# s0cm0nkey's Security Reference Guide ## s0cm0nkey's Security Reference Guide - [All of the Best Links and Resources on Cyber Security.](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/readme.md): Curated cyber security resources for SOC analysts, pentesters, DFIR practitioners, threat intelligence analysts, AppSec teams, and security learners. - [Start Here](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/start-here.md): Guided cyber security learning paths for SOC analysts, pentesters, DFIR practitioners, CTI analysts, AppSec testers, and beginners. - [Resource Index](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/resource-index.md): Search-friendly index of cyber security resource topics across blue team, red team, DFIR, OSINT, cloud, containers, AppSec, logging, privacy, and training. - [Cyber Intelligence](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence.md): Cyber threat intelligence and OSINT resources for indicators, threat data, enrichment, source evaluation, and intelligence workflows. - [OSINT](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint.md): Open Source Intelligence - [Search Engines](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/search-engines.md) - [Goohak.sh Code](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/search-engines/goohak.sh-code.md): https://github.com/1N3/Goohak/blob/master/goohak - [Google Dorking](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/search-engines/google-dorking-cheatsheet.md) - [Cyber Search Engines](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/cyber-search.md) - [Dark-Web Search](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/dark-web-search.md) - [IP Address](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/ip-address.md) - [Domain](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/domain.md) - [Username/Email](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/username-email.md) - [Name, Phone, Gov Record](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/name-phone-gov-record.md) - [SOCMINT - Social Media](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/socmint-social-media.md) - [Files/Media/Breach/Paste/Code](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/files-media-breach-paste-code.md) - [Misc OSINT](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/osint/misc-osint.md) - [Intel Feeds and Sources](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/intel-feeds-and-sources.md) - [Threat Data](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cyber-intelligence/threat-data.md): Is this bad? - [Red - Offensive Operations](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive.md): Authorized offensive security resources for reconnaissance, exploitation, post-exploitation, Active Directory attacks, password attacks, and red team operations. - [Reconnaissance and Scanning](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/scanning-active-recon.md) - [Recon Frameworks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/scanning-active-recon/recon-frameworks.md) - [NMAP](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/scanning-active-recon/nmap.md) - [Exploitation and Targets](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/exploitation-and-targets.md) - [Offensive Frameworks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/exploitation-and-targets/offensive-frameworks.md) - [Shells](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/exploitation-and-targets/shells.md) - [MSFVenom Commands](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/exploitation-and-targets/msfvenom-commands.md) - [Vulnerability and Exploit Research](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/exploitation-and-targets/exploit-research.md) - [Exploitation by Port](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/exploitation-and-targets/exploitation.md) - [Special Targets](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/exploitation-and-targets/special-targets.md) - [Exploit Dev/Buffer Overflow](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/exploitation-and-targets/exploit-dev-buffer-overflow.md) - [Post Exploitation](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/post-exploitation.md): So, you have successfully gotten your first toe hold into your targets network. What next? - [C2 Frameworks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/post-exploitation/c2-frameworks.md) - [Persistence](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/post-exploitation/persistence.md) - [Defense Evasion](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/post-exploitation/defense-evasion.md) - [Enumeration and Harvesting](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/post-exploitation/enumeration-and-harvesting.md): All the ways to grab the goodies - [File Transfer](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/post-exploitation/file-transfer.md) - [Network Attacks /Harvesting/MITM](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/post-exploitation/network-attacks-harvesting-mitm.md) - [Privilege Escalation](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/post-exploitation/privilege-escalation.md): Shellin's for show, Rootin's for dough - [Meterpreter Post-Auth Runbook](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/post-exploitation/meterpreter-post-auth-runbook.md) - [Attacking Active Directory](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/active-directory.md): Where can we go, once we are in? - [Lateral Movement](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/lateral-movement.md) - [Password Attacks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/password-attacks.md): Password1234! - [Web App Hacking](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking.md): Web application hacking resources for OWASP testing, Burp Suite, bug bounty methodology, APIs, OAuth, SQL injection, XSS, WAFs, and web vulnerabilities. - [Burp Suite](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/burp-suite.md) - [Web App Testing Frameworks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/web-app-testing-frameworks.md) - [Web App Scanning Utilities](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/scanning-utilities.md): Scanning for the technology used within your target. Understand how it works, to understand how to break it. - [Web Technologies](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/web-technologies.md) - [OAuth 2.0](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/web-technologies/oauth-2.0.md) - [SSL/TLS and