> ## Documentation Index
> Fetch the complete documentation index at: https://stem-docs.intellectualpoint.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Camp wrap-up
> Reflect on the week, review what you learned, and discover resources for continued learning in cybersecurity.
## You made it
Five days ago, you walked in knowing what a password was. Now you can explain the CIA Triad, identify threat actors, diagram a network, run an incident response process, and build a USB Rubber Ducky payload that types commands faster than any human.
That's a real skill set - the same foundation that professional cybersecurity analysts, penetration testers, and incident responders build on throughout their careers.
Let's review what you covered each day and lock it in.
***
## Week in review
**Theme:** What are we protecting, and how?
* **Security controls** - You learned the four categories (technical, physical, operational, managerial) and six types (preventive, detective, deterrent, corrective, compensating, directive) of security controls
* **CIA Triad** - Confidentiality, Integrity, and Availability: the three pillars that define what "secure" means
* **Authentication** - How systems verify identity: something you know, something you have, something you are, and multi-factor authentication
* **Team formation** - You formed teams, assigned roles, and began building your company for the Donuts & Dragons wargame
**Theme:** Who is attacking, and how do they do it?
* **Threat actors** - The six types of attackers (cybercriminals, hacktivists, nation-states, APTs, script kiddies, insider threats) and their motivations
* **Cyber Kill Chain** - Lockheed Martin's seven-stage model of a cyberattack: Reconnaissance → Weaponization → Delivery → Exploitation → Installation → Command & Control → Actions on Objectives
* **Social engineering** - Phishing, pretexting, baiting, tailgating, and other techniques that exploit human psychology instead of technical vulnerabilities
* **Malware types** - Viruses, worms, trojans, ransomware, spyware, rootkits, and how each one operates
**Theme:** How do networks and security tools work together?
* **Network architecture** - LANs, WANs, switches, routers, firewalls, DMZs, and how data moves through a network
* **Cloud computing** - IaaS, PaaS, SaaS, and the shared responsibility model for cloud security
* **Security tools** - SIEM, IDS/IPS, firewalls, endpoint detection, and how they work together in a security operations center (SOC)
* **Donuts & Dragons (defense phase)** - You spent your budget building layered defenses for your fictional company, applying defense-in-depth principles from Day 1
**Theme:** What happens when an attack gets through?
* **PICERL** - The six phases of incident response: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned
* **Digital forensics** - Evidence collection, chain of custody, forensic imaging, and how investigators reconstruct what happened
* **Compliance and frameworks** - NIST, ISO 27001, PCI-DSS, HIPAA, and why organizations need security standards
* **Donuts & Dragons (attack phase)** - Your team launched attacks against other teams' defenses, testing whether their security controls held up
**Theme:** How do attackers actually do it?
* **Keystroke injection** - How the USB Rubber Ducky exploits the trust computers place in keyboards to automate attacks
* **PayloadStudio** - Setting up the development environment, activating PRO licenses, and learning DuckyScript syntax
* **Your first payload** - Writing, compiling, and deploying the RickRoll payload - your first hands-on offensive security exercise
* **Ethics and responsibility** - Understanding the line between penetration testing and criminal hacking
***
## Key concepts to remember
These are the frameworks and models that cybersecurity professionals use daily. If you remember nothing else from this week, remember these.
The foundation of all security decisions:
* **Confidentiality** - Only authorized people can access the data
* **Integrity** - Data is accurate and hasn't been tampered with
* **Availability** - Systems and data are accessible when needed
Every security control you implement protects one or more of these three properties.
No single security control is sufficient. Layer multiple controls so that if one fails, the next one catches the threat.
Think of the castle model: moat → walls → guards → locked doors → vault. An attacker must defeat every layer to succeed. A defender only needs one layer to hold.
