Getting Started with Kali Linux

[run with me]

Hello everyone,

I want to get started in cybersecurity on Linux, specifically with Kali Linux. I'm looking for advice on how to get started, what basics I need to master, and how to progress effectively within a legal framework.

Thank you in advance for your feedback.

 

[Brickwizard]

welcome

the first thing to do is read the full Kali documentation and especially the introduction [link below] you need to be Linux experienced and Terminal competent before you start with Kali

https://www.kali.org/docs/introduction/

also read the first 2 threads on the Kali board

Kali Linux

Discussion of Kali Linux

www.linux.org

 

[gvisoc]

Hello everyone,

I want to get started in cybersecurity on Linux, specifically with Kali Linux. I'm looking for advice on how to get started, what basics I need to master, and how to progress effectively within a legal framework.

Thank you in advance for your feedback.

TL;DR: I suggest you use a virtual machine on top of another system (1), and get some training (2).

1. Use VM. Two reasons for this:
   1. Kali is not an end-user distribution able to support you in generalist tasks. Keeping a full computer limited to Kali may lead to either frustration or you breaking the system by trying to install tools that are not tested to run on Kali without causing dependency hell.
   2. If you end up working on the cybersecurity field and involved in any legal dispute (e.g.: organisation A is suing party B for suspected intrusion, or organisation C is getting sued because they had a breach with data leak and they didn't disclose), you may have to surrender your computer as an exhibit of the evidences you gathered. You don't want to surrender your machine, but a VM snapshot instead. The sooner you make "working with VM" your business as usual, the better, as you will have to choose specific hardware to be able to do some work, e.g.: a WiFi USB dongle that can work in promiscuous mode and that you can share natively with the VM.
2. "how to progress effectively within a legal framework" is something only industry authorities can tell you. Do not follow internet sites for legal advice, and especially if what concerns you is the accountability of a cybersecurity analyst.