Cybersecurity

This page provides a central hub for all cybersecurity-related topics in the Irregularpedia.

Getting Started

CISA Resources: Free cybersecurity tools and services from the Cybersecurity and Infrastructure Security Agency.
Cybersecurity University Courses: A list of university courses focused on cybersecurity.

Threats Catalog: How adversaries actually attack people — phishing, account takeover, malware, MitM, and more. Each page documents TTPs, indicators, prevention, and response. Recent: Signal/CMA Takeover by Russian Intelligence Services (FBI/CISA, March 2026).

OPSEC Framework: The formal five-step OPSEC process and indicator thinking, across red, blue, and personal contexts.
Threat Modeling: Find design weaknesses before attackers do — STRIDE, DREAD, PASTA, attack trees, and tooling.
Blue Team Tools: The defender’s loadout — detection engineering, threat hunting, deception tech, and purple teaming.
Enterprise Incident Response: Org-scale IR — NIST lifecycle, playbooks, SOC integration, retainers, legal/PR.
Digital Forensics: Disk imaging, timeline analysis, memory forensics, chain of custody, and admissible evidence.
Malware Analysis: Static triage (YARA, FLARE), dynamic/sandbox analysis, unpacking, and anti-analysis evasion.
Tracking CVEs and Vulnerabilities: NVD vs vendor advisories, CISA KEV, EPSS, and prioritizing what to patch first.
Cyber Incident Response Guide (Personal): A guide to help you react to potential cyber incidents on personal devices, accounts, and networks.
Mobile Hardening Guide: How to secure your mobile devices.
Medical Device Security: Security considerations for Bluetooth medical implants.

Cybersecurity Tools: Server-side deployment guides for specific security tooling — censorship-circumvention proxies, hardening utilities. Different from user-facing “pick a VPN” guides.
VLESS / Xray Deployment: TLS-mimicry circumvention proxy for environments with active state-level censorship.

Cyber Red Teaming: Discussion and resources for red teaming.
Red Team Tradecraft: Adversary emulation vs pentesting, C2 frameworks, infra OPSEC, ATT&CK mapping, ROE, and the purple-team handoff.
OSCP (Offensive Security Certified Professional): Resources and information for the OSCP certification.
GPEN (GIAC Penetration Tester): Resources and information for the GPEN certification.
Physical Security: A guide to physical security testing.
Physical Security Guide: Access control weaknesses, tailgating, badge cloning, camera blind spots, and visitor management.