Cyber Scam Awareness Library
Explore 126 scam and cyber threat patterns, possible warning signs, and practical next steps. Search Arielle’s library by topic without an account or purchase.
Explore resource (opens in a new tab)Find your
next resource.
A clearer way through the information overload. Filter the library by what you need, where you are, and what fits your budget.
Looking for Arielle’s workbooks and tools? Visit the shop43 of 43 resources
The Ctrl+Alt+Elite Cyber Audit
Start with us. A few-minute quiz that maps where you are right now and points you to the next step that actually fits you. There is no wrong place to begin.
Explore resourceGoogle Cybersecurity Certificate
A structured, beginner-friendly on-ramp that introduces Linux, SQL, Python basics, SIEM tools, and incident workflows. Treat it as proof you have done the reps, not as a replacement for an accredited exam.
Explore resource (opens in a new tab)NIST NICE Workforce Framework
The map of who does what in cybersecurity. Skim it when the job titles feel like alphabet soup, and the field starts to make sense as a set of real roles you can aim at.
Explore resource (opens in a new tab)CompTIA Security+ (SY0-701)
The credential that shows up in roughly seven of every ten entry-level postings and satisfies the DoD 8140 baseline. For most career changers aiming to get hired, this is the strongest first certification to target.
Explore resource (opens in a new tab)ISC2 Certified in Cybersecurity (CC)
A foundational certification with no work-experience requirement, and the exam is free through ISC2's One Million Certified in Cybersecurity program. A low-cost way to prove you know the principles. Note the modest annual maintenance fee once you pass.
Explore resource (opens in a new tab)Professor Messer (free YouTube courses)
Full, exam-objective-by-objective video courses