Certificates](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/web-technologies/ssl-tls-and-certificates.md) - [Web Application Firewall](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/web-technologies/web-application-firewall.md) - [Attacks and Vulnerabilities](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities.md) - [Broken Authentication](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/broken-authentication.md) - [Business Logic Flaws](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/business-logic-flaws.md) - [Clickjacking](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/clickjacking.md) - [Command Injection](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/command-injection.md) - [CSRF](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/csrf.md) - [Deserialization](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/deserialization.md) - [HTTP Host Header Attacks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/http-host-header-attacks.md) - [HTTP Request Smuggling](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/http-request-smuggling.md) - [Insecure Direct Object Reference](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/insecure-direct-object-reference.md) - [XSS - Cross Site Scripting](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/owasp-7-xss-cross-site-scripting.md) - [Web Cache Poisoning](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/web-cache-poisoning.md) - [Web Sockets](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/web-sockets.md) - [XXE - XML External Entity Attacks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/xxe-xml-external-entity-attacks.md) - [SQL Injection](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/sql-injection.md) - [SQL Methodology](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/sql-injection/sql-methodology.md) - [Manual Injection Methodology](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/sql-injection/manual-injection-methodology.md) - [SQL Tips and Tricks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/web-app-hacking/attacks-and-vulnerabilities/sql-injection/sql-tips-and-tricks.md) - [Red/Purple Teaming](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/red-purple-teaming.md) - [Physical Security Testing](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/physical-security-testing.md) - [Wireless Hacking](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/wireless-hacking.md) - [Social Engineering](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/social-engineering.md) - [Offensive Toolbox](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/offensive-toolbox.md) - [Utility Commands](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/red-offensive/offensive-toolbox/utility-commands.md) - [Blue - Defensive Operations](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense.md): Blue team resources for SOC operations, detection engineering, threat hunting, packet analysis, hardening, and vulnerability management. - [Standards, Frameworks, and Benchmarks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/terminology-and-mapping.md) - [Query Languages](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/query-languages.md): Security query languages, detection rule syntax, and search references - [Event and Log analysis](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-and-log-analysis.md): Common security events, log interpretation, and analyst techniques - [Event Detection](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection.md) - [SIEM and Enrichment](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/siem-and-enrichment.md) - [Sysmon](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/sysmon.md) - [IDS/IPS](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/ids-ips.md) - [Detection Use Cases](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases.md) - [DNS](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases/dns.md): Detection, Enrichment, and Use cases - [HTTP(S)](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases/http.md) - [Email](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases/smtp.md): Detection, Enrichment, and Use cases - [Endpoint](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases/endpoint.md) - [Command Line](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases/command-line.md) - [Authentication/Logon](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases/authentication-logon.md) - [General Network Traffic](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases/general-network-traffic.md) - [User Behavior monitoring](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases/user-behavior-monitoring.md) - [Detection Use Cases - Book Reference](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases/detection-use-cases.md) - [Windows Event ID logging list](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/event-detection/detection-use-cases/windows-event-id-logging-list.md) - [Packet Analysis](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/packet-analysis.md) - [Threat Hunting](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/threat-hunting.md) - [Active Defense](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/active-defense.md) - [Device Auditing and Hardening](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/device-hardening.md) - [Windows Hardening Commands](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/device-hardening/windows-hardening-commands.md) - [AD Security Checks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/device-hardening/ad-security-checks.md) - [Steganography](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/steganography.md): I'm the data, playing the data, disguised as another data... - [Asset and Vulnerability Management](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/vulnerability-management.md) - [Blue Toolbox](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/blue-defense/blue-toolbox.md) - [Blue - DFIR: Digital Forensics and Incident Response](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response.md): DFIR resources for incident response, forensic triage, Windows and Linux commands, memory forensics, malware analysis, and evidence collection. - [Interact with remote machine](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/interact-with-remote-machine.md) - [Windows System Enumeration](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/windows-system-enumeration.md) - [Windows Process Information](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/windows-process-information.md) - [Windows DFIR Checks](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/windows-dfir-checks.md) - [Windows