This repository provides a centralized resource for operational cyber defense and offense, compiling Theory, Tools, Operating Procedures, and Step-by-Step Guides across various critical security domains. Content is sourced from industry-leading books and technical presentations, focusing on practical application rather than JUST theory.
# 🛡️ ULTIMATE CYBERSECURITY MASTER GUIDE <p align="center"> <img src="https://assets.kitploit.com/production/public/readmes/715/07d778bad243d32604741e2c9dd83b4eaf437532f1636453b4321e930d7aa679/5246940df71c0954bb7232bc9a249443fb0b4b33a51a9815fb3c0c238454773e-display-v1.webp" alt="PNWC Ultimate Cybersecurity Master Guide" width="600"/> </p> <p align="center"><strong>Professional Cybersecurity Knowledge Base · Red Team · Blue Team · Purple Team</strong></p> <p align="center"> <img src="https://img.shields.io/badge/Maintained-Yes-green" alt="Maintained"/> <img src="https://img.shields.io/badge/Books%20Referenced-70+-blue" alt="Books"/> <img src="https://img.shields.io/badge/PNWC%20Internal%20Docs-90+-orange" alt="Docs"/> <img src="https://img.shields.io/badge/OSINT%20Tools-400+-purple" alt="OSINT"/> <img src="https://img.shields.io/badge/Scripts-Source_Collection-red" alt="Scripts"/> <img src="https://img.shields.io/badge/License-Educational%20Use-yellow" alt="License"/> <img src="https://img.shields.io/github/last-commit/Pnwcomputers/ULTIMATE-CYBERSECURITY-MASTER-GUIDE" alt="Last Commit"/> </p> > **Compiled from 70+ expert books · 90+ PNWC internal documents · custom tools & scripts** > *Abide by the [Legal Terms of Use & Disclaimer](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/LEGAL.md) for the use and misuse of this repository.* > "Under pressure, you don't rise to the occasion; you fall to the level of your training." > > "It ain't what you don't know that gets you into trouble. It's what you know for sure that just ain't so." --- ## 🧭 About This Index This README is the repository's front door: it lists the main sections, subsection indexes, and selected guides. Section READMEs provide the detailed file catalogs within each area. Use [START_HERE.md](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/START_HERE.md) to navigate by role or goal. The three [primary master guides](#primary-master-guides) contain technical material; this page helps you find it. <h1 align="center"><strong>THANK YOU FOR CHECKING THIS OUT!</strong></h1> --- ## 🎯 START HERE ### 🆕 New to IT/Computers/Networks in General? - READ OUR [IT MANUAL](https://pnw-computers.github.io/IT-Manual/) TO GET YOURSELF STARTED! ### ⭐ **[START_HERE.md](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/START_HERE.md) - START HERE IF YOU ARE READY TO JUMP IN!** Your complete navigation guide with quick paths for every role and purpose (Red Team, Blue Team, OSINT, Forensics, Homelab, Career). --- ## 🧭 Navigate by Area A grouped map of the whole repository. Prefer routing by **role/goal**? Use [START_HERE.md](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/START_HERE.md). Looking for section and guide listings? See [Supporting Guides & Reference](#supporting-guides) below. | Area | Start here | Also in this area | |------|-----------|-------------------| | 🚀 **Start & Master Guides** | [START_HERE.md](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/START_HERE.md) | [Ultimate](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/ultimate_cybersecurity_master_guide.md) · [Enhanced](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/ENHANCED_MASTER_GUIDE.md) · [Specialized Topics](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/SPECIALIZED_TOPICS_GUIDE.md) · [Cliff Notes](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/cybersecurity_cliff_notes.md) | | 🗡️ **Offensive Security** | [Tradecraft/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Tradecraft) | [Advanced Techniques](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/advanced_techniques_supplement.md) · [Part 2](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/advanced_techniques_part2.md) · [PlayBooks/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks) · [Checklists/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Checklists) | | 🕸️ **App, Cloud & Container** | [WebAppSecurity/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/WebAppSecurity) | [Cloud/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Cloud) · [ContainerSecurity/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/ContainerSecurity) | | 🛡️ **Defensive & Incident Response** | [IncidentResponse/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse) | [Endpoint Visibility](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/Endpoint-Visibility/README.md) · [SIEM](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/SIEM) · [IDS & IPS](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/IDS%26IPS) · [Honeypots](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/HoneyPot) · [Digital Forensics](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/Digital-Forensics) · [Homelab/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Homelab) | | 🗄️ **Data Engineering & Automation** | [Data Engineering](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Data-Engineering/README.md) | [Secure Data Pipelines](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Data-Engineering/data_pipelines.md) · [Scripts](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/README.md) | | 🔍 **OSINT & Recon** | [OSINT/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/OSINT) | [Tools Catalog](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/OSINT/OSINT_TOOLS_CATALOG.md) · [Investigator Playbook](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/OSINT/Playbook/README.md) | | 📍 **Wireless Surveying & Wardriving** | [Wardriving/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Wardriving/README.md) | [SigRoam](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Wardriving/sigroam-scout-lite.md) · [Marauder](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Wardriving/esp32-marauder.md) · [Biscuit](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Wardriving/biscuit.md) · [AWOK Dual C5](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Wardriving/awok-dual-c5-biscuit.md) · [Wardrive Go](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Wardriving/wardrive-go.md) · [Kismet](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Wardriving/kismet.md) | | 📡 **Specialized & Hardware** | [SPECIALIZED_TOPICS_GUIDE.md](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/SPECIALIZED_TOPICS_GUIDE.md) | [AI/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/AI) · [SDR/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/SDR) · [HardwareHacking/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/HardwareHacking) · [HardwareTesting/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/HardwareTesting) · [SpaceSecurity/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/SpaceSecurity) · [Mobile/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Mobile) · [uConsole/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/uConsole) | | 🔐 **Governance, Crypto & Reference** | [Compliance/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Compliance) | [Cryptography/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Cryptography) · [Documentation/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Documentation) · [GLOSSARY.md](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/GLOSSARY.md) · [OPSEC/](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/OPSEC) | | ⚖️ **Legal & Contributing** | [LEGAL.md](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/LEGAL.md) | [STYLE_GUIDE.md](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/STYLE_GUIDE.md) · [Contributing](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/.github/CONTRIBUTING.md) · [Security Policy](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/.github/SECURITY.md) | --- <a id="primary-master-guides"></a> ## 📚 PRIMARY MASTER GUIDES | Guide | Description | |---|---| | 🔥 **[Ultimate Cybersecurity Master Guide](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/ultimate_cybersecurity_master_guide.md)** | THE main comprehensive guide - key takeaways from 70+ professional security books, full penetration testing lifecycle | | 🔥 **[Enhanced Cybersecurity Master Guide](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/ENHANCED_MASTER_GUIDE.md)** | All of the above + 90+ PNWC internal docs, KB articles, and operational experience layered in | | 🔥 **[Specialized Topics Guide](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/SPECIALIZED_TOPICS_GUIDE.md)** | Deep-dive into specialized/emerging domains: AI & LLM Security, Hardware Hacking, Hardware Testing, uConsole Cyberdeck, Space Security, SDR & RF Security | --- <a id="supporting-guides"></a> ## 📖 SUPPORTING GUIDES & REFERENCE MATERIAL ### Core References | Resource | Description | |---|---| | [Glossary](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/GLOSSARY.md) | Acronyms and terms used across the repository (C2, EDR, IoC, TTP, OPSEC, SIEM, etc.) | | [Cybersecurity Cliff Notes](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/cybersecurity_cliff_notes.md) | Quick command reference; the essentials at a glance | | [Advanced Techniques - Part 1](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/advanced_techniques_supplement.md) | Advanced Metasploit, cloud pentesting, lateral movement, pivoting, etc. | | [Advanced Techniques - Part 2](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/advanced_techniques_part2.md) | Exploit development, buffer overflows, shellcode, custom payloads, etc. | | [DIY Hardware & Firmware Compatibility](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/firmware-hardware-compatibility.md) | SBC-based DIY pentesting devices as well as compatibility & firmware guides | | [Debian Linux Command Cheat Sheet](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Documentation/LinuxCheatSheet.md) | Linux CLI commands for Debian/Ubuntu/Kali/Parrot | | [Arch Linux Command Cheat Sheet](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Documentation/ArchLinux_CheatSheet.md) | Linux CLI commands for Arch | | [BlackArch Linux Cheat Sheet](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Documentation/blackarch.md) | Linux CLI commands for BlackArch | | [OSINT Cheat Sheet](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/OSINT/OSINT_CHEATSHEET.md) | Quick-reference OSINT cheat sheet | ### Operational Sections | Section | Description | |---|---| | 🤖 [AI Cybersecurity Resources](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/AI/README.md) | Self-hosted AI agents (OpenClaw, AnythingLLM), LLM prompting for security, offline AI deployment, and AI-powered security workflows | | 📋 [Checklists](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Checklists) | Pre-engagement, testing, and post-engagement checklists | | ☁️ [Cloud Security](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Cloud) | Shared-responsibility models, common misconfigurations, and provider-specific attack surfaces and hardening for AWS, Azure/Entra ID, and GCP | | 📋 [Compliance & GRC](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Compliance) | Governance, risk, and compliance guidance covering NIST CSF 2.0, ISO 27001, SOC 2, PCI DSS, CIS Controls, GDPR, HIPAA, CCPA, and control mapping | | 📦 [Container & Kubernetes Security](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/ContainerSecurity) | Container image and runtime attack surfaces, container escape techniques, and Kubernetes hardening using RBAC, Pod Security Standards, and network policies | | 🔐 [Cryptography](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Cryptography) | Practical cryptography reference covering current and deprecated algorithms, TLS, password storage, key management, and post-quantum standards including FIPS 203, 204, and 205, plus classical ciphers, leetspeak, and cryptanalysis | | 🗄️ [Data Engineering & Pipeline Infrastructure](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Data-Engineering/README.md) | General data engineering learning path, existing infrastructure resources, and a proposed documentation roadmap; start with [Secure Data Pipelines](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Data-Engineering/data_pipelines.md) for TLS, SSH, Git, structured logs, Redis/Memcached, Kafka, and Ansible | | 📚 [Documentation](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Documentation) | Supplemental technical documentation, command references, and cheat sheets | | 🔬 [Reverse Engineering](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/ReverseEngineering/README.md) | Ghidra installation, binary analysis, scripting, headless workflows, version comparison, and safe malware sourcing via vx-underground | | 🥷 [Hardware Hacking](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/HardwareHacking) | Physical and electronic attack techniques against embedded systems, microcontrollers, SoCs, and cryptographic hardware | | 🧰 [Hardware Testing](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/HardwareTesting) | Diagnostic, benchmarking, and reliability stress-testing guides and scripts for PC test benches | | 🏠 [Homelab Guides](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Homelab) | Building and maintaining safe, isolated labs for offensive and defensive security practice | | 🚨 [Incident Response](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse) | Blue Team operations covering threat detection, log aggregation, artifact analysis, and standardized incident-response procedures — including dedicated [IDS & IPS](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/IDS%26IPS) (nzyme, Suricata/Zeek) and [Honeypot](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/HoneyPot) (OpenCanary, Cowrie, Dionaea, T-Pot, HoneyPi) deployment guides | | 📱 [Mobile Security](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Mobile) | Kali NetHunter on OnePlus 6, [UserLAnd Linux environments on Android](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Mobile/UserLAnd/readme.md), Android and iOS application pentesting, mobile forensics, and field SOPs | | 🥷 [Navigating the