FIELD NOTES · FROM THE KNOWLEDGE BASE

Guides, answers and explainers — without the jargon

Notes on cybersecurity, programming and computer science from the Korra Studio knowledge base — written for people breaking in, changing careers, or just curious.

BLUE TEAM 9 Aug 2026 Principle of Least Privilege, Explained A practical breakdown of the principle of least privilege: what it means, why breaches spread without it, and how to actually implement it. Readarrow_forwardDIGITAL FORENSICS 9 Aug 2026 Getting Started With the Linux Command Line A practical glossary entry covering the Linux shell basics: navigation, file operations, permissions, and the habits that make you fast at it. Readarrow_forwardCRYPTOGRAPHY 9 Aug 2026 How Public-Key Cryptography Actually Works A practical walkthrough of asymmetric encryption, key pairs, and digital signatures, without the hand-waving math analogies. Readarrow_forwardWEB SECURITY 9 Aug 2026 Cross-Site Scripting: Why XSS Still Bites in 2024 A practical breakdown of reflected, stored, and DOM-based XSS, how attackers exploit them, and how to actually stop them. Readarrow_forwardWEB SECURITY 9 Aug 2026 What Is a Buffer Overflow? A Hands-On Walkthrough Learn how buffer overflows actually work with a real C example, a stack diagram, and the tools to see it happen yourself. Readarrow_forwardDEVOPS 9 Aug 2026 What Is Docker and Why Should Developers Learn It? A practical breakdown of Docker for developers: containers vs VMs, core commands, Dockerfiles, and how to start using it in real projects. Readarrow_forwardCRYPTOGRAPHY 8 Aug 2026 How Does TLS Actually Secure an HTTPS Connection? A practical breakdown of the TLS handshake, certificate validation, and key exchange that make HTTPS actually secure. Readarrow_forwardNETWORKING 8 Aug 2026 The OSI Model, Layer by Layer, Without the Fluff A practical walkthrough of the OSI model's seven layers, with real protocol examples and troubleshooting angles for each. Readarrow_forwardWEB SECURITY 8 Aug 2026 What Is SQL Injection and How Do You Prevent It? A practical breakdown of SQL injection attacks, real examples, and the concrete fixes that actually stop them in production code. Readarrow_forwardCOMPUTER SCIENCE 8 Aug 2026 Algorithms That Finish In Time: A Complexity Gut Check Learn to spot slow algorithms before they ship, with real Big O examples, benchmarks, and quick fixes for common bottlenecks. Readarrow_forwardDEVOPS 8 Aug 2026 Kubernetes for People Who Have to Run It A practical guide to running Kubernetes in production, from resource requests to etcd backups and the pages that actually matter at 3am. Readarrow_forwardCOMPUTER SCIENCE 8 Aug 2026 From Python to C++: Why the Gap Feels So Big A practical look at why moving from Python to C++ trips people up, and what to actually focus on when learning it. Readarrow_forwardCLOUD 8 Aug 2026 You Inherited a Cloud Mess. Where Do You Start? A practical first-90-days plan for securing an AWS, Azure, or GCP environment you didn't design and don't fully understand yet. Readarrow_forwardCLOUD 8 Aug 2026 Securing a Cloud Estate You Didn't Build A practical guide to auditing, mapping, and locking down an inherited AWS/Azure/GCP environment without breaking production. Readarrow_forwardOFFENSIVE 8 Aug 2026 On-Chain Governance: The Tech Stack Explained A practical glossary breakdown of how smart contracts, voting mechanisms, and consensus layers actually implement decentralized governance. Readarrow_forwardBLUE TEAM 8 Aug 2026 How Do I Explain My Findings in a SOC Briefing? A practical guide to briefing incident findings, writing handovers, and answering interview scenario questions clearly. Readarrow_forwardBLUE TEAM 8 Aug 2026 Continuity and Recovery: The Restore Nobody Tested Backups aren't recovery. A practical guide to actually testing your restore process before ransomware forces the issue. Readarrow_forwardNETWORKING 8 Aug 2026 What Does End-to-End Actually