x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: SANS GIAC GSEC Audio Course

The **GSEC Audio Course** from **BareMetalCyber.com** is your complete, audio-first companion for mastering the **GIAC Security Essentials (GSEC)** certification. Designed for cybersecurity professionals and motivated learners, this course transforms the full range of exam objectives into clear, structured lessons you can absorb anywhere. Each episode focuses on practical understanding—explaining how core security concepts like networks, encryption, access control, risk management, and incident

technology courses

All Episodes

9:11

Episode 41 — Bash for Security Automation

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Automation turns routine security work into scalable process, and Bash scripting remains one of the simplest and most flexible tools for doing just that. This episode explains how Bash commands, pipes, and loops can combine to perform daily administrative and monitoring tasks. You’ll learn how variables, conditionals, and functions translate security checks into reusable logic—making it possible to collect logs, verify permissions, or detect anomalies automatically. The discussion also

en

10:36

Episode 40 — Linux Hardening: SSH, PAM, and Auditd

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Hardening Linux turns flexibility into security discipline, and this episode focuses on three pillars that make it possible: SSH, PAM, and Auditd. You’ll learn how Secure Shell (SSH) operates, why key-based authentication outperforms passwords, and how to limit access through configuration directives like PermitRootLogin and AllowUsers. The discussion then moves to the Pluggable Authentication Modules (PAM) framework, which provides a modular way to enforce password policies, lockout

en

9:46

Episode 39 — Linux Logging: Syslog, Journald, and Log...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Visibility defines resilience, and this episode explains how Linux records the events that matter. You’ll learn the roles of Syslog and Journald, how they differ, and how both feed centralized logging pipelines. We break down message priorities, facilities, and formats to help you interpret logs efficiently and distinguish noise from actionable data. You’ll also hear how to configure log destinations—whether local files, remote collectors, or SIEMs—and why timestamp integrity and retention

en

10:00

Episode 38 — Linux Services and Daemons: systemd Control

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Behind every Linux workload runs a network of background services, or daemons, and this episode explores how systemd unifies their management. You’ll learn how systemd replaced older init systems by providing consistent startup ordering, dependency handling, and logging integration. We break down the anatomy of a service unit file, including directives for execution, environment, and restart behavior. Understanding these mechanics is essential for both the GSEC exam and real-world

en

10:31

Episode 37 — Linux Networking: Interfaces, iptables,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

This episode dives into how Linux handles network connectivity and control. You’ll learn how interfaces are configured, how IP addresses and routes are assigned, and how tools like ip, ifconfig, and netstat reveal the system’s communication footprint. We explain how Linux treats network stacks as modular components—making it easier to instrument, filter, and troubleshoot. The discussion introduces iptables and its successor nftables, showing how these frameworks enforce firewall policies

en

9:45

Episode 36 — Linux Permissions: UGO, SUID/SGID, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Permissions are at the heart of Linux security, and this episode breaks down how the User, Group, and Other (UGO) model governs every file interaction. You’ll learn how read, write, and execute bits combine to create granular control, and why understanding numeric (octal) notation makes permissions easier to visualize. We also cover the significance of ownership—how chown and chmod commands enforce structure—and why misaligned permissions are often the root cause of privilege escalation

en

10:13

Episode 35 — Linux Fundamentals: Files, Users, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Linux plays a major role in modern security operations, and this episode introduces its foundational structure. You’ll learn how everything in Linux—files, devices, processes—is represented as part of a unified directory tree. The discussion covers how file paths, mounting, and permissions create predictable, auditable environments, and how user and group management enforce access separation. Understanding these basics not only prepares you for the exam but helps you interpret how

en

10:00

Episode 34 — Windows Investigation: Common Artifacts

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

When incidents occur, the clues often hide in plain sight across the Windows operating system. This episode guides you through where to look and what to look for when conducting basic investigations. You’ll learn how timestamps, registry hives, and prefetch files reveal patterns of execution, installation, and persistence. We also discuss browser histories, jump lists, and temporary files as evidence sources that confirm user actions and system behavior. These artifacts aren’t random—they

en

9:47

Episode 33 — PowerShell for Security Tasks

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

PowerShell has become one of the most powerful tools in a Windows defender’s arsenal. This episode explores how administrators and analysts use it to automate security operations, perform configuration checks, and investigate suspicious activity. You’ll learn basic command syntax, how modules expand functionality, and how scripting saves time on repetitive administrative tasks. The conversation also explains why PowerShell’s flexibility makes it both a legitimate tool and a favorite

