Website: https://www.cisa.gov/sites/default/files/publications/Federal_Government_Cybersecurity_Incident_and_Vulnerability_Response_Playbooks_508C.pdf The Federal Government Cybersecurity Incident and Vulnerability Response Playbooks document is a comprehensive guide to help federal agencies respond to and mitigate cybersecurity incidents and vulnerabilities. The playbook…
A glossary of approximately 450 terms provided by SANS. It is searchable and you can suggest your own additions or edits.
Website: https://gitlab.com/syntax-ir/playbooks/-/tree/main GitLab open sourced their playbooks for Incident Response as a way to give back to the community. It gives us procedural documentation, flowcharts, and activities you can adopt,…
Website: https://www.mitre.org/news-insights/publication/11-strategies-world-class-cybersecurity-operations-center This 452-page document(!) is a mammoth resource to learn about what SOCs do, how to build one, how to staff a SOC, and details on the functions it…
Website: http:///cve.mitre.org This is the list of common vulnerabilities and exposures (CVE) that everyone knows and loves. There is one CVE Record for each vulnerability in the catalog. The vulnerabilities…
Website: https://oasis-open.github.io/cti-documentation/stix/intro Structured Threat Information Expression (STIX™) is a language and serialization format used to exchange cyber threat intelligence (CTI). This is a common, standardized way to share threat information…
Website: http://cwe.mitre.org CWE™ is a community-developed list of software and hardware weakness types. It serves as a common language, a measuring stick for security tools, and as a baseline for…
Website: https://capec.mitre.org/index.html CAPEC is the way an attacker can exploit a CVE or generally target a CWE. From the site:The Common Attack Pattern Enumeration and Classification (CAPEC™) effort provides a…
Website: https://cybersecurityventures.com/cybersecurity-glossary/ This meta-list is a link to several other glossaries of Cybersecurity terms. Find out common abbreviations, compare definitions, and generally up your communication game.
Website: https://www.first.org FIRST is the Forum of Incident Response and Security Teams. Their site includes frameworks for CSIRT (Computer Security Incident Response Teams) and PSIRT (Product Security). They also have…