The most important directory in Linux for cybersecurity work is not the one most tutorials start with.
It is /var/log.
This is where system logs live.
When something goes wrong or when you are investigating an incident, this is where you look first.
Before you learn a single command, know where the logs are.
Full Linux foundations for beginners.