DarkWeb](https://navigating-the-darkweb.readthedocs.io/en/latest/) | A Comprehensive Guide to Darknets, Tools, and Intelligence in an online book written by [Sébastien Damaye](https://github.com/sebastiendamaye) | | 🔬 [Network Audit Playbook](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks/NetworkAuditPlayBook.md) | Field-ready professional network security audit procedure | | 📋 [Operational Playbooks](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks/cybersecurity_playbooks.md) | Full index of playbooks covering network audits, Wi-Fi assessments, incident response, phishing, and unauthorized-access investigations | | 🔴 [OPSEC](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/OPSEC) | Operational security practices covering anonymity workflows, isolated virtual machines, identity separation, and personal rules for professionals | | 🔍 [OSINT Guide, Tools & Techniques](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/OSINT/OSINT_GUIDE.md) | Comprehensive OSINT methodology with 400+ categorized tools, investigation workflows, and automated VM setup | | 📄 [PDF Resources](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PDF) | Curated PDF references and guides | | 📚 [Playbooks Collection](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks) | Simple, detailed, and multi-script Purple Team, Blue Team, Red Team, and incident-response exercises and procedures | | 💻 [Scripts](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts) | Security automation scripts, exploitation tools, reconnaissance utilities, payloads, and general-purpose programs | | 📻 [SDR](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/SDR) | Software Defined Radio theory, security assessment techniques, practical workflows and applications; RF, NFC/RFID, SubGhz | | 📊 [SIEM Deployment Guides](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/SIEM) | ELK Stack, Wazuh, Splunk, and Graylog deployment, setup, and configuration guides | | 🎣 [SOP: Phishing Analysis Playbook](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks/sop_phishing_analysis.md) | Standard operating procedure for phishing-email triage and analysis | | 👾 [Space Security](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/SpaceSecurity) | Offensive and defensive security across the space, ground, and communications segments of modern space systems | | 🗡️ [Tradecraft](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Tradecraft) | Red Team, Blue Team, and Purple Team tradecraft covering Active Directory, C2 frameworks, AV/EDR evasion, LOLBins, threat intelligence, detection logic, and defensive countermeasures | | 📟 [uConsole](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/uConsole) | Configuration, portable pentesting setups, and operational workflows optimized for the [ClockworkPi](https://www.clockworkpi.com/) [uConsole](https://www.clockworkpi.com/uconsole) cyberdeck | | 🚷 [Unauthorized Access Investigation Playbook](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks/unauth_access.md) | Playbook for investigating suspected or confirmed unauthorized-access incidents | | 📍 [Wardriving & Wireless Surveying](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Wardriving/README.md) | GNSS-tagged Wi-Fi/BLE inventory, Flipper/ESP32-C5 hardware, mobile and Kismet guides, field procedures, and private log handling | | 🕸️ [Web Application Security](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/WebAppSecurity) | OWASP Top 10 guidance and a complete web-application pentesting methodology covering reconnaissance, Burp Suite, injection, access control, and API testing | ### Subsection Indexes & Focused Entry Points | Parent Area | Subsection / Guide | Coverage | |---|---|---| | AI | [AnythingLLM AgentFlows](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/AI/AnythingLLM/README.md) | Configured security research and analysis flows | | AI | [OpenClaw](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/AI/OpenClaw/README.md) | Self-hosted agent setup on TrueNAS SCALE | | Data Engineering | [Secure Data Pipelines](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Data-Engineering/data_pipelines.md) | Secure transport, parsing, enrichment, streaming, and deployment labs | | Hardware Testing | [Python Diagnostic Suite](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/HardwareTesting/py/README.md) | Automated hardware tests and result reporting | | Incident Response | [Endpoint Visibility](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/Endpoint-Visibility/README.md) | Sysmon, Linux audit/syslog, and Osquery telemetry | | Incident Response | [SIEM](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/SIEM/README.md) | Centralized search and security monitoring guides | | Incident Response | [IDS & IPS](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/IDS%26IPS/readme.md) | Wireless and wired intrusion detection guides | | Incident Response | [Honeypots](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/HoneyPot/readme.md) | Deception-system deployment guides | | Incident Response | [Digital Forensics](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/Digital-Forensics/README.md) | Memory, disk, and live-response references | | Incident Response | [OpenBSD PF Firewall](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/Firewalls/openbsd_pf.md) | Rulesets, network-edge deployment, monitoring, and lab validation | | Reverse Engineering | [Ghidra Master Guide](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/ReverseEngineering/ghidra-guide-index.md) | Five parts and 23 chapters; start with the section index | | Reverse Engineering | [vx-underground](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/ReverseEngineering/vx-underground.md) | Malware samples, source, APT reports, and a lab-only intake workflow | | OPSEC | [Whonix + Kicksecure USB](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/OPSEC/whonix-kicksecure-usb-guide.md) · [Tails USB](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/OPSEC/tails-usb-setup-guide.md) | Distinct host/guest, persistence, installation, and validation workflows | | SDR | [NanoVNA Field Guide](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/SDR/nanovna/README.md) · [HackRF Audit Playbook](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks/HackRFAuditPlayBook.md) | Antenna/RF measurements and spectrum-survey engagement procedures | | Mobile | [UserLAnd](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Mobile/UserLAnd/readme.md) | Linux userspace on Android, with distribution-specific material | | OSINT | [Investigator Playbook](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/OSINT/Playbook/README.md) | Investigation workflow entry point | | Scripts | [Bash Bunny](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/Bash/BashBunny/README.md) | Payload setup for authorized physical-access assessments | | Scripts | [USB Rubber Ducky](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/Ducky/README.md) | DuckyScript compilation and setup | | Scripts | [Shells & Stagers](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/GO/shells/README.md) | Source references for authorized security testing | | uConsole | [Automated Setup Scripts](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/uConsole/scripts/README.md) | CM4/CM5 setup and repair automation | | Wardriving | [Field Workflow](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Wardriving/field-workflow.md) · [Data Handling](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Wardriving/data-handling.md) | Authorization, GPS-quality tests, archived results, WiGLE disclosure decisions | --- ### Maintenance & Historical Reviews | Resource | Purpose | |---|---| | [Audit Findings Register](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/AUDIT_FINDINGS.md) | Historical August assessment and remediation register; read its scope notice | | [Audit Report](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/AUDIT_REPORT.md) | Historical planning proposals, linked to the findings register | These records describe their dated review scope; they do not certify the current repository. --- ## 🆕 UNIQUE & PERSONAL CONTENT Content sourced from PNWC's internal Notion knowledge base and real-world operations - not found in textbooks. ### 🔴 OPSEC & Operations - Personal field rules (*"ALWAYS use a 3rd-party network!"*) - VM isolation and compartmentalization procedures - Anonymity and identity-separation workflows ### 🔍 OSINT Arsenal - 400+ tools organized by category - Automated OSINT VM build scripts - Full investigation methodology (target profiling → pivot → report) ### 📘 Team Playbooks **Purple Team** - [Purple Team - Simple](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks/PurpleTeam_Simple.md) - [Purple Team - Detailed](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks/PurpleTeam_Detailed.md) - [Purple Team - Multi-Script](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks/PurpleTeam_Multi-Scrip.md) **Blue Team** - [Blue Team - Incident Response Simple](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks/BlueTeam_IncResp_Simple.md) - [Blue Team - Incident Response Enhanced](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/PlayBooks/BlueTeam_IncResp_Enhanced.md) **Data Engineering, Detection Pipelines & SIEM** - [Data Engineering Section](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Data-Engineering/README.md) - [Secure Data Pipelines & Security