Cyber Knowledge · Study and visual reference library
Original study aids, analyst checklists, lab notes, and concise visual guides created through hands-on security learning. Every resource connects to deeper Cyber Knowledge field guides, course records, research, labs, tools, and source evidence.
Practical references indexed by subject, format, provenance, course relationship, evidence level, and maintenance status.
helping-materials identifies the collection. Format tags such as short-guide, provider and course tags, and domain tags such as malware-analysis keep every resource discoverable without creating a separate page.
Map a Windows Portable Executable from disk to memory and inspect headers, sections, imports, exports, resources, relocations, TLS, mitigations, signatures, debug records, .NET metadata, and loader behavior with AIDebug.
Recover meaning from machine code with practical coverage of registers, memory, flags, ABIs, instruction families, control-flow reconstruction, Windows APIs, AIDebug exercises, and an evidence-led analysis workflow.
A complete, safety-first preparation guide based on TrainSec lessons 2–4: architecture, VM deployment, isolated networking, simulated services, validation, snapshots, troubleshooting, and recovery.
A multidimensional guide to 13 malware categories and capabilities, including viruses, worms, Trojans, loaders, ransomware, wipers, RATs, rootkits, fileless techniques, spyware, keyloggers, adware, botnets, and cryptominers.
A practical guide to extraction, encoding, context, false-positive control, IOC validation, cross-references, and evidence-led interpretation with AIDebug String Intelligence.
Continue from each helping material into deeper learning, provenance, practical validation, and related 1200km resources.
For a report-quality exercise, compare twenty short PCAP investigation stories with the published answers and inspect the original screenshots and evidence. Completion, readability and correct incident interpretation are different measurements.