en

9:38

Episode 32 — Windows Auditing: Event Logs and Policies

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Auditing turns system behavior into evidence, and this episode focuses on how Windows logging makes that visibility possible. You’ll learn how audit policies determine what gets recorded, how event IDs correspond to different actions, and why the Security, System, and Application logs all tell different parts of the story. The episode explains how to configure audit categories, enable advanced logging, and ensure log retention supports both troubleshooting and forensic analysis. We also

en

10:08

Episode 31 — Windows Patching and Update Channels

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Keeping Windows systems current is one of the most visible signs of a healthy security posture. This episode explains how Microsoft’s update ecosystem works—covering Patch Tuesday cycles, update classifications, and the difference between security, feature, and cumulative releases. You’ll learn how servicing channels like Semi-Annual and Long-Term Servicing determine update frequency, and why organizations must balance stability with exposure. The discussion also explores how Windows Update

en

9:48

Episode 30 — Windows Services: RDP, SMB, IIS Hardening

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Windows services provide the functionality users rely on, but they also represent key points of exposure. This episode examines three common services—Remote Desktop Protocol (RDP), Server Message Block (SMB), and Internet Information Services (IIS)—and the configurations that keep them secure. You’ll learn how each service operates, what roles it plays in daily operations, and why attackers consistently target them for lateral movement or data theft. We outline how network segmentation,

en

8:38

Episode 29 — Group Policy: Security Settings and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Group Policy is one of the most powerful management tools in the Windows ecosystem, and this episode shows how it translates governance into automation. You’ll learn how policies are stored in Active Directory, linked to organizational units, and processed in a predictable order that determines precedence. We break down the major categories—administrative templates, security settings, and preferences—and explain how they control passwords, firewalls, scripts, and software deployment. By

en

11:04

Episode 28 — Windows Domain Basics: AD Structure and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

This episode dives into Active Directory (AD), the identity backbone of most enterprise Windows networks. You’ll learn how AD organizes resources into domains, trees, and forests, and how domain controllers maintain authentication and policy enforcement. We explore the role of the Global Catalog, how replication ensures consistency, and how DNS underpins directory lookups. The episode also clarifies the different types of trust relationships—parent-child, tree, forest, and external—and how

en

10:35

Episode 27 — Windows Accounts: Users, Groups, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Windows user management forms the identity layer of the operating system, and this episode explains how its structure enforces accountability and access control. You’ll learn how local and domain accounts interact, the purpose of built-in groups, and how privileges differ from permissions. The discussion breaks down common administrative roles, why least privilege applies even to local accounts, and how group nesting can either simplify or complicate security. You’ll also hear how

en

10:51

Episode 26 — Windows Fundamentals: Filesystems and ACLs

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Understanding the Windows filesystem is a cornerstone of both system administration and security analysis. This episode explains how file structures, permissions, and ownership determine who can read, write, or execute critical data. You’ll learn how the NTFS and ReFS filesystems differ, why NTFS remains dominant in enterprise environments, and how features like compression, encryption, and journaling affect both performance and protection. The conversation also introduces Access Control

en

12:56

Episode 25 — Session Management and Timeout Strategy

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Once users are authenticated, managing that access safely becomes the next challenge. This episode explains how session management protects the continuity of trust while preventing misuse. You’ll learn how tokens, cookies, and session identifiers maintain context between requests, and why their secure handling is critical to web and application security. We explore how attackers exploit weak session controls through fixation, hijacking, or replay, and how properly configured timeouts,

en

9:21

Episode 24 — Password Policy, MFA, and Credential...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Credentials remain the front door to most systems, and this episode explores how to secure them with modern best practices. We unpack how password guidance has evolved from complexity requirements toward length, uniqueness, and resistance to reuse. You’ll learn how to apply standards from NIST and major vendors to craft policies that balance user convenience with defense against brute force and phishing. The episode also introduces multi-factor authentication (MFA) as a practical safeguard,

en

10:05

Episode 23 — Identity & Access Management II: Roles...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Building on the previous discussion, this episode moves from theory to design—showing how well-structured roles enforce control and accountability. You’ll learn how to map business functions to permissions, separate duties to prevent conflicts, and maintain flexibility without undermining security. The principle of least privilege takes center stage: granting only the minimum rights necessary to perform a task. We explain why this isn’t just a slogan but a measurable goal that drives

en

10:52

Episode 22 — Identity & Access Management I: AuthN vs...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Identity is the foundation of control, and this episode clarifies two of its most important pillars: authentication and authorization. You’ll hear how authentication verifies who a user or system claims to be, while authorization determines what that identity is allowed to do. The discussion explores how these processes interact—from login prompts and tokens to policy enforcement points that map roles to permissions. Understanding this distinction is essential both for exam questions and

en

101 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs