things I accidentally learned in my work (as an adult)
I never expected cybersecurity to shape the way I see life outside work. Somewhere between investigations, incident response, and asking too many questions, I realized I had started applying the same principles to my relationships, decisions, and even the way I think. These aren’t life lessons I intentionally learned, they just quietly became part of how I navigate adulthood.
1. Never assume unless stated and evidenced
if i had an overused sentence in my life it might have been this one. The easier route is to give explanation for something and just assume but that’s lazy work hahaha. My colleague said something before that stuck to me so I kept repeating it - “you know that file didn’t just accidentally spawned out of thin air, it has reason and purpose - we need to have context or else we’ll just assume forever”
And it’s simple to think, that way. You can’t assume easily when it’s not backed up with facts. Sometimes you just have to take information as is and use it as accurately as possible.
Though I am aware as well this can turn into a taxing mental cycle of searching for meaning in life (or investigation) without end lol.
Similar to point 1, don’t just assume that your point of view is the prime definition. A true positive event can look false positive if it’s not intended to happen. Just like a stranger in your house, what doesn’t belong in your life has to have context or else they… will look like intrusion. But if context is added maybe that stranger was actually a visitor that you need at that point in your life.
3. Think ahead but be flexible
When I started working, one of the main skill I adapted was thinking ahead - i sort of gotten used to being 10 steps ahead when a singular event has just occurred. It has obvious benefits, you prepare better. But there’s also a downside.
If you spend your entire life preventing every possible outcome, you also prevent yourself from learning why things happen in the first place.
Attack paths and scenarios are all predictions and should not be 100% reliant on, anomaly can occur therefore we must be prepared for it.
4. Validation doesn’t have to be loud
In earlier years, i used to view being meaningful at work was getting projects, accomplishing certifications, colleagues appreciating me at work but recently it doesn’t have to be that way. The more I chased validation, the more suffocating it became.
I sort of just realized that what I value most was just doing what I know, and do I well. A good day in work is actually just… peaceful lol like there’s nothing happening.
5. If you keep solving the wrong problem then it wasn't the real problem in the first place :D
Just save yourself time and put effort on where it should be placed. In organizations, sometimes managers try to solve low lying fruit thinking it would magically help the team - but not properly checking the underlying problem.
6. The absence of evidence isn’t evidence of absence
In a perfect world, we can see everything, telemtry logs are ingested - we see point A to B and it’s full picture. And sometimes just because you can’t see it, doesn’t mean it didn’t happen - you know the golden rule?
“Her love is like the wind I can feel it but I can’t see it”
- a walk to remember (hahahahhaha)
And if telemetry is missing, endpoints are offline, and it takes days for events to make sense and get to see the picture.
I realized that in life too. I used to think if someone didn’t express appreciation then they didn’t care. If someone drifted away then maybe that relationship didn’t matter. Not everything leaves visible evidence (IM LOOKING AT YOU FILELESS DETECTION)
Sometimes people love you quietly. sometimes opportunities happen in the background or it’s already in the works it’s not there yet.
Patience is also a part of investigations.
7. Correlation is not causation
Two events happening at the same time doesnt mean one caused the other. its easy to assume that some divine universe is giving signs and helping you decide and as humans it’s comforting connect dots and solve problems- give meaning for something completely unrelated.
8. Start even if it overwhelms you
In not uncommon to get so much alerts and messages at work, everything feels like P0. What helped me so much lately was trying to accomplish an easy task at the start of the week or the day. I think I just live for the small wins in life haha
In a week I get excited that by the time I end at work I get to just do something else. go to cafes, play with my cats, cook food, just sleep.
9. Retrospectives & lessons learned
In incidents response, the last part would be creating a final report which contains, a summary and timeline of events - what went wrong & recommendations on how to strengthen organization’s security infrastructure. It’s also same in life, when I encounter (or feel) that something is wrong, I stop and evaluate deeply - what is happening to me Lol (and i think that’s the reason why suddenly I get into journaling) I have to understand and dig deeper how I went from point A to B… what were the factors, objectively what made me feel this way.
unknowingly I kind of organized it into two things - tangible and intangible aspects.
how I prepare my workout clothes at night (which results to less laziness to workout in mornings -> starting the day early -> sleeping deeply bec i wastired)
study my routes when going to unfamiliar places -> less anxiety navigating -> being more flexible in decision making when some factors are unavailable (no grab, less transpo avail, weather etc)
Intangible aspect might be
how I force myself to not do anything at night - no music, social media, reading so I don’t overthink and daydream which leads to me starting the next day late.
Honestly it’s not 100% perfect all the time lol I mess up and get into my head. But that’s ok, what I learned was being forgiving and setting the right expectations haha