1. First Principles of Cybersecurity Analysis

Security analysis isn't about knowing every attack. It's about building a way of thinking that lets you recognize when something is wrong, reason about what it means, and take the right action — even when you've never seen that exact attack before.

Before diving into tools, frameworks, and exam objectives, this phase builds the foundational mental models that underpin everything else in the guide. These principles will help you answer "Given a scenario" questions even when the specific technology is unfamiliar, because you'll understand the underlying dynamics that all cybersecurity problems share.