Automation](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Data-Engineering/data_pipelines.md) - [Endpoint Visibility](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/Endpoint-Visibility/README.md) - [ELK Stack (Elastic) SIEM Deployment](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/SIEM/elk_stack.md) - [Wazuh SIEM Deployment](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/SIEM/wazuh.md) - [Splunk SIEM Deployment](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/SIEM/splunk.md) - [Graylog SIEM Deployment](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/SIEM/graylog.md) - [Log Aggregation Guide](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/IncidentResponse/log_agg.md) ### 💻 Custom Scripts & Tools - **[`pnwc_install_tools.sh`](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/pnwc_install_tools.sh)** - Cross-distro Linux tool installer (apt · pacman · dnf) - **[PowerShell](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/PowerShell)** - 12 scripts: AD testing, SMB auth, brute force, port scanning, reverse shells, system enumeration - **[Python](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/Python)** - Scripts for network recon, credential analysis, Bluetooth, web, geolocation, exploitation tools - **[Bash](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/Bash)** - System admin, recon, auditing, log analysis utilities (`Scripts/Bash/`) - **[C](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/C)** - Low-level utilities: user enumeration, port scanning, system manipulation - **[SQL](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/SQL)** - WordPress admin injection testing scripts - **[Go](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide/blob/main/Scripts/GO)** - (`Scripts/GO/`) ### 🎯 Attack Case Studies (10+ Analyzed) | Incident | Type | |---|---| | [Stuxnet](https://en.wikipedia.org/wiki/Stuxnet) | Nation-state cyberweapon - Iranian nuclear facilities | | [WannaCry](https://www.cisa.gov/news-events/alerts/2017/05/12/indicators-associated-wannacry-ransomware) | Global ransomware outbreak | | [EternalBlue / NSA Leak](https://www.microsoft.com/en-us/security/blog/2017/05/12/wannacrypt-ransomware-worm-targets-out-of-date-systems/) | NSA exploit leaked by Shadow Brokers | | [SolarWinds](https://www.cisa.gov/news-events/cybersecurity-advisories/aa20-352a) | Software supply chain compromise | | [Carbanak](https://cloud.google.com/blog/topics/threat-intelligence/behind-the-carbanak-backdoor) | APT banking theft campaign | | [NotPetya](https://www.wired.com/story/notpetya-cyberattack-ukraine-russia-code-crashed-the-world/) | Destructive malware disguised as ransomware | | [Edward Snowden / NSA](https://www.theguardian.com/world/edward-snowden) | Mass surveillance program revelations | | + 3 additional major data breach case studies | Analysis of root cause, TTPs, and defensive lessons | ### 🔧 Hardware Arsenal Documented **Multi-tools:** [Flipper Zero](https://flipper.net/) · [WiFi Pineapple](https://shop.hak5.org/products/wifi-pineapple) · [Proxmark3](https://proxmark.com/) ### 📟 uConsole & Portable Operations Field-side cybersecurity requires reliable, highly-portable hardware. This new section is dedicated to the **ClockworkPi uConsole**. It includes step-by-step documentation on turning the uConsole into a dedicated cyberdeck for mobile operations. - **OS & Toolkit Optimization:** Customizing Kali Linux, Parrot OS, or custom Debian builds for the uConsole's unique form factor. - **SDR & Wireless Assessments:** Configurations for running Wireshark, Kismet, and RTL-SDR in the field. - **Hardware Interfacing:** Using the uConsole for serial connections, hardware debugging, and local network audits. **Hak5 Suite:** [Rubber Ducky](https://shop.hak5.org/products/usb-rubber-ducky) · [Bash Bunny](https://shop.hak5.org/products/bash-bunny) · [LAN Turtle](https://shop.hak5.org/products/lan-turtle) · [Packet Squirrel](https://shop.hak5.org/products/packet-squirrel) · [Shark Jack](https://shop.hak5.org/products/shark-jack) · [O.MG Cable](https://shop.hak5.org/products/omg-cable) **RF / SDR:** [HackRF One](https://greatscottgadgets.com/hackrf/) · [RTL-SDR](https://www.rtl-sdr.com/) · [Ubertooth One](https://greatscottgadgets.com/ubertoothone/) · [YardStick One](https://greatscottgadgets.com/yardstickone/) **WiFi Adapters:** Alfa AWUS036ACH · Alfa AWUS036NHA · TP-Link TL-WN722N --- ## 📊 REPOSITORY STATISTICS Counts below describe the repository snapshot reviewed on **September 11, 2026**; they are inventory counts, not claims that every example has been deployment-tested. | Category | Count / Definition | |---|---| | Top-level content sections | 23; excludes `.github` and `assets` | --- [Read more](https://github.com/pnwcomputers/ultimate-cybersecurity-master-guide)