DFIR Check by MITRE Tactic](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/windows-dfir-check-by-mitre-tactic.md) - [Windows Event Logs](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/windows-event-logs.md) - [Windows Remediation Commands](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/windows-remediation-commands.md) - [IR Event Log Cheatsheet](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/ir-event-log-cheatsheet.md) - [Linux DFIR Commands](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/linux-dfir-commands.md) - [MacOS DFIR Commands](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/macos-dfir-commands.md) - [YARA](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/yara.md): Pattern-matching rules for malware identification and signature hunting - [Memory Forensics](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/memory-forensics.md) - [Volatility](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/memory-forensics/volatility.md) - [Sandboxing](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/sandboxing.md) - [File/Binary Analysis](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/file-analysis.md): Methodology and tools for analyzing suspicious files and binaries. - [Malware](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/malware.md) - [Reverse Engineering](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/dfir-digital-forensics-and-incident-response/binary-analysis-reverse-engineering.md) - [Yellow - NetEng/SysAdmin](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/yellow-neteng-sysadmin.md): Networking, protocol, operating system, Windows, Linux, macOS, Active Directory, sysadmin, and infrastructure references for security practitioners. - [Yellow - Logging and Security Architecture](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/security-logging.md): Security logging architecture resources for log collection, endpoint logs, cloud audit logs, network telemetry, retention, and log source evaluation. - [How to create a logging strategy](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/security-logging/how-to-log.md) - [Logging - Network Services](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/security-logging/logging-guide-network-services.md) - [Logging - Endpoint Logs (Windows & Linux)](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/security-logging/logging-guide-windows-endpoint-logs.md) - [Logging - User Behavior Monitoring](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/security-logging/logging-user-behavior-monitoring.md) - [Logging - Cloud](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/security-logging/logging-cloud.md): Cloud audit, identity, activity, and flow logging - [Device Discovery and Asset Monitoring](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/security-logging/device-discovery-and-asset-inventory.md) - [Log Source Evaluation](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/security-logging/log-source-evaluation.md): Evaluating log source quality and visibility coverage - [Yellow - Cloud](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/cloud.md): Cloud security resources for AWS, Azure, Google Cloud, Microsoft 365, cloud hardening, cloud logging, and authorized cloud testing. - [Yellow - Containers](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/containers.md): Container security resources for Docker, Kubernetes, image scanning, runtime security, platform hardening, and authorized container testing. - [Yellow - Code and CLI](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools.md): Code, command-line, Bash, PowerShell, regex, scripting, and data-transformation resources for security analysts and practitioners. - [Bash](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools/bash.md) - [CLI Components](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools/bash/cli-components.md) - [Common Commands](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools/bash/common-commands.md) - [Install Scripts](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools/bash/install-scripts.md) - [Nmap Diffing](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools/bash/nmap-diffing.md) - [Heartbleed Vuln Check](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools/bash/heartbleed-vuln-check.md) - [PowerShell](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools/powershell.md) - [Common Commands](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools/powershell/common-commands.md) - [Regex](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools/regex.md) - [Learn to Code](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/code-tools/learn-to-code.md) - [Yellow - AI, Machine Learning, and FOSS](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/yellow-ai-machine-learning-and-foss.md): AI, machine learning, free and open-source software, security datasets, research tooling, and lab-building resources. - [Grey - Privacy/TOR/OPSEC](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/grey-privacy-tor-opsec.md): Privacy, Tor, PGP, and personal OPSEC references. - [Jolly Roger's Security for Beginners](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/grey-privacy-tor-opsec/jolly-rogers-security-for-beginners.md): INTRODUCTION TO SECURE COMMUNICATION - TOR, HTTPS, SSL - [PGP Guide](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/grey-privacy-tor-opsec/pgp-guide.md): Maintained OpenPGP/GnuPG reference for key generation, encryption, signatures, and verification. - [TOR](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/grey-privacy-tor-opsec/tor.md): Tor fundamentals, privacy routing, bridges, onion-service notes, and safe references. - [Training and Resources](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/training.md): Cyber security training resources, courses, certifications, books, labs, CTF practice, TryHackMe rooms, and Awesome lists. - [Cyber Security Certifications](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/training/cyber-security-certifications.md) - [OSCP](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/training/cyber-security-certifications/oscp.md): Am I leet yet? - [Books and Reading](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/training/books-and-reading.md) - [The Awesome Lists](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/training/the-awesome-lists.md) - [Practice Lab](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/training/practice-lab.md) - [CTF](https://s0cm0nkey.gitbook.io/s0cm0nkeys-security-reference-guide/training/ctf-practice.md)