Mean in Networking? A practical breakdown of end-to-end connectivity, why it breaks in real networks, and how to test it with traceroute and MTU checks. Readarrow_forwardDEVOPS 7 Aug 2026 Terraform vs. Ansible: Which One Do You Actually Need? A practical breakdown of Terraform and Ansible, what each tool is actually good at, and how to combine them in a real IaC pipeline. Readarrow_forwardTUTORING 7 Aug 2026 IB CS SL: The Content HL Papers Skip Entirely A focused guide to the IB Computer Science SL-only topics students underprepare for: Case Study specifics, IA scope, and Topic 4. Readarrow_forwardCAREER CHANGE 7 Aug 2026 How Do You Actually Prepare for a Security Interview? A practical breakdown of what security interviews test, common question formats, and how to prepare beyond memorizing definitions. Readarrow_forwardCERTIFICATIONS 7 Aug 2026 SC-200: The Analyst's Exam, From the Log Up What the SC-200 actually tests, how it maps to Defender and Sentinel workflows, and how to prepare like a working SOC analyst. Readarrow_forwardAI 7 Aug 2026 How Do You Tell If Code Was AI-Generated? Practical signals for spotting AI-generated code and writeups, from structural tells to the questions that trip up generated work. Readarrow_forwardCERTIFICATIONS 7 Aug 2026 Exam Technique for Security Certifications That Works How to actually pass Security+, CySA+, or OSCP exams: pacing, elimination tactics, flagging, and how to study the question format itself. Readarrow_forwardBLUE TEAM 7 Aug 2026 Building a Security Program From Zero A practical glossary entry on standing up a security function at a company with none, covering priorities, tooling, and quick wins. Readarrow_forwardCLOUD 7 Aug 2026 How Do Conditional Access and PIM Actually Stop Attacks? A practical breakdown of Conditional Access policies and Privileged Identity Management, and how they close the gaps password policies leave open. Readarrow_forwardCERTIFICATIONS 7 Aug 2026 The Auditor's Frame: Thinking Like an IS Auditor A practical look at how IS auditors reason about risk, controls, and evidence — and how to build that mindset yourself. Readarrow_forwardSYSTEMS 7 Aug 2026 IT Support Done Right: A Practical Field Guide How to run IT support tickets like a pro: triage, diagnosis, documentation, and escalation done properly, not just closed fast. Readarrow_forwardSYSTEMS 6 Aug 2026 What a Family Should Actually Lock Down A practical priority list for home security: which accounts, devices, and habits actually matter, and which ones are just noise. Readarrow_forwardBLUE TEAM 4 Aug 2026 Does a UK Small Business Actually Need Cyber Insurance? What UK cyber insurers actually require before they'll cover your small business, and what happens if you skip it. Readarrow_forwardAI 4 Aug 2026 Do You Still Need to Learn Programming With AI Tools? AI coding assistants write plenty of code, but here's why understanding programming still matters and what actually changed. Readarrow_forwardAI 4 Aug 2026 What Is Vibe Coding, Really? Vibe coding means writing software by describing intent to an AI model and iterating on output, rather than typing every line by hand. Readarrow_forwardAI 4 Aug 2026 Prompt Engineering Basics: A Practical Glossary Entry A clear, no-fluff explanation of prompt engineering fundamentals, with examples and techniques you can use right away. Readarrow_forwardTUTORING 4 Aug 2026 Coding Clubs for Teens in the UK: A Glossary What UK coding clubs for teens actually are, how they run, and how to pick a good one—explained plainly. Readarrow_forwardCERTIFICATIONS 4 Aug 2026 How Do GCSE Computer Science Grade Boundaries Work? A clear breakdown of how GCSE Computer Science grade boundaries are set, why they shift each year, and what that means for your result. Readarrow_forwardCOMPUTER SCIENCE 4 Aug 2026 GCSE Computer Science: Cyber Security Explained A clear breakdown of the cyber security topics covered in GCSE Computer