20. Content Verification

AI Detection — checklist operativa

AI Media Forensics — manual

Compliance Analysis Report 2 (ejemplo)

Compliance Documentation Report 1 (ejemplo)

7 Malware Threats

10 Steps to Building a Comprehensive CTI Practice

10. Report Templates

Analisis del ataque de ingenieria social a Marks & Spencer - Scattered Spider y DragonForce

Analyzing TI feeds for overlap, novelty and aging

APT28 (Fancy Bear / Sofacy / Pawn Storm / Strontium)

Basic & Musts - Cyber Threat Intelligence for Beginners

BushidoUK RFI Template

Campaign SolarWinds / SUNBURST / NOBELIUM (2020)

CERT-SG IRM-01: Worm Infection

CERT-SG IRM-02: Windows Intrusion

CERT-SG IRM-03: Unix Linux Intrusion

CERT-SG IRM-04: Ddos

CERT-SG IRM-05: Malicious Network Behaviour

CERT-SG IRM-06: Website Defacement

CERT-SG IRM-07: Windows Malware

CERT-SG IRM-08: Blackmail

CERT-SG IRM-09: Smartphone Malware

CERT-SG IRM-10: Social Engineering

CERT-SG IRM-11: Information Leakage

CERT-SG IRM-12: Insider Abuse

CERT-SG IRM-13: Customer Phishing

CERT-SG IRM-14: Scam

CERT-SG IRM-15: Trademark Infringement

CERT-SG IRM-16: Phishing

CERT-SG IRM-17: Ransomware

CERT-SG IRM-18: Large Scale Compromise

Combining Cybersecurity Frameworks - An Alternative to Incident Reporting

CTI - Offensive Security GitHub Tools

CTI Reconciliaton

CTI Report 1 (ejemplo)

CTI Report 2 (ejemplo)

Curated Intelligence Threat Actor Profile Template

Cyber Intelligence Toolkit — overview

Cyber Security Playbooks

Data Breach Search Engines

De la Inteligencia a la Detección — TTPs, Threat Hunting y Playbooks

Del hack al hashtag. Interferencia y desinformación en las presidenciales francesas de 2017

Detection and Mitigation of Common Attacks

Diamond Model of Intrusion Analysis

El Nuevo Paradigma de la Ciberguerra - Convergencia Geopolítica y Aceleración por IA en Ataques a Infraestructuras Críticas

Embracing Automation in Cyber Threat Intelligence, The Key to Timely Protection

EMS con STRIDE y MITRE ATT&CK

Emulación de Adversarios y Operaciones Red Team

FIRST.org (Forum of Incident Response and Security Teams)

IDIR Intelligence Reports Templates

Inteligencia de Brechas y Monitorización Darknet

Kraven Security CTI Templates

Lenny Zeltser CTI Report Template

Live Cyber Threat Maps

Lockheed Martin Cyber Kill Chain (CKC)

Metodologia de scoring de riesgo digital VIP - modelo tipo CVSS

MISP (Malware Information Sharing Platform)

MITRE ATT&CK Framework

MITRE ATT&CK Navigator

MITRE Corporation

MITRE CTI Blueprints

OpenCTI

Pastebins

Red Team VS Blue Team

Resumen Semanal de Ciberseguridad - Noticias, Tecnicas y Herramientas

Sandworm Team (Voodoo Bear / GRU Unit 74455)

STIX 2.1 + TAXII 2.1

Strengthening Proactive CTI Through Collaboration

The Cybersecurity Journey - Pathways to Becoming a Top-Tier SOC Analyst

The Next Evolution of Recorded Future AI - Powering the Future of Threat Intelligence

TheHive

Theory VS Experience - A CTI Approach

Threat Actor Search

Threat Data Feeds and Threat Intelligence Are Not the Same Thing

Threat Intelligence

ThreatModeling-LLM, Automating Threat Modeling using Large Language Models for Banking System

Unified Kill Chain (UKC)

Use Case 1 - Intelligence Platform Alerts

Use case 2 - Cyber Threat Intelligence Feeds

Use case 3 - Vulnerability Intelligence

Use case 4 - Infostealer monitoring

Use Case 5 - Daily CTI Report

Use Case 6 - Phishing Intelligence

Use Case 7 - Threat Hunting

Use Case 8 - Strategic Intelligence Report

Use Case 9 - Most Common Mitre ATT&CK Methods - eCommerce-Retail

Use Case 10 - Threat Intelligence Sharing

What Is Threat Intelligence

What is Threat Intelligence - A RF Guide

00 Certified Ethical Hacker - Start Here

01 Introduction to Ethical Hacking

1. Fundamentals

2 Huellas Digitales y Reconocimiento

2. 4-Step Methodology

11. Legal Considerations

28. Professional Methodologies

30. Learning Resources

Admiralty System (NATO 6×6)

Analysis of Competing Hypotheses (ACH)

Ciclo de Inteligencia

CTI-Osint Cheatsheet

Devil's Advocacy

Doctrina minima viable — Admiralty, WEP, TLP, ACH, ICD-203

EC Council CTIA

Formula combinatoria para convergencia de identidades OSINT

Fuentes A1 — vendors gold standard CTI/OSINT

Glosario CTI / CTH — terminologia esencial

Guia de escritura de inteligencia - proposito, retencion y estructura

ICD-203 (Intelligence Community Directive 203)

Indicators / Signposts of Change

Key Assumptions Check

Manual de recursos CTI / CTH para juniors — Juniors + Fer + vault

Mom-Pop-Moses-Eve (Heuristica de Hipotesis)

Multiple Hypothesis Generation

ODNI (Office of the Director of National Intelligence)

Operational Playbook – Unidad de Inteligencia (UINT) – OTAN

OSINT Analysis Intelligence Report Writing

OSINT Mastery — Quick Start + Documentation/Learning + Future Development

PHIA Probability Yardstick (UK)

Plan de Acción Operativo para Organizar el Trabajo de la Unidad de Inteligencia (UINT) – OTAN

Programa Académico - Analista Inteligencia

Psychology of Intelligence Analysis (Heuer 1999)

Quality of Information Check

Randolph Pherson

Richards J. Heuer Jr. (1927-2018)

Roadmap 90 dias para junior CTI/CTH

Robert M. Clark

Sesgos cognitivos del analista de inteligencia

Sherman Kent (1903-1986)

Traffic Light Protocol v2.0 (TLP)

Words of Estimative Probability (WEP)

17. Blockchain/Crypto

Blockchain Investigation Report 1 (ejemplo)

Blockchain Investigation Report 2 (ejemplo)

14. Facial Recognition

GEOINT Report 1 (ejemplo)

GEOINT Report 2 (ejemplo)

Geospatial Research and Mapping Tools

Image Analysis

Image Search

Maritime

Video Search and Other Video Tools

Visual Search and Clustering Search Engines

09 Ingeniería Social

12 Evading IDS, Firewall and Honeypots

Guia OPSEC y buenas practicas de seguridad operativa - Carrefour

Ingeniería Social y Compromiso de Credenciales

Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

Meet Rayhunter A New Open Source Tool from EFF to Detect Cellular Spying

OPSEC — Advanced topics

OPSEC — Browser, fingerprinting & content OPSEC

OPSEC — Checklists operativas

OPSEC — COMSEC (Communications Security)

OPSEC — Data handling, evidence & chain of custody

OPSEC — Fundamentos (Overview, Scope, Threat Modeling, Principles)

OPSEC — Identidad y compartimentacion de personas (sock puppets)

OPSEC — Monitoring, audits & incident response

OPSEC — Network & transport security

OPSEC — Seguridad de dispositivos y endpoints

OPSEC — Social & behavioral OPSEC

OPSEC — Source protection & HUMINT interactions

OPSEC — Templates & automation snippets

OPSEC — Tools & utilities reference

OPSEC — Travel & physical security

Paranoid OPSEC — Manual maestro (indice)

PLAN DE EJERCICIO DE VISHING

Privacy and Encryption Tools

Privacy Focused Search Engines

Sistema de Anonimización de Texto - Solución Completa

VPN Services

WAFFLED TL;DR (castellano)

Gaming Platforms

Music Streaming Services

OSINT Blogs

OSINT Mastery Guide — Master Index (Jamba Academy)

OSINT References Master — Indice unificado (awesome-osint + osint-bible)

OSINT Videos

OSINT360 — Cyber Intelligence GPT

Other Resources

Related Awesome Lists

3. Tools Mind Map

4. Internet Search

8. Deep & Dark Web

9. Automation (Python)

12. Extra Resources

13. AI Intelligence

26. All-in-One Frameworks

27. Advanced Maltego

Academic Resources and Grey Literature

AI Search Engines — listado para OSINT

Code Search

Dark Web Search Engines

Data and Statistics

Document and Slides Search

Fact Checking

File Search

General Search

Google Dorks Tools

Infographics and Data Visualization

Installing PrivateGPT on WSL with GPU support

Keywords Discovery and Research

Lampyre. La Herramienta OSINT que Revoluciona las Investigaciones Digitales

Language Tools

Las diferencias entre los niveles de la web y su acceso a la información.

