Linux Fundamentals
Working through the Linux file system, permissions, and process management from the command line — the base layer for almost every later lab.
- Linux fundamentals
- File permissions
- Shell navigation
2024Read walkthrough
~/walkthrough $ whoami
Building Practical Cybersecurity Skills Through Hands-On Learning
I'm an IT professional with a cybersecurity background, experience in cybersecurity training, GRC, and SOC Tier 1 analysis. Currently working in IT support at HostAfrica, I continue to strengthen my technical skills through hands-on security labs, structured learning, and practical documentation.
IT Support — HostAfrica (current)
Cybersecurity Training — CyberPro Global (previous)
Focus — GRC, SOC Tier 1, hands-on lab work
Featured Labs
A selection of completed Easy-difficulty rooms and machines from TryHackMe and Hack The Box, with the concepts each one reinforced.
Network Security Essentials
Mapping a small network, reading traffic, and identifying which services are exposed. Reinforced how reconnaissance shapes the rest of an assessment.
- Networking
- Enumeration
- Nmap
2024Read walkthrough
Web Application Recon
Enumerating a web application, reviewing source and endpoints, and documenting findings in a structured way rather than chasing the first lead.
- Web app security
- Reconnaissance
- Documentation
2024Read walkthrough
Windows Fundamentals
Windows users, groups, services, and event logs. Useful groundwork for the log analysis and Active Directory topics I moved on to afterwards.
- Windows fundamentals
- Log analysis
- Access control
2024Read walkthrough
Privilege Escalation Basics
Enumerating a host for misconfigurations and weak permissions, then documenting the path taken and how it could have been prevented.
- Privilege escalation
- Vulnerability assessment
- Hardening
2024Read walkthrough
Defensive Security Intro
An introduction to blue-team thinking: what to monitor, what a normal baseline looks like, and how alerts are triaged in a SOC.
- Defensive security
- Security monitoring
- Incident response
2024Read walkthrough
My Cybersecurity Journey
My route into security has been practical rather than linear. It started with structured cybersecurity training, moved through governance, risk and compliance work and SOC Tier 1 analysis, and now runs alongside a day job in IT support.
Each stage added something the others didn't. Training gave me the vocabulary and the frameworks. GRC taught me to think about risk in business terms. SOC Tier 1 showed me what alerts actually look like in practice. And IT support at HostAfrica and at Truehost AI has kept me close to the real systems, users, and problems those frameworks are meant to protect.
This site is where I document that work — the labs, the notes, and the things I got wrong before I got them right.
Cybersecurity Training — CyberPro Global
Structured training covering security fundamentals, threat awareness, and defensive practice.
GRC & SOC Tier 1 Analysis
Exposure to governance, risk and compliance processes alongside first-line alert triage and monitoring.
IT Support — HostAfrica
Hands-on troubleshooting, systems support, and user-facing problem solving in a hosting environment.
Continuous Lab Work
TryHackMe and Hack The Box rooms, documented as walkthroughs and learning notes.
Technical Focus Areas
Topics I have studied, practised in labs, or worked with directly — grouped by where they sit in a security workflow.
Linux & Windows Fundamentals
Command line navigation, file permissions, users and groups, services, and the system internals that most labs build on.
Networking
Addressing, common protocols, service discovery, and reading traffic to understand what a host is actually exposing.
Web Application Security
Enumerating web apps, reviewing endpoints and source, and understanding how common classes of flaw are introduced.
Enumeration & Reconnaissance
Systematic discovery of hosts, services, and users — and the discipline to record findings instead of chasing the first hit.
Vulnerability Assessment & Privilege Escalation
Identifying misconfigurations and weak permissions, then documenting the impact and how the exposure could be closed.
Log Analysis & Security Monitoring
Reading Windows and Linux event data, building a sense of normal, and spotting the anomalies worth escalating.
Incident Response & SOC Tier 1
Alert triage, first-line investigation, and the handover discipline that keeps an incident moving in the right direction.
Active Directory & GRC
Directory fundamentals alongside governance, risk and compliance thinking — controls, evidence, and why they matter to a business.
Latest Walkthroughs
Recent write-ups from completed labs — the approach, the commands, and what I'd do differently next time.
Linux Fundamentals — Part 3
Permissions, processes, and scheduled tasks. The part where the command line finally started to feel routine.
$ ls -la /var/log
$ find / -perm -4000 2>/dev/null
# noted: SUID binaries worth reviewing
Read the walkthrough$ find / -perm -4000 2>/dev/null
# noted: SUID binaries worth reviewing
Enumeration Before Exploitation
A reminder that the slow, boring scan is usually the one that finds the way in. Documented step by step.
$ nmap -sV -sC -p- target
22/tcp open ssh
80/tcp open http
Read the walkthrough22/tcp open ssh
80/tcp open http
Reading Windows Event Logs
Filtering event data down to what matters, and writing up an alert the way a Tier 1 analyst would hand it over.
PS> Get-WinEvent -LogName Security -MaxEvents 50
# focus: 4624, 4625, 4672
Read the walkthrough# focus: 4624, 4625, 4672
Professional Experience
A concise overview of the roles that shaped how I approach security work today.
IT Support
HostAfrica — Current
Supporting users and systems in a hosting environment: troubleshooting, account and access issues, and day to day operational problem solving. Working close to live infrastructure has made the security theory far more concrete.Truehost AI — PreviousTechnical assistance to clients experiencing issues with web hosting, domain registration and renewals, DNS configuration, email services, SSL certificates, and website availability. The role involves troubleshooting technical issues, resolving client queries, managing support tickets, escalating complex cases to relevant technical teams
Cybersecurity Training
CyberPro Global — Previous
Structured cybersecurity training covering security fundamentals, threat awareness, and defensive practice, with an emphasis on applying concepts rather than memorising them.
GRC & SOC Tier 1 Analysis
Cybersecurity Experience
Exposure to governance, risk and compliance processes alongside first-line security monitoring and alert triage — the two sides of the same problem, one proactive and one reactive.
Learning in Progress
Proxmox VE
Manage virtual machines, servers or client hosting environment made easier.
In progress — notes being written up
Log Analysis & Detection
Practising with Windows and Linux event data, building familiarity with the events that matter and how to describe them clearly.
In progress — ongoing lab practice
Web Application Security
Going deeper on enumeration and the common flaw classes. Current project on a web-based tool to analyze forex market data and estimate the probability of a trade being successful based on selected market indicators and historical data.
In progress — walkthroughs to follow
Contact & Professional Links
If you're a recruiter, hiring manager, or another security professional, I'm always glad to talk about labs, learning, or opportunities. The quickest way to reach me is email.
- contactme@gracenjoki.co.ke
- Nairobi, Kenya — open to remote and hybrid roles
- Whatsapp Number: 0708524822
Send a message
Use the form below and it will open in your mail client, addressed to me.