Maxwell CTI
Search
CTRL + K
Maxwell CTI
Search
CTRL + K
_Blog and Research
Zoom Phishing Email
AWS Practitioner
Amazon Course
AWS Definitions
Cloud Computing
EC2
IT resources
Module 0 - Course Overview
Module 1 - Introduction
Module 2 - Compute in the Cloud
Career Growth
Intro to IT and Cybersecurity
Building a Homelab
Recommended Helpdesk Classes and Lectures
Discord Comments and Job Hunting
Jon Hatch's Guide to Job Hunting
Naomi Buckwalter
Resume Improvement in Tech and Cybersecurity
Definitions and Topics
AAA
Adversary
APT
Attestation
backdoor
baselining
Bell-LaPadula Model
Berkeley Packet Filter Syntax
Biba Integrity Model
BIMI
Business Continuity and Disaster Recovery Guide
C2
CIA Triad
CSIRT
CSOC
CUEC
Disinformation and Information Warfare
DKIM
DLP
DMARC
EDR
Email harvesting
EQL
exif
FOSS
GDPR
GRC
Incident Response Plan
Indicators of Compromise
Kerberoasting
LAPS
Lateral movement
LLMNR
Look-alike domains
Malware
mDNS
NBT-NS
NDR
OSINT
OWASP
Password spraying
PII
Principle of Least Privilege
Privileged Access Management
Privileged Identity Management
Remote Shell
Rules of Engagement
SDLC
SID
SIEM
SOA
SPF
STRIDE
Subdomain Enumeration
System Security Plan
Threat Modeling
Trust Service Categories
TTPs
UEBA
VAD
vulnerability
XDR
Zero-day
Frameworks, Standards, and Regulations
Attack Surface Management
ASM Resources
Diamond Model
THM - Diamond Model
LM Cyber Kill Chain
Breaking the Kill Chain
KC Resources
THM - LM Cyber Kill chain
MITRE ATT&CK
ATT&CK Resources
MITRE ATT&CK
NIST
NIST 800-53
800-53A
800-53B
800-53R5
NIST CSF
NIST CSF
RMF
NIST SP 800-37 (RMF)
FISMA
NIST Frameworks and SPs Overview
NIST SP 800-60
SOC
SOC 2
SOC Reports
Unified Kill Chain
THM - Unified Kill Chain
Technical Guides
Installing the Zen Browser
Securing Email
Templates
_BHIS-Lab-Fix
_BHIS-Lab-New
Tool Deep-Dives
GraphRunner
GraphRunner
Linux
QEMU, KVMs, and Virt-Man
Adding a second monitor to a QEMU VM
Installing a Windows VM on Linux
chmod
column
cut
deb-get
Formatting Drives on Linux
fstab
grep
Installing Software on Debian
less
Linux Data Streams
Linux
ln
lnav
lsblk
lsof
Named Pipe
PATH Variable
R core
Remmina
sed
sort
Spice
ss
umount
uniq
Upgrade vs Dist-Upgrade
vi
VirtIO
which
xrdp
zgrep
Metasploit
Meterpreter
msfvenom
OS Recovery Tools
Recovery Tools Index
OSINT
crt-sh
dirb
exiftool
ffuf
Gobuster
Google Dorking
Shodan
Sublist3r
Wappalyzer
Proxmox
Adding drives to Proxmox
Adding Network Ports
Changing Proxmox Server Name and Domain
Exporting VMs to run with QEMU
Mounting USB Drives in ProxMox
Networks
Proxmox PVE admin guide
Proxmox Virtual Environment
Removing root
Python
DMARC Report Analyzer
Python Introduction
Python
SSH
OpenSSH
SSH
Wazuh
Wazuh
Windows
Active Directory
cmd.exe
LDP
NET
netstat
PowerShell
RDP
Sysmon
tasklist
Windows Firewall
Windows
WMI
wmic
Wireshark
Guides
Capture Traffic with Wireshark
Changing the Wireshark display
Dumpcap
GeoIP Databases
PCAP vs PCAPNG
Reading Information from the display
TCP Details
Wireshark Filters
Malware Traffic Analysis
Tutorials
00 - Getting Setup
2019-09-25 - Examining Trickbot Infections
Udemy - Chris Greer
S00 - Course Overview
S01-02 - Introduction
S03 - Configuring Wireshark
S04 - Filtering Traffic
S05 - Capturing Packets
S06 - Anatomy of a Packet
S07 - Practical IP Analysis
S08 - UDP Analysis
S09 - Practical TCP Analysis
S10 - Troubleshooting with Wireshark
Other resources
7zip
Atomic Red Team
BLUESPAWN
Certipy
DeepBlueCLI
dig
Elastic Stack
Git
LAN turtle
LogonTracer
MITRE Engage
Netcat
Nikto
Nuclei
OpenEDR
Path Traversal
Purple Knight
Responder
Rubeus
SIDR
tcpdump
Velociraptor
Volatility
whois
Webinars and Training
BHIS One-Offs
For the Love of the Windows Search Index with Alissa Torres
BlackHills MITRE
BHIS-I2S-lab-BLUESPAWN
BlackHills SOC Core
Labs
00-BHIS-SOCC-lab-Config
000-BHIS-Lab-Directory
01-BHIS-SOCC-lab-LinuxHostConfig
BHIS-SOCC-lab-DeepBlueCLI
BHIS-SOCC-lab-FirewallLog
BHIS-SOCC-lab-LinuxCLI
BHIS-SOCC-lab-MemoryAnalyses
BHIS-SOCC-lab-Sysmon
BHIS-SOCC-lab-tcpdump
BHIS-SOCC-lab-WindowsCLI
Disable Windows Memory Integrity
Topics
SOCC01 - Networking and PCAPs
SOCC02 - Linux
SOCC03 - Windows Endpoint Management
SOCC04 - Server Log Analysis
SOCC05 - Memory Forensics
SOCC06 - Egress Traffic Analysis
SOCC07 - User and Entity Behavior Analytics
SOCC08 - Endpoint Protection
BHIS SOCC Notes Overview
Additional BHIS Courses or Videos
Maxwell CTI
Resources and Communities
CUEC
CUEC
CUEC
(Complementary User Entity Controls)
Controls in a
SOC report
that the customer (the user entity) is responsible for implementing
Metadata
Sources
Tags
#defs_sec