CYBER LIBRARY
Explore the bootcamp
THE METANA KNOWLEDGE PROJECT

An open door.
A growing body of knowledge.

Cybersecurity is easier to understand when ideas connect. This library gives everyone a place to start—and somewhere to go next.

For curious people at every starting point

We write for beginners, intermediate learners, and people moving into security from another career. Notes explain one concept at a time, with practical examples, common misunderstandings, and questions to test your understanding.

A library, with its own map

The collections are organized around ideas and their relationships. Learning paths offer optional routes. The tree, backlinks, and graph let you explore in your own order. This is an independent reference library, rather than a copy of bootcamp modules or assessment materials.

How we approach the content

Metana publishes original explanatory notes and links to primary documentation for deeper reading. Notes are drafted with AI assistance and checked against linked primary sources; they have not yet received a complete instructor review. Dates show editorial updates, not the publication date of the underlying standard. Short quotations are attributed to their original sources. Examples are illustrative; practice offensive techniques only with appropriate authorization in controlled environments. The first edition is a broad concept reference, not a replacement for tool manuals or instructor-led practice.

We distinguish confirmed evidence from inference, current standards from historical examples, and learning from certification. Feedback and corrections can be shared through Metana’s official contact channels.

Free to read, without a gate

Every published note is freely accessible without signing up. Reading lists and read markers live only in your browser. This site does not have a contact form, account system, or advertising tracker. The source repository is private initially. Free access does not grant an unrestricted reuse license; third-party references retain their own terms.

When you want to practice

The library will remain free. If you want structured learning, guided labs, and instructor support, you can explore the Metana Cyber Security Bootcamp or try the Nightshift investigation experience.

Explore the library →
Start with a concept. Follow its connections.
Detection & responseAbuse Elevation Control MechanismElevation-control abuse bypasses or misuses mechanisms governing privileged execution.Making change happenAcceptance criteriaDefine observable conditions for a deliverable to be accepted.Security essentialsAccess controlUnderstand subjects, resources, permissions, and enforcement through a shared-drive example, including how access changes over time.Detection & responseAccess Token ManipulationAccess token manipulation changes or adopts operating-system security contexts.Risk & resilienceAccount Access RemovalAccount access removal disrupts legitimate users by changing, deleting, or restricting their identities.Evidence & investigationAccount DiscoveryAccount discovery enumerates identities available in a system or environment.Detection & responseAccount ManipulationAccount manipulation changes identity settings to preserve or expand access.Adversarial thinkingAcquire InfrastructureInfrastructure acquisition obtains domains, servers, or other resources used to support operations.Adversarial thinkingActive ScanningActive scanning probes target infrastructure to learn reachable services or weaknesses.Security essentialsAdversary in the middleAn intermediary may observe or alter a communication path.Security essentialsAESA symmetric block cipher whose safe use depends on its mode and implementation.Making change happenAgile deliveryUse short feedback cycles to adapt toward a useful outcome.