CyberPatriot · Resources

CyberPatriot Resource Library

A curated reference library for competition preparation, defensive research, platform documentation, investigation tools, practice, and team operations.

This section is designed to teach students how to find reliable information, understand what it means, and apply it carefully. It is not a live-round answer bank.

Library Snapshot

Resource guides12
Source priorityOfficial first
UseResearch + Practice
BoundaryNo live answers

Resource model

Build a library that answers different kinds of questions

Competition

CyberPatriot rules, schedule, training, technical requirements, and official challenge guidance.

Platforms

Windows 11, Windows Server, Linux, Cisco, and the utilities used to inspect them.

Investigation

Wireshark, forensics, logs, evidence, timelines, and behavior-oriented references.

Professional

NIST, CISA, and other defensive frameworks that explain why secure practices matter.

Practice

Safe labs and repeatable exercises that turn reading into operational skill.

Team

Templates and offline materials that support communication, evidence, verification, and handoffs.

Source discipline

Six rules for using technical references well

01

Official first

Start with CyberPatriot, Microsoft, Canonical, Linux Mint, Cisco, NIST, CISA, MITRE, Wireshark, or another authoritative project source when available.

02

Free and accessible

Prefer references the whole team can access without a paid subscription or private membership requirement.

03

Current

Check version, product, and publication context. A correct command for an older release may not describe the current platform.

04

Mission aware

A hardening recommendation is not automatically safe for every scenario. Required users, services, access paths, and applications still matter.

05

Evidence before action

Use references to understand what you observe and what a change will do, not as a substitute for inspecting the actual system.

06

Verify after use

After applying a documented change, verify both the security result and the required function.

12-resource pathway

From official competition guidance to the team's own reference pack

All 12 resource guides are available. Open any card to use its references, defensive notes, and competition-preparation guidance.

Resource 01Reference

CyberPatriot Official Resources

Focus

Competition schedule, current training materials, rules, technical specifications, challenge information, and official round guidance.

Outcome

Know which CyberPatriot sources should be checked first before relying on any secondary reference.

Open resource →
Resource 02Reference

Windows 11 & Microsoft Learn

Focus

Official Windows security documentation covering identity, Defender, Firewall, operating-system protections, auditing, and administration.

Outcome

Use Microsoft documentation to verify what a Windows security control actually does before changing it.

Open resource →
Resource 03Reference

Windows Server & Active Directory

Focus

Windows Server security, roles, Active Directory, Group Policy, secure administration, SMB, service accounts, and auditing references.

Outcome

Research Server and AD behavior without treating a workstation hardening guide as a server playbook.

Open resource →
Resource 04Reference

Linux: Ubuntu & Mint

Focus

Official Ubuntu security guidance, Linux Mint documentation, users, permissions, services, packages, SSH, firewalling, logs, and troubleshooting.

Outcome

Build Linux decisions from distribution documentation and system evidence instead of copied commands with no context.

Open resource →
Resource 05Reference

Cisco & Networking

Focus

Cisco training, Packet Tracer, switching, routing, VLANs, ACLs, device management, addressing, and network troubleshooting references.

Outcome

Connect networking concepts to the exact configuration and verification tasks used in practice environments.

Open resource →
Resource 06Reference

Sysinternals & Windows Utilities

Focus

Microsoft Sysinternals and built-in Windows tools for processes, services, autoruns, networking, event evidence, and system inspection.

Outcome

Choose observation tools based on the question being investigated rather than opening utilities at random.

Open resource →
Resource 07Reference

Linux Commands & Manual Pages

Focus

Command references for identity, permissions, processes, services, networking, packages, files, logs, cron, systemd, and shell help.

Outcome

Use built-in help and manual pages to confirm syntax, scope, and side effects before running unfamiliar commands.

Open resource →
Resource 08Reference

Wireshark & Packet Analysis

Focus

Official Wireshark documentation, display filters, packet structure, protocol analysis, capture concepts, and evidence-oriented network troubleshooting.

Outcome

Use packet analysis to answer specific network questions instead of collecting traffic without an investigation goal.

Open resource →
Resource 09Reference

Forensics & Evidence References

Focus

Evidence preservation, hashes, metadata, logs, timelines, process context, file-system artifacts, and behavior-oriented investigation references.

Outcome

Preserve and correlate evidence before remediation changes the state you are trying to understand.

Open resource →
Resource 10Reference

NIST, CISA & Security Standards

Focus

Trusted defensive references for risk, cybersecurity frameworks, secure configuration thinking, incident response, and security best practices.

Outcome

Understand the professional principles behind the technical actions used during training.

Open resource →
Resource 11Reference

Practice & Lab Resources

Focus

Safe practice environments, official training material, virtual-machine preparation, Packet Tracer practice, and structured lab planning.

Outcome

Turn references into repeated hands-on practice without using live-round answers or unauthorized material.

Open resource →
Resource 12Reference

Team Templates & Offline Reference Pack

Focus

Change logs, evidence notes, priority boards, handoff templates, competition-day worksheets, and a compact offline reference library.

Outcome

Prepare reusable team materials before competition day so documentation and coordination do not start from scratch.

Open resource →

Competition boundary

Recheck the current rules before every scored round

Resource rules, available platforms, competition timing, and challenge details can change between seasons. Use the current CyberPatriot rules and competition guidance as the authority for what is permitted during a round.