CYBER LIBRARY
Explore the bootcamp
AN OPEN DOOR INTO CYBERSECURITY THE METANA KNOWLEDGE PROJECT
STAY CURIOUS. CONNECT THE DOTS.

Security makes sense
when it’s connected.

500 ideas. One connected library. Explore practical cybersecurity notes, follow the evidence, and build an understanding that stays with you.

500 connected concepts7 topic collectionsAlways free to read
A LITTLE OF THE BIGGER PICTURE LIVE GRAPH
100%
Knowledge, connected.One concept per note. Follow the links.
Drag to pan · Pinch or use +/− to zoom · Click to preview · Double-click to read
Every connection leads somewhere.
New here? There’s no wrong place to start.

Follow a learning path, or let a question take you somewhere unexpected.

Find your path
THE COLLECTIONS

A whole field.
A few doors in.

From your first security principle to the way
real teams investigate, protect, and recover.

SMALL IDEAS, BIG FOUNDATIONS

A good place to begin.

All concepts
A LITTLE DIRECTION

Learning is a journey.
Pick a starting point.

All learning paths

Not a course to complete.
A place to keep coming back to.

Meet the library
Start with a concept. Follow its connections.
Detection & responseAbuse Elevation Control MechanismElevation-control abuse bypasses or misuses mechanisms governing privileged execution.Making change happenAcceptance criteriaDefine observable conditions for a deliverable to be accepted.Security essentialsAccess controlUnderstand subjects, resources, permissions, and enforcement through a shared-drive example, including how access changes over time.Detection & responseAccess Token ManipulationAccess token manipulation changes or adopts operating-system security contexts.Risk & resilienceAccount Access RemovalAccount access removal disrupts legitimate users by changing, deleting, or restricting their identities.Evidence & investigationAccount DiscoveryAccount discovery enumerates identities available in a system or environment.Detection & responseAccount ManipulationAccount manipulation changes identity settings to preserve or expand access.Adversarial thinkingAcquire InfrastructureInfrastructure acquisition obtains domains, servers, or other resources used to support operations.Adversarial thinkingActive ScanningActive scanning probes target infrastructure to learn reachable services or weaknesses.Security essentialsAdversary in the middleAn intermediary may observe or alter a communication path.Security essentialsAESA symmetric block cipher whose safe use depends on its mode and implementation.Making change happenAgile deliveryUse short feedback cycles to adapt toward a useful outcome.