Science, from malware types to social engineering and prevention methods. Readarrow_forwardTUTORING 4 Aug 2026 How Do I Actually Prepare for Matura Informatyka? A practical breakdown of what matura informatyka covers, how it's scored, and how to study for the Python-heavy exam without wasting time. Readarrow_forwardCERTIFICATIONS 4 Aug 2026 What Are CREST Certifications and Do You Need One? A practical breakdown of CREST's UK pentest certifications, who requires them, and how they compare to CEH and OSCP. Readarrow_forwardCAREER CHANGE 4 Aug 2026 What a Cybersecurity Career Change Actually Costs A realistic breakdown of the time, certification fees, and lost income involved in switching into cybersecurity from another field. Readarrow_forwardBLUE TEAM 30 Jul 2026 Security Awareness Training That Actually Works A practical glossary breakdown of employee security awareness training: what fails, what measurably reduces risk, and how to build a program worth running. Readarrow_forwardWEB DEVELOPMENT 30 Jul 2026 Can You Build an App Without Knowing How to Code? Yes, with limits. Here's what no-code tools actually let you build, where they break down, and when you'll need real code. Readarrow_forwardAI 30 Jul 2026 Automating Repetitive Work Tasks with AI A practical glossary entry on using AI tools and scripts to automate repetitive work tasks, with real examples and starting points. Readarrow_forwardTUTORING 30 Jul 2026 Is My Child Ready for GCSE Computer Science? A practical checklist for parents weighing GCSE Computer Science: the maths and logic skills, workload, and warning signs to watch for. Readarrow_forwardAI 30 Jul 2026 What Mistakes Do Devs Make Coding With AI Assistants? A practical look at the most common ways developers misuse AI coding assistants, and how to avoid shipping bugs and vulnerabilities. Readarrow_forwardTUTORING 30 Jul 2026 AI-Assisted Coding for Beginners: A Practical Start Learn how new programmers can use AI tools like Copilot and ChatGPT without skipping the fundamentals. Readarrow_forwardBLUE TEAM 30 Jul 2026 Will AI Replace Cybersecurity Analysts? AI is changing SOC work fast, but analyst judgment still matters. Here's what's actually being automated and what isn't. Readarrow_forwardAI 30 Jul 2026 Scratch vs Python: What Order Should Kids Learn Them? A practical look at whether kids should start with Scratch or Python, with age guidelines and a realistic transition path between the two. Readarrow_forwardTUTORING 30 Jul 2026 What Age Should Kids Start Coding? A practical breakdown of when kids are ready to code, what to teach at each age, and how to avoid burnout or frustration. Readarrow_forwardCERTIFICATIONS 29 Jul 2026 BTL1 vs Security+: Which Should You Take First? A practical comparison of Security+ and BTL1, and why order matters if you're aiming for a SOC analyst role. Readarrow_forwardBLUE TEAM 29 Jul 2026 Blue Team Certifications: What Actually Matters A practical guide to blue team certifications - which ones prove real skill, which ones just pad a resume, and how to pick your path. Readarrow_forwardCERTIFICATIONS 29 Jul 2026 AP Computer Science A: What Actually Matters A practical guide to the AP CS A exam — what's tested, how points get lost, and where to focus your remaining study time. Readarrow_forwardCAREER CHANGE 29 Jul 2026 UK Cybersecurity Salaries: What Each Role Actually Pays A practical breakdown of UK cybersecurity salaries by role, level and location, with tips on how to negotiate and progress faster. Readarrow_forwardDEVOPS 29 Jul 2026 Is CCNA Actually Useful for a Cybersecurity Career? CCNA isn't a security cert, but it teaches the networking fundamentals that make most security work make sense. Here's when it's worth the time. Readarrow_forwardCAREER CHANGE 29 Jul 2026 CS Degree vs Degree Apprenticeship: UK Breakdown A practical comparison of UK computer science degrees and degree apprenticeships, covering cost, career speed, and