity Framework

The official U.S. government cybersecurity framework. The same standard used by federal agencies and Fortune 500 companies. Understanding NIST is a career differentiator.

OWASP

The Open Web Application Security Project. Their Top 10 list of web application vulnerabilities is the industry standard for understanding web security risks.

​
Ethics reminder

Everything you learned this week is real. These are the same techniques, tools, and frameworks used by professional cybersecurity teams every day. That knowledge comes with responsibility.
The rules are clear:
  • Only test on systems you own or have explicit written permission to test
  • Unauthorized access is a federal crime under the Computer Fraud and Abuse Act (CFAA) - regardless of your intent
  • “I was just learning” is not a legal defense
  • “The payload was harmless” is not a legal defense
  • The tool doesn’t know the difference between a penetration test and a criminal act - your authorization and intent are what matter
The cybersecurity industry needs people who can think like attackers but act like defenders. That’s what makes a white hat hacker: the technical skill to break things, combined with the ethical judgment to only do so when authorized.
White hat hackers:
  • Get written permission before every test
  • Follow strict rules of engagement
  • Report every vulnerability they find
  • Help organizations fix their weaknesses
  • Make the internet safer for everyone

​
Thank you

This week you:
  • Classified security controls and mapped them to real-world scenarios
  • Identified six types of threat actors and their motivations
  • Traced attacks through the Cyber Kill Chain
  • Built layered defenses for a fictional company - then attacked someone else’s
  • Ran a full incident response cycle using the PICERL framework
  • Wrote and deployed a real keystroke injection payload
You didn’t read about cybersecurity in a textbook. You did it. Take what you learned here and keep going. The cybersecurity community welcomes curious people who want to learn. Start with the resources above, work toward Security+, and build your skills one challenge at a time.
Camp complete. You now have a stronger foundation in cybersecurity than most adults. Keep building on it.