The six phases of handling a security incident:
1. **Preparation** - Plans, tools, and training before an incident
2. **Identification** - Detecting that an incident is happening
3. **Containment** - Stopping the spread
4. **Eradication** - Removing the threat
5. **Recovery** - Restoring normal operations
6. **Lessons Learned** - Documenting what happened and improving
Lockheed Martin's seven-stage attack model:
1. **Reconnaissance** - Research the target
2. **Weaponization** - Build the attack tool
3. **Delivery** - Send the weapon to the target
4. **Exploitation** - Trigger the vulnerability
5. **Installation** - Establish persistence
6. **Command & Control** - Remote control the compromised system
7. **Actions on Objectives** - Achieve the goal
***
## Career paths in cybersecurity
Cybersecurity is one of the fastest-growing career fields in technology. There are currently over 500,000 unfilled cybersecurity positions in the United States alone. Here are some of the paths you can pursue.
**What you do:** Monitor security systems, investigate alerts, analyze logs, and serve as the first responder when something suspicious happens.
**Day-to-day:** You sit in a Security Operations Center (SOC), watch dashboards, triage alerts, and escalate real threats. This is where most cybersecurity careers start.
**Skills from this camp:** SIEM tools (Day 3), threat identification (Day 2), incident response (Day 4)
**Typical salary range:** $60,000-$100,000
**What you do:** Companies hire you to hack them - legally. You find vulnerabilities in their systems before real attackers do, then write reports explaining what you found and how to fix it.
**Day-to-day:** You probe networks, test web applications, attempt social engineering, and use tools like the USB Rubber Ducky, Metasploit, and Burp Suite to simulate real attacks.
**Skills from this camp:** Keystroke injection (Day 5), attack techniques (Day 2), social engineering (Day 2)
**Typical salary range:** $80,000-$130,000
**What you do:** When a breach happens, you lead the response. You contain the damage, investigate what happened, remove the threat, and restore operations.
**Day-to-day:** You follow the PICERL framework, coordinate with legal and management, preserve forensic evidence, and write post-incident reports.
**Skills from this camp:** PICERL (Day 4), forensics (Day 4), containment strategies (Day 4)
**Typical salary range:** $75,000-$120,000
**What you do:** Build, configure, and maintain the security infrastructure - firewalls, intrusion detection systems, encryption, access controls, and monitoring platforms.
**Day-to-day:** You design network architectures, write firewall rules, deploy security tools, automate security workflows, and respond to vulnerability scan findings.
**Skills from this camp:** Network architecture (Day 3), security controls (Day 1), defense in depth (Day 1)
**Typical salary range:** $90,000-$140,000
**What you do:** Design the overall security strategy and systems architecture for an organization. You decide which controls go where and how they work together.
**Day-to-day:** You create security blueprints, evaluate new technologies, define security requirements for projects, and ensure compliance with frameworks and regulations.
**Skills from this camp:** Defense in depth (Day 1), compliance frameworks (Day 4), network design (Day 3)
**Typical salary range:** $120,000-$180,000
**What you do:** Investigate cyber crimes by analyzing digital evidence - hard drives, memory dumps, network logs, and mobile devices. Your work often supports law enforcement and legal proceedings.
**Day-to-day:** You create forensic images of devices, recover deleted files, trace attacker movements through logs, and write expert reports that hold up in court.
**Skills from this camp:** Forensic concepts (Day 4), chain of custody (Day 4), evidence preservation (Day 4)
**Typical salary range:** $65,000-$110,000
**What you do:** Lead the entire cybersecurity program for an organization. You set strategy, manage the security team, report to the board of directors, and make risk decisions that affect the whole company.
**Day-to-day:** You manage budgets, communicate risk to executives, oversee compliance, and balance security needs against business priorities. This is typically a 15-20 year career destination.