who each path suits. Readarrow_forwardBLUE TEAM 29 Jul 2026 What Really Happens In Your First Year In Cybersecurity? A realistic walkthrough of the first 12 months in a cybersecurity role: the tickets, the tools, the learning curve, and what actually matters. Readarrow_forwardCAREER CHANGE 29 Jul 2026 From Hospitality to Cybersecurity: A Real Path In How hotel, restaurant, and service workers can translate their skills into a cybersecurity career, with concrete steps and study plans. Readarrow_forwardBLUE TEAM 29 Jul 2026 Why Career Changers Make Great SOC Analysts A look at why people switching careers often outperform expectations in SOC roles, and what skills actually transfer. Readarrow_forwardCERTIFICATIONS 29 Jul 2026 Cyber Essentials for Small Businesses, Plainly Put A practical breakdown of the UK's Cyber Essentials scheme: what it checks, why insurers ask for it, and how small teams can actually pass. Readarrow_forwardOFFENSIVE 29 Jul 2026 Big O Notation: What A-Level CS Actually Expects A practical breakdown of Big O notation for A-level computer science, with worked examples and exam-style tips. Readarrow_forwardBLUE TEAM 29 Jul 2026 Is Cybersecurity a Good Career for Introverts? Yes, and often an advantage. Here's how introverted traits map to specific security roles, and where you'll still need to talk to people. Readarrow_forwardCERTIFICATIONS 29 Jul 2026 Can I use ELCAS funding for cyber security training? How UK service leavers can use ELCAS funding for cyber security certifications, what's covered, and how to build a realistic training plan. Readarrow_forwardTUTORING 28 Jul 2026 Cyber Security Tutor Bristol: What to Look For A practical guide to finding a cyber security tutor in Bristol, what they should teach, and how to check if they're worth your money. Readarrow_forwardTUTORING 28 Jul 2026 TryHackMe vs HackTheBox: Where Should Beginners Start? A practical comparison of TryHackMe and HackTheBox for absolute beginners in cybersecurity, with a realistic path between the two. Readarrow_forwardTUTORING 28 Jul 2026 Finding a Real Cyber Security Tutor in Leeds What to actually look for in a Leeds-based cyber security tutor, from lab setup to certification prep, before you pay for lessons. Readarrow_forwardNETWORKING 28 Jul 2026 CISSP Experience Requirements, Actually Explained A practical breakdown of CISSP's five-year experience rule, waivers, and how the Associate designation actually works. Readarrow_forwardOFFENSIVE 28 Jul 2026 Cyber Security Tutor Manchester: What to Look For What a cyber security tutor in Manchester actually does, how sessions work, and how to pick one that fits your goals. Readarrow_forwardCOMPUTER SCIENCE 28 Jul 2026 Python Projects Kids Actually Want to Finish A practical guide to Python projects for kids, with real starter code and tips on picking projects that hold attention past the first ten minutes. Readarrow_forwardBLUE TEAM 20 Jul 2026 On-Site Corporate Cyber Security Training in the UK What UK on-site corporate cyber security training actually involves, who delivers it, and how to judge whether it's worth the budget. Readarrow_forwardTUTORING 16 Jul 2026 How Do I Homeschool Computer Science in the UK? A practical guide for UK homeschool parents on teaching computer science, covering curriculum, GCSE options, and free resources. Readarrow_forwardTUTORING 13 Jul 2026 Where Can I Find a Cybersecurity Tutor in Watford? Looking for a cybersecurity tutor in Watford? Learn what to look for, local vs. online options, and how to structure your learning path. Readarrow_forwardTUTORING 13 Jul 2026 Where Can I Find a Cyber Security Tutor in Glasgow? Looking for a cyber security tutor in Glasgow? Here's how to find real help locally or online, and what to look for. Readarrow_forward
Want the hands-on segments these notes point to?
Korra Studio's tutoring platform pairs every topic with 1-to-1 mentoring.
Explore the platformarrow_forward