Part of Resources — professional workflows beside courses and labs — not a substitute for enrolment.

Authorized lab / engagement use only

Security playbooks

Professional workflows with objective, prerequisites, authorized scope, step-by-step actions, evidence, checklist, reporting template, and remediation. Practice only on systems you own or are contracted to assess.

Professional workflows

8 engagement-style playbooks.

AppSec

Web application assessment workflow

Deliver a scoped, evidence-backed assessment of a web app’s auth, access control, and injection surface with clear remediation.

Open playbook →

Network

Network security assessment

Map authorized network attack surface, identify weak segmentation/services, and produce a prioritized hardening plan.

Open playbook →

DFIR

Incident response workflow

Execute a calm, evidence-preserving IR lifecycle from detection through lessons learned.

Open playbook →

SOC

SOC alert triage

Triage SIEM/EDR alerts into true positives, false positives, and escalations with consistent ticket quality.

Open playbook →

OSINT

OSINT investigation

Answer an investigative question with passive, policy-compliant collection, correlation, and a clear report.

Open playbook →

Vuln mgmt

Vulnerability validation

Validate scanner findings, remove false positives, and prioritize remediation with clear owners.

Open playbook →

Cloud

Cloud security assessment

Review IAM, logging, and common misconfigurations in an authorized cloud account and produce a posture report.

Open playbook →

AI Security

AI application threat modeling

Threat-model an LLM/RAG/agent feature and produce mitigations mapped to abuse cases.

Open playbook →

Concept notes

Shorter study guides (checklists + quizzes) — keep using them as companions.

Foundation

Cybersecurity fundamentals — end-to-end

Networking

Network security — ports, firewalls, HTTP

AppSec

Web application security — methodology

OSINT

OSINT reconnaissance — professional lane

AI Security

LLM jailbreaking — techniques & defenses

OSINT / Media

AI & synthetic image verification

System security

Linux hardening & audit

Career

Defensive security & project ideas