I wouldn't put much weight on this. It's a growth hack by OP for his cybersecurity consultancy (Mandos). In general, you should learn about the tools after yo

I wouldn't put much weight on this. It's a growth hack by OP for his cybersecurity consultancy (Mandos). In general, you should learn about the tools after you master the fundamentals. Understanding how OS, Networking, Web Development, DevOps, <insert_domain_here> works at a fundamental level will make it easier to become a well versed Security Practitioner. Most attack vectors I've seen in the wild tend to be caused by some kind of misconfiguration (eg. Accidentally leaving a test app internet accesible) or sloppy architecture (eg. Not keeping an inventory of systems and dependencies). The way to remediate that is by actually understanding how your underlying technology works.