The second ones are for Reverse Engineering & Malware Analysis.
CAPEC (Common Attack Pattern Enumeration and Classification) : This one is managed by MITRE, which categorizes the actual mechanisms and design patterns that attackers use to exploit vulnerabilities ("How they do it before what they do").
CWE (Common Weakness Enumeration): A formal Software and hardware weakness types.
SANS Malware Analysis playbook for step by step methodology (Triage -> Behavioral Analysis -> Code Analysis -> Memory Forensics).
@Tetstack
CAPEC (Common Attack Pattern Enumeration and Classification) : This one is managed by MITRE, which categorizes the actual mechanisms and design patterns that attackers use to exploit vulnerabilities ("How they do it before what they do").
CWE (Common Weakness Enumeration): A formal Software and hardware weakness types.
SANS Malware Analysis playbook for step by step methodology (Triage -> Behavioral Analysis -> Code Analysis -> Memory Forensics).
@Tetstack
capec.mitre.org
CAPEC -
Common Attack Pattern Enumeration and Classification (CAPECβ’)
Common Attack Pattern Enumeration and Classification (CAPECβ’)
Common Attack Pattern Enumeration and Classification (CAPEC) is a list of software weaknesses.
β€1π1
Third, OSINT based tools were one is already popular.
The OSINT Framework: A full directory mind-map for each tool and resources available for gathering info on targets, domains, people and infrastructure.
The DIKUW (Data > Information > Knowledge > Wisdom)Model: This is more of a model describing the structure and functional relationship between set of components. (this will help you get rid of junk data you found about a target.)
@Tetstack
The OSINT Framework: A full directory mind-map for each tool and resources available for gathering info on targets, domains, people and infrastructure.
The DIKUW (Data > Information > Knowledge > Wisdom)Model: This is more of a model describing the structure and functional relationship between set of components. (this will help you get rid of junk data you found about a target.)
@Tetstack
β€1
AM I the only one or the fact I still don't have any haters on my channel is concerning.
For the people who saw DON doxxing me some stuff were like from when I was 15 π
π1π1