OPSEC del analista — manual completo
OPSEC del analista — manual completo
Panorama
Cobertura COMPLETA de OPSEC operacional para el analista CTI/CTH/OSINT. 19 notas en opsec/: master indice manual-paranoid-opsec + 15 sub-notas atomicas (fundamentos, identity compartmentalization, device/endpoint, browser fingerprinting, network/transport, COMSEC, data handling, social/behavioral, travel/physical, source protection, advanced topics, monitoring/audits, tools/utilities, checklists, templates) + privacy-encryption-tools + privacy-search-engines + vpn-services. Lectura obligada antes de operar.
Hallazgos entre fuentes
OPSEC moderno es multidimensional: tecnico (browser fingerprinting, network OPSEC, COMSEC), operacional (sock puppets, identity compartmentalization), conductual (no patrones reconocibles, no leakage social), y fisico (travel security). Un fallo en una dimension compromete las demas. Casos famosos: deanonimizacion de Ross Ulbricht (Silk Road) por error de username reuse + browser fingerprint + comportamiento social.
Consideraciones metodologicas
OPSEC es proceso continuo, no proyecto unico. Capitulo 14 del manual (Monitoring, Audits & Incident Response) define el ciclo: define posture -> implementa -> audita semanalmente -> incidents -> ajusta. NO se puede "hacer OPSEC y olvidarse" — fingerprints cambian, browsers actualizan, leaks pasan.
Vacios y preguntas abiertas
Faltan: OPSEC para AI tools (queries a LLMs comerciales registran tu pensamiento), OPSEC para colaboracion remota (Slack, Discord, Notion), y OPSEC para mobile-first investigators (Android forensic resistance).
Notas en este tema (28)
- ceh-09-social-engineering
- ceh-12-evading-ids-firewall
- cisa-red-team-assessment-critical-infra
- guia-opsec-carrefour
- ingenieria-social-compromiso-credenciales
- manual-paranoid-opsec
- opsec-advanced-topics
- opsec-browser-fingerprinting
- opsec-checklists
- opsec-comsec
- opsec-data-handling-chain-of-custody
- opsec-device-endpoint-security
- opsec-fundamentos
- opsec-identity-compartmentalization
- opsec-monitoring-audits
- opsec-network-transport-security
- opsec-social-behavioral
- opsec-source-protection-humint
- opsec-templates-automation
- opsec-tools-utilities
- opsec-travel-physical-security
- plan-ejercicio-vishing
- privacy-encryption-tools
- privacy-search-engines
- rayhunter-cellular-spying-detection
- sistema-anonimizacion-texto
- vpn-services
- waffled-bypass-castellano