Website: https://cybersecurityventures.com/cybersecurity-glossary/ This meta-list is a link to several other glossaries of Cybersecurity terms. Find out common abbreviations, compare definitions, and generally up your communication game.
Website: https://opensecuritytraining.info/Welcome.html Disclaimer: This site has undergone a re-design branded as “OST2” that has fewer classes and asks you to sign-in. The link referenced here takes you to the older…
Website: https://capec.mitre.org/index.html CAPEC is the way an attacker can exploit a CVE or generally target a CWE. From the site:The Common Attack Pattern Enumeration and Classification (CAPEC™) effort provides a…
Website: http://cwe.mitre.org CWE™ is a community-developed list of software and hardware weakness types. It serves as a common language, a measuring stick for security tools, and as a baseline for…
Website: https://oasis-open.github.io/cti-documentation/stix/intro Structured Threat Information Expression (STIX™) is a language and serialization format used to exchange cyber threat intelligence (CTI). This is a common, standardized way to share threat information…
Website: http:///cve.mitre.org This is the list of common vulnerabilities and exposures (CVE) that everyone knows and loves. There is one CVE Record for each vulnerability in the catalog. The vulnerabilities…
Website: https://www.mitre.org/news-insights/publication/11-strategies-world-class-cybersecurity-operations-center This 452-page document(!) is a mammoth resource to learn about what SOCs do, how to build one, how to staff a SOC, and details on the functions it…
Website: https://gitlab.com/syntax-ir/playbooks/-/tree/main GitLab open sourced their playbooks for Incident Response as a way to give back to the community. It gives us procedural documentation, flowcharts, and activities you can adopt,…