references
Sources
The map summarizes and connects ideas; the primary sources below are where to go deeper and where to check any claim.
updated on 14/10/2026 · Found an error or an inaccuracy? Let me know on LinkedIn: I will fix it and log it in the changelog.
AppSec
CloudSec
Agents
SecOps
- Cloudflare WAFmanaged rules, custom rules and actions
- Cloudflare Rate limiting rulescharacteristics, periods and mitigation
- Cloudflare Botsbot management, score and challenges
- OWASP Core Rule Setopen WAF ruleset
- OWASP Automated Threatstaxonomy of automated threats
- MITRE ATT&CKadversary tactics and techniques
OWASP Top 10
Vibecoding
- Claude Code: documentaçãoAnthropic's terminal agent: permissions, hooks, skills and MCP
- OpenCodeopen-source, provider-independent agent
- oh-my-pi (OMP)terminal agent derived from Pi, with structured editing, LSP and subagents
- Oh My OpenAgent (OMO)multi-agent orchestration plugin for OpenCode
- herdrterminal multiplexer for multiple coding agents
- AGENTS.mdinstruction convention for coding agents
- Model Context Protocolopen protocol for connecting agents to tools
- git worktreemultiple working directories for the same repository
DevOps
- DORA researchsoftware delivery metrics and capabilities
- Google SRE booksSLOs, error budgets and incident management
- Kubernetes: documentaçãoconcepts, objects and tasks
- Terraform: documentaçãoIaC, remote state and modules
- Docker: boas práticas de buildsmall images, multi-stage and cache
- OpenTelemetrystandardized metrics, traces and logs
- Prometheusmetrics, queries and alerts
Incident response
- NIST SP 800-61: tratamento de incidentesincident response cycle
- MITRE ATT&CKadversary tactics and techniques
- CISA #StopRansomwareransomware prevention and response guides
- SANS DFIRforensics and incident response materials
- Volatility Foundationmemory forensics
- Sigmaopen detection rule format
- YARArules for identifying file families
- STIX e TAXIIintelligence exchange language and protocol
Offensive security
- OWASP Web Security Testing Guidedetailed web security testing guide
- PTESphases of a penetration test
- NIST SP 800-115technical security testing guide
- MITRE ATT&CKadversary tactics and techniques
- OWASP API Security Top 10API-specific risks
- FIRST: CVSStechnical severity scoring
- Atomic Red Teamsmall tests mapped to ATT&CK to validate detection
- BloodHoundattack path mapping in Active Directory
GRC and leadership
- NIST Cybersecurity Framework 2.0functions Govern, Identify, Protect, Detect, Respond and Recover
- ISO/IEC 27001information security management system
- CIS Critical Security Controlsprioritized safeguards
- PCI Security Standards CouncilPCI DSS for cardholder data
- NIST SP 800-207: Zero Trust Architecturezero trust architecture
- ISO 31000risk management
- FAIR Institutequantitative risk analysis