x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: SANS GIAC GSEC Audio Course

The **GSEC Audio Course** from **BareMetalCyber.com** is your complete, audio-first companion for mastering the **GIAC Security Essentials (GSEC)** certification. Designed for cybersecurity professionals and motivated learners, this course transforms the full range of exam objectives into clear, structured lessons you can absorb anywhere. Each episode focuses on practical understanding—explaining how core security concepts like networks, encryption, access control, risk management, and incident

technology courses

All Episodes

9:52

Episode 61 — Crypto Tools: VPNs, SSH, GPG, and Disk...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Encryption moves from theory to practice through the tools we use every day, and this episode explores how they work together to protect data in motion and at rest. You’ll learn how Virtual Private Networks (VPNs) create secure tunnels between systems, encrypting traffic to prevent eavesdropping or tampering. We explain the differences between IPsec, SSL, and modern WireGuard-based implementations, emphasizing how key exchange, integrity checks, and endpoint verification ensure trust. The

en

9:53

Episode 60 — TLS in Practice: Ciphers, Versions, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Transport Layer Security (TLS) is the protocol that makes online trust visible to users, and this episode breaks down how it actually works. You’ll learn how TLS establishes encrypted communication between clients and servers through a handshake process that negotiates versions, ciphers, and keys. The discussion explains how modern configurations have replaced outdated predecessors like SSL, and why deprecated ciphers and protocols can silently undermine security. You’ll also hear how

en

9:29

Episode 59 — PKI and Certificates: CA, CRL, and OCSP

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Public Key Infrastructure (PKI) brings order to digital trust, and this episode unpacks how it works from the inside out. You’ll learn how certificate authorities (CAs) issue, validate, and revoke certificates that prove identity in online communication. The episode explains key PKI components—root, intermediate, and issuing authorities—and how certificate chains create a verifiable path of trust. We also cover the lifecycle of a certificate, from creation to expiration, and how subject

en

9:55

Episode 58 — Cryptography II: Symmetric, Asymmetric,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Building on the previous episode, this discussion dives into the main families of cryptographic systems. You’ll learn how symmetric encryption uses a single shared key for speed and simplicity, while asymmetric encryption employs key pairs for scalability and trust. We cover common algorithms—AES, RSA, ECC, and SHA—and how each balances performance, strength, and application fit. The conversation also clarifies how hashing differs from encryption by providing integrity rather than secrecy,

en

10:00

Episode 57 — Cryptography I: Core Concepts and Threats

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Encryption is the language of confidentiality, and this episode introduces the principles that make it work. You’ll learn the core goals of cryptography—confidentiality, integrity, authentication, and nonrepudiation—and how they appear in real-world controls. The discussion explains key terms like plaintext, ciphertext, keys, and algorithms, showing how math translates into trust. We also explore the history of encryption evolution, from substitution ciphers to modern block and stream

en

9:51

Episode 56 — Retention, Chain of Custody, and Privacy...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

This episode explores what happens after logs and evidence are collected—the policies that determine how long to keep them, how to protect them, and how to handle privacy obligations responsibly. You’ll learn how retention schedules balance regulatory requirements with storage constraints, and how chain of custody procedures ensure that evidence remains admissible and unaltered. We explain how hashing, access control, and documentation all work together to maintain evidentiary integrity

en

8:25

Episode 55 — Building Dashboards and Triage Routines

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Dashboards transform raw data into visual understanding, and this episode explains how to design them for clarity and purpose. You’ll learn how to select metrics, define thresholds, and organize views by function—whether for SOC analysts, managers, or auditors. We discuss why dashboards should focus on signal, not noise, and how color coding, trend lines, and time windows support rapid situational awareness. The episode also connects these visualization principles to exam objectives around

en

8:04

Episode 54 — SIEM Use Cases: Alerts, Detections, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

A Security Information and Event Management (SIEM) platform is only as valuable as the detections it produces. This episode examines how SIEM systems aggregate, correlate, and alert on log data to reveal meaningful security events. You’ll learn how analysts define use cases—structured patterns that turn raw telemetry into insights—and how correlation rules connect disparate indicators into a single narrative. The conversation highlights why tuning is critical: too many false positives erode

en

9:43

Episode 53 — Log Normalization and Time...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Log normalization and time synchronization may sound like technical housekeeping, but they’re the foundation of credible analytics. This episode unpacks how normalization translates diverse log formats into a common structure that security tools can understand. You’ll learn how field mapping, parsing, and schema alignment make search queries meaningful, enabling cross-platform correlation. The discussion also covers timestamp alignment—why even a few seconds of clock drift between devices