**Skills from this camp:** Risk management (Day 1), compliance (Day 4), understanding all domains of security
**Typical salary range:** $180,000-$350,000+
***
## Certifications to pursue
Certifications prove your knowledge to employers. Here's a recommended path, starting from where you are now.
| Certification | Organization | What it covers | Why it matters |
| ---------------------------------------------------- | ------------ | ------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
| **CompTIA Security+** | CompTIA | Security fundamentals, threats, architecture, operations, incident response, compliance | The industry-standard entry-level certification. Much of what you learned this week aligns directly with Security+ exam objectives (SY0-701). |
| **CompTIA CySA+** | CompTIA | Security analytics, threat detection, vulnerability management, incident response | The next step after Security+. Focuses on the blue team / defensive side. |
| **CEH (Certified Ethical Hacker)** | EC-Council | Penetration testing methodology, attack techniques, tools, and countermeasures | Focuses on the red team / offensive side. Great if you want to be a penetration tester. |
| **OSCP (Offensive Security Certified Professional)** | OffSec | Hands-on penetration testing - you must hack into multiple machines in a 24-hour practical exam | The gold standard for penetration testers. Extremely challenging and highly respected. |
**Start with Security+.** It's the most widely recognized entry-level cybersecurity certification, and you already have a head start - the content from this camp covers a significant portion of the Security+ exam domains.
***
## Resources for continued learning
Your learning doesn't stop when camp ends. Here are the resources to keep building your skills.
The creators of the USB Rubber Ducky. Explore their community forums, Discord server, and educational videos. The payload library has hundreds of community-contributed DuckyScript examples.
Guided, beginner-friendly cybersecurity labs. You learn by doing - each room walks you through a concept with hands-on exercises in a browser-based virtual environment. Free tier available.
Hands-on penetration testing challenges. More advanced than TryHackMe - you hack into virtual machines with real vulnerabilities. Great for building practical offensive security skills.
Free cybersecurity training platform designed for students. Gamified challenges that teach real skills through progressively harder levels.
The official U.S. government cybersecurity framework. The same standard used by federal agencies and Fortune 500 companies. Understanding NIST is a career differentiator.
The Open Web Application Security Project. Their Top 10 list of web application vulnerabilities is the industry standard for understanding web security risks.
***
## Ethics reminder
Everything you learned this week is real. These are the same techniques, tools, and frameworks used by professional cybersecurity teams every day. That knowledge comes with responsibility.
**The rules are clear:**
* **Only test on systems you own** or have **explicit written permission** to test
* **Unauthorized access is a federal crime** under the Computer Fraud and Abuse Act (CFAA) - regardless of your intent
* **"I was just learning"** is not a legal defense
* **"The payload was harmless"** is not a legal defense
* **The tool doesn't know the difference** between a penetration test and a criminal act - your authorization and intent are what matter
The cybersecurity industry needs people who can think like attackers but act like defenders. That's what makes a **white hat hacker**: the technical skill to break things, combined with the ethical judgment to only do so when authorized.
White hat hackers:
* Get written permission before every test
* Follow strict rules of engagement
* Report every vulnerability they find
* Help organizations fix their weaknesses
* Make the internet safer for everyone
The skills you learned this week are the foundation of a career that:
* Pays well ($60K-$350K+ depending on role and experience)
* Is in high demand (500,000+ unfilled positions in the U.S.)
* Has a direct positive impact on society
* Lets you solve puzzles and break things for a living - legally
The path from this camp to a cybersecurity career is real. People in this room may be protecting critical infrastructure, banks, hospitals, or government systems within the next decade.
***
## Thank you
This week you:
* Classified security controls and mapped them to real-world scenarios
* Identified six types of threat actors and their motivations
* Traced attacks through the Cyber Kill Chain
* Built layered defenses for a fictional company - then attacked someone else's
* Ran a full incident response cycle using the PICERL framework
* Wrote and deployed a real keystroke injection payload
You didn't read about cybersecurity in a textbook. You did it.
Take what you learned here and keep going. The cybersecurity community welcomes curious people who want to learn. Start with the resources above, work toward Security+, and build your skills one challenge at a time.
**Camp complete.** You now have a stronger foundation in cybersecurity than most adults. Keep building on it.