Digital Garden
Search
Ctrl K
Digital Garden
Search
Ctrl K
000 Home MOC
010 Cybersecurity MOC
011 🛡️ Blue Team & SOC Operations MOC
012 ⚔️ Red Team & Offensive Security MOC
013 🌐 Web Application Security MOC
014 🦠 Malware Analysis & Forensics MOC
015 🔐 Cryptography & Identity MOC
017 🤖 AI & Emerging Tech MOC
018 🎓 Learning & Projects MOC
019 🎤 Interview Prep MOC
020 Infrastructure & Networking MOC
021 Networking
022 Virtualization & Cloud
023 Systems
30Days-MyDFIR
090 Cheatsheets MOC
Active Reconnaissance
Agentic AI
Alert Reporting
Alert Triage
Alert
Alerting and Detection Strategies Framework
ALPHAV
Artificial Intelligence
Asset Inventory
Atomic Red Team
Attack Residues
Attack Signatures
Attribute-Based Access Control (ABAC)
Audit Logon Events
Authentication Failures
Authentication
Authorization Bypass
Authorization
Banner Grabbing
Blue Teaming
Broken Access Control
Brooks's Law
Brute-force
Buffer Overflow
Burp Suite
Business Email Compromise
C2 Detection - Command & Carol
CALMS Framework
Certificate Revocation Lists (CRLs)
Chain of Custody
Chain-of-thought (CoT)
CIA Triad
Command and Control (C2)
Command Injection
Cookie
Cross-site request forgery (CSRF)
Cross-Site Scripting (XSS)
Cryptographic Failure
CSIRT
cURL
CVE-2017-0144
CVSS
Cyber Kill Chain
Cyberchef
Data Loss Prevention (DLP)
Day-01 MyDFIR
debsums
Detection Engineering
Detection Maturity Level Model
Developer Velocity
DevSecOps
Dictionary Attacks
DNS Sinkhole
DNS Tunneling
DNSDumpster
Domain Generation Algorithm (DGA)
Domain Information Groper (dig)
Dwell Time
Dynamic Analysis
ElastAlert
Elastic
Elasticsearch
ELK Stack
Email Gateway
Endpoint detection and response (EDR)
Environment-based detection
EternalBlue
EXIF Metadata
ExifTool
Exploit Kit
Exploit
False Positive
Fast Flux
Favicon Hash
fcrackzip
File Timestamps (mtime, ctime, atime)
FIN7
GitHub OSINT
Google Dorking
Governance, Risk and Compliance (GRC)
Hardware Security Module (HSM)
Heartbleed
Honeypot
HTA (HTML Application)
HTTP Request
Hydra
Identification, Authentication, Authorization, and Accountability (IAAA)
Incident Response
Indicator Detection
Injection
Insecure Design
Insecure Direct Object Reference (IDOR)
Interactive logon - Display user info when locked
Intrusion Prevention System (IPS)
John the Ripper
Jump Bag
Key Backup and Recovery
Key Destruction
Key Distribution
Key Generation
Key Management Lifecycle (KML)
Key Revocation
Key Rotation
Key Storage
Key Usage
Kibana
Kill Chain
Large Language Models (LLMS)
Lateral Movement
LHOST
Linux
Living off the Land (LOLBAS)
Logging & Alerting Failures
Logstash
Malvertising
Malware Analysis - Malhare.exe
Malware Analysis
Metasploit Console
Metasploit Framework
Metasploit Modules
Metasploit
Meterpreter
MITRE ATT&CK
Modbus - Claus for Concern
Moniker Link (CVE-2024-21413)
mshta.exe
Multi-Factor Authentication (MFA)
My Garden
Netcat (nc)
Nmap
nslookup
NTLM
OhSINT
Open Source Intelligence (OSINT)
OWASP
Parameterized Queries
Passive Reconnaissance
Password Cracking
Payload
pdfcrack
Penetration Testing Report
Persistence (Cyber Security)
PEStudio
Phishing
Ping
PowerShell Script Block Logging
Privilege Escalation
Process Injection
ProcMon
Public Key Infrastructure
Purple Teaming
Pyramid of Pain
Ransomware
ReAct Prompting
Red Teaming
Regression Testing
Regshot
RHOSTS
RITA
Robots.txt
Role-Based Access Control (RBAC)
Rootkits
Sandboxes
Search Engine Optimization (SEO)
Secure by Design
Security Information and Event Management system (SIEM)
Security Misconfigurations
Security Operations Center (SOC)
Server Side Template Injection (SSTI)
Server-Side Request Forgery (SSRF)
Shadow Brokers
Shodan Dorking
Shodan
Sitemap
Smishing
SOC analysts
Social Engineering
Software Development Lifecycle (SDLC)
Software Restriction Policies
Spam
Splunk
SQL Injection
SSH authorized_keys
Static Analysis
Steganography
strings
SUID and SGID Permissions
Sysmon Event ID 11 - File Create
Sysmon Event IDs
Sysmon
Tabletop Exercise
Telnet
TheHive Project
THM - Intro to Detection Engineering
THM - Malware Introductory
THM - Splunk Basics - Did you SIEM
Threat Behavior detections
Threat Emulation
Threat Hunting
Threat Intelligence Feeds
Threat-based detection
TIBER-EU Framework
Traceroute
TTPs (Tactics, Techniques, Procedures)
Typosquatting
Uncoder.io
Unified Kill Change
User-Agent Spoofing
Vibe Coding
View Page Source
VirusTotal
WannaCry
Web Application Firewalls (WAFS)
Web Crawler
Web Session
Web Shell
WHOIS
WiGLE
Windows Event ID 1102
Windows Event ID 4698
Windows Event Logs
WordPress
Yara
Zeek
Zero-Day Exploit
Select a result to preview
000 Home MOC
010 Cybersecurity MOC
020 Infrastructure & Networking MOC