en

9:21

Episode 52 — Logging Fundamentals: What, Where, and Why

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Good logging turns invisible activity into actionable intelligence. This episode explains what to log, where to collect it, and why retention matters. You’ll learn how system, application, and network logs each tell part of the story—and how structured, timestamped entries enable analysis across environments. The discussion clarifies core principles like completeness, consistency, and normalization, and why simply “turning on logging” is never enough. Listeners also hear how time

en

9:13

Episode 51 — Zero Trust Networking: Principles to...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Zero Trust has become one of the most discussed—and misunderstood—security models in recent years. This episode breaks down the concept into its practical core: never assume trust, always verify, and limit access dynamically. You’ll learn how Zero Trust redefines perimeter thinking by focusing on identity, device health, and context rather than simple network location. We also explain how segmentation, continuous authentication, and least privilege combine to reduce lateral movement and

en

10:35

Episode 50 — Proxies, Gateways, and CASB Basics

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

This episode focuses on the middlemen of modern connectivity—devices and services that inspect, control, and secure traffic before it reaches its destination. You’ll learn how web proxies enforce acceptable use policies, filter content, and provide caching for performance and control. We explain how secure email and web gateways prevent data loss, block malicious attachments, and sanitize links to reduce exposure. The episode also introduces Cloud Access Security Brokers (CASB), which

en

9:43

Episode 49 — Network Security Devices II: IDS/IPS and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Detection depends on visibility, and this episode explores how Intrusion Detection and Prevention Systems (IDS/IPS) turn network data into actionable security signals. You’ll learn how signature-based detection compares to anomaly and behavior analysis, and how inline versus passive modes trade off speed and safety. The conversation breaks down sensor placement strategies—at perimeters, internal chokepoints, or cloud ingress—and how traffic mirroring and decryption affect coverage. We also

en

10:20

Episode 48 — Network Security Devices I: Firewalls...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Firewalls remain the cornerstone of perimeter defense, and this episode explores how they’ve evolved from simple packet filters to context-aware enforcement engines. You’ll learn how traditional rule-based firewalls operate on source, destination, and port, and how next-generation models add user identity, application awareness, and intrusion prevention. The discussion clarifies the difference between stateless and stateful inspection, how default-deny logic works, and why policy hierarchy

en

8:05

Episode 47 — macOS Security Essentials and Hardening

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Apple systems may be known for their usability, but they still demand deliberate hardening. This episode explains how macOS implements security through layered controls, from Gatekeeper app verification to the System Integrity Protection (SIP) framework that locks down key system files. You’ll learn how FileVault provides full-disk encryption, how keychains manage stored credentials, and how the T2 or Apple silicon chip enhances hardware trust. The discussion ties these features to exam

en

9:55

Episode 46 — Mobile Device Security: MDM, BYOD, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Mobile devices blur the line between personal convenience and corporate exposure, and this episode explores how to manage that balance. You’ll learn how Mobile Device Management (MDM) platforms enforce configuration baselines, encryption, and remote wipe policies across smartphones and tablets. The episode also covers Bring Your Own Device (BYOD) programs—why they introduce both flexibility and risk—and how containerization and enrollment rules help maintain separation between corporate and

en

9:22

Episode 45 — Browser and Email Client Hardening

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Browsers and email clients are constant targets because they sit at the crossroads of user behavior and external content. This episode explains how to harden both by reducing exposed features, managing permissions, and controlling data flow. You’ll learn how settings like script blocking, content isolation, and certificate validation defend against drive-by downloads and phishing. The episode also unpacks how modern browsers handle sandboxing, updates, and privacy features that indirectly

en

8:14

Episode 44 — Endpoint Security II: Application...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

The most effective security often focuses on what is allowed, not just what is blocked. This episode explains how application control enforces that principle by restricting which programs can run and how they can behave. You’ll learn about whitelisting, blacklisting, and reputation-based models, as well as how code signing and certificate validation help maintain trust. The conversation also explores sandboxing—isolating processes or applications so even if one fails, it can’t compromise

en

8:27

Episode 43 — Endpoint Security I: EPP, HIDS/HIPS,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Endpoint protection remains the front line of enterprise defense, and this episode explores the major technologies that define it. You’ll learn how Endpoint Protection Platforms (EPP) integrate antivirus, behavioral analysis, and application control into unified defense agents. We also explain the evolution toward Host-based Intrusion Detection and Prevention Systems (HIDS/HIPS), which monitor system activity in real time to flag or block malicious behavior. The episode details how these

en

3:00

Episode 42 — Linux Incident Basics: Triage and Artifacts

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

When something goes wrong on a Linux system, knowing where to start determines how much truth you recover. This episode walks you through initial triage—stabilizing the system, identifying scope, and capturing volatile evidence before it disappears. You’ll learn how to inspect running processes, open network connections, recent logins, and loaded modules, all of which can reveal intrusion clues. The episode also emphasizes the importance of minimizing contamination—using write blockers,

en

101 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs