# List of useful tools and guides ## Guidance ### FIRST Best Practice Guide Library (BPGL) - Link: https://www.first.org/resources/guides/ ### NSA Cybersecurity Advisories & Guidance - Link: https://www.nsa.gov/Press-Room/Cybersecurity-Advisories-Guidance/ ### Australian Cyber Security Center Publications - Link: https://www.cyber.gov.au/acsc/view-all-content/publications ### The Practical Linux Hardening Guide - Git repo: https://git.csec.ba/CSEC_PUBLIC/the-practical-linux-hardening-guide ### How To Secure A Linux Server - Git repo: https://git.csec.ba/CSEC_PUBLIC/How-To-Secure-A-Linux-Server ### RHEL Server/Workstation Hardening Guide - Link: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html-single/security_guide/index ### CentOS 7 Server Hardening Guide - Link: https://www.lisenet.com/2017/centos-7-server-hardening-guide/ ### SUSE Linux Enterprise Server - Best practices Link: https://documentation.suse.com/sles/12-SP4/#redirectmsg ### Microsoft - Windows security baselines - Link: https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines ### Windows Server Security documentation Link: https://learn.microsoft.com/en-us/windows-server/security/security-and-assurance ### Hardening Microsoft Windows 10, version 21H1, Workstations - Link: https://www.cyber.gov.au/acsc/view-all-content/publications/hardening-microsoft-windows-10-version-21h1-workstations ### Awesome Windows Domain Hardening - Link: https://github.com/PaulSec/awesome-windows-domain-hardening ### Best Practices for Securing Active Directory - Link: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/best-practices-for-securing-active-directory ### NSA - Harden Network Devices - Link: https://media.defense.gov/2020/Aug/18/2002479461/-1/-1/0/HARDENING_NETWORK_DEVICES.PDF ### NSA - A Guide to Border Gateway Protocol (BGP) Best Practices - Link: https://www.nsa.gov/portals/75/documents/what-we-do/cybersecurity/professional-resources/ctr-guide-to-border-gateway-protocol-best-practices.pdf?v=1 ### Guidelines on Firewalls and Firewall Policy - Link: https://www.nist.gov/publications/guidelines-firewalls-and-firewall-policy ### Iptables Essentials: Common Firewall Rules and Commands - Git repo: https://git.csec.ba/CSEC_PUBLIC/iptables-essentials ### SQL Server Hardening Best Practices - Link: https://www.netwrix.com/sql_server_security_best_practices.html ### Apache HTTP Server documentation - Security Tips - Git repo: https://git.csec.ba/CSEC_PUBLIC/awesome-security-hardening#user-content-apache-http-server ### Apache Tomcat 9 Security Considerations - Link: https://tomcat.apache.org/tomcat-9.0-doc/security-howto.html ## Tools - [More...](./README.md) ## Chetasheet - [More...](./Cheatsheets.md)