Main National Search Engines

Meta Search

News

News Digest and Discovery Tools

OSINT Mastery — Tool Categories + AI-Powered + Stats

OSINT Tools — Tabla maestra

Other Tools

QueryTool — Google Sheet OSINT framework

Similar Sites Search

Speciality Search Engines

Spiderfoot Correlations

Turn Every ChatGPT-4o Chat Into A Persistent Tier 5 (Universal) Jailbreak By Pasting The Following

Web Monitoring

Company Investigation Report (ejemplo)

Company Research

Email Search / Email Check

Expert Search

Individual Investigation Report (ejemplo)

Job Search Resources

People Investigations

Phone Number Research

Q&A Sites

Vehicle / Automobile Research

Blog Search

Communication Patterns Analysis Report 1 (ejemplo)

Communication Patterns Analysis Report 2 (ejemplo)

Forums and Discussion Boards Search

Major Social Networks

Real-Time Search, Social Media Search, and General Social Media Tools

Social Media Tools

Social Network Analysis

Username Check

01-osint

02-setup_ics_lab

3 Escaneo de Redes

03-pentest_platform_overview

04 Enumeracion

04-practical_1

5 Análisis de Vulnerabilidades

05-practical_2

06 Hacking de Sistemas, Escalada de Privilegios y Persistencia

06-real_hardware

07-gas_station_controller

08 Sniffing

08-modbus_plc_sim

09-pentesting_real_modicon_hardware

10 Denegación de Servicio

10-pentesting_an_infrastructure_substation

11 Session Hijacking

13 Hacking Web Servers

14 Hacking Web Applications

15 SQL Injections

16 Wireless Networks

17 Hacking Mobile Platforms

18 IoT Hacking

18. Transport OSINT

19 Cloud Computing

19. WiFi/Wardriving

20 Cryptography

22. Web Scraping

23. Metadata Extraction

24. Network Scanning

Aircrack ng

Análisis de Código Dinámico o Estático

Análisis de Ejecutables Binarios

ANDROID

Application Security in the Software Lifecycle - Study Guide

BGP Seekers

Browsers

Categorías Especiales de Componentes o Vulnerabilidades Escaneo

Consultas Personalizadas en BloodHound para Active Directory

Detección de múltiples tipos de Cross-site scripting

DNS

Docker-Analysis

Domain and IP Research

Domain and Website Analysis Report (ejemplo)

Estudio - Enumeracion y Vulnerabilidades de Autenticacion

Evaluación de vulnerabilidades para Middleware

Fuerza Bruta de Autorización o Escaneo de Vulnerabilidades para IoT

ICS Pentest Course Notes_DNU

ITCA - Windows and Linux OS Firewalls

LLM Pentesting

Network Reconnaissance Report (ejemplo)

Network Security Study Guide

Offline Browsing

Pentest Inalámbrico

Plan de pruebas de pentesting ICS - requerimientos y cuestionario cliente

Red Team Security Analysis and Threat Modeling – Siemens Spectrum Power

SCADA - acronimos y comunicaciones industriales

SCADA - analisis de debilidades

SCADA - Siemens Spectrum Power

Scanning Ports and Utilizing SSH

Seguridad ICS-SCADA — Superficie de Ataque en Infraestructuras Críticas

Smart Contract Pentesting

Web History and Website Capture

Asset Investigation Report — plantilla

Breach Analysis Report — plantilla

Communication Patterns Analysis Report — plantilla

Domain & Website Analysis Report — plantilla

Domains and IP Addresses Investigation Template

Individual Investigation Report — plantilla

Informe Técnico para el Equipo del SOC (Tecnico) - Amenaza de Hacktivismo por Killnet

Modelo de Reporting - Amenaza de Hacktivismo contra Agencia

Network Reconnaissance Report — plantilla

PERSONAL INFORMATION Target File

Plantilla de informe de pentesting web - XSS y SQL Injection

Plantilla Informe CTI - OSINT DATA LEAK

Plantillas de prompts para reportes CTI, vulnerabilidades y newsletters

Resumen de Inteligencia - Amenazas al Sector Retail y ECommerce-Plantilla

Target File

Threat Intelligence Report — plantilla