I#
Index#
The operator’s pointer list for industrial-control and SCADA work. OT networks are unforgiving (legacy protocols, no patch windows, safety consequences for failed exploits) so the bias is toward passive collection,…
Reference of industrial control systems: protocols, vendors, PLC families, the Purdue model, and the standards governing operational-technology security. ICS / SCADA gear runs power plants, refineries, water…
Reference of identity, authentication, and federation providers; the protocols they speak; and the directory products + token formats an operator deals with in IAM work. Useful for SSO design, breach response, and…
Imagery intelligence. Information derived from the exploitation of imagery: optical, infrared, radar (SAR), multispectral, hyperspectral, full-motion video. The imagery half of GEOINT.
Impacket is a Python class library for working with network protocols. It provides low-level programmatic access to packets, and for SMB1-3 and MSRPC it includes the protocol implementation itself. The operator runs…
Reference of incident response frameworks, the standard phase-models, retainer / firm landscape, common playbooks, and the regulatory disclosure regimes the operator runs into during major incidents.
Reference catalog of the indicator types that show up in CTI feeds, detections, hunts, and incident-response notes. Each row gives the indicator, what it identifies, a regex pattern an operator can use to extract it…
Reference of national civilian, military, and signals intelligence services. Names, primary mission, and notable public attribution. Capabilities listed are public-record or derived from declassified material;…
Reference of the formal intelligence disciplines (the “-INTs”), how they fit together, and the operator-level collection methods each spans.
Reference of the global internet’s foundational pieces, DNS roots, address allocations (RIRs), exchange points (IXPs), and root certificate authorities. The actors here are the small set that make routing, naming,…
iOS artifacts, jailbreaks, and app-testing tools. Forensic recovery runs against the artifact locations; offensive testing wraps the jailbreak chain plus a stable of app-pentest toolkits.
Reference of the messaging, transport, and link-layer protocols used in IoT and IIoT deployments. Useful when mapping smart-home, building-automation, industrial-edge, and remote-sensor networks. Covers transport…
iptables is the user-space utility for the Linux kernel firewall. The operator uses it both to lock down their own attack platform and to inspect rules already in place on a target.
Reference tables the operator needs at hand for subnet math during network reconnaissance, segmentation analysis, and exfil planning.
Reference data for IPv6 ranges, broadcast addresses, and prefix allocations. Useful when the operator pivots into IPv6-enabled segments or carves up subnets for tooling.
Global directories of Internet Exchange Points (IXPs). The operator consults these for infrastructure target development, peering-graph analysis, and routing-path reasoning. An IXP entry is where the operator finds…