Jekyll2026-10-18T10:36:04+01:00https://noblemtk.com/rss.xmlnoble.logSOC, pentesting and blue-team notes, homelab builds, and certification progress — written as I learn.NobleMy Roadmap: CPTS, BTL2 and OSCP2026-10-18T06:00:00+01:002026-10-18T06:00:00+01:00https://noblemtk.com/article/my-roadmap-cpts-btl2-oscpI’m aiming for SOC and vulnerability assessment roles, so I’m working both sides of the fence at once. Here’s the plan and how I’ll report on it.

The three tracks

Track Side Why it’s on the list
HTB CPTS Offensive Deep, hands-on pentest methodology and report writing
BTL2 Defensive Threat hunting, detection and incident response at the next level up from BTL1
OSCP Offensive The industry-recognised benchmark for practical pentesting

Learning to attack makes me a better defender, and the reverse is true too. Running them together is slower, but the overlap is the point.

How I’ll track it

  • A progress post whenever I finish a major module or milestone
  • Writeups of retired boxes as I go through practice
  • The certs page updated as each one moves from in progress to earned

Next up

The next post will cover my current CPTS module and the notes setup I’m using to keep everything organised.

]]>NobleWhy I’m Starting This Log2026-10-18T05:00:00+01:002026-10-18T05:00:00+01:00https://noblemtk.com/article/why-im-starting-this-logEvery lab I finish, every box I root and every detection rule I write ends up in a notes folder nobody else will ever read. That’s fine for revision, but it hides the actual work. This site is where some of those notes come out into the open.

What goes here

  • Writeups of retired Hack The Box machines and other labs I’m allowed to publish
  • Homelab builds: what I set up, what broke, and how I fixed it
  • Concept notes: short explanations of things I’ve just learned, written so future me can follow them
  • Progress posts for the certifications I’m working on

What doesn’t

No writeups for active HTB machines, exam content, or anything covered by a platform’s NDA. If it would spoil a live challenge or break a rule, it stays in my private notes.

Where I’m starting from

I hold Security+, Linux+, BTL1, eJPT and INE Cloud Associate, and I’m working on CPTS, BTL2 and OSCP in parallel. The live list is on the certs page.

How to follow along

There’s an RSS feed, and everything behind this site is public on GitHub.

$ whoami
noble
$ echo "let's go"
let's go
]]>Noble