Months 4-6 (Core Skills — Parts 3-4):

Primary: HackTheBox Easy machines, local Active Directory lab - Secondary: PortSwigger Web Security Academy (continuing through topics) - Supplementary: TryHackMe offensive pentesting rooms for specific topics