Notes from the field.
Small habits make a difference. Keep these close as you investigate.
PhishingLook past the display name
A familiar name does not verify a sender. Expand the address and check the full domain. If a message asks you to sign in, open the service independently instead of following its link.
AuthenticationMake every password unique
Use a different, long password for each account. A password manager can generate and store them. Enable multi-factor authentication where it is available, and never share a verification code.
Social engineeringPause before you act
Urgency is a common pressure tactic. Verify unexpected requests through a separate, known communication channel, especially requests involving payments, credentials, or sensitive files.
Responsible practiceKeep your practice in the lab
Only test systems you own or have explicit permission to assess. CyberQuest workspaces are simulations. Techniques learned here should be used within a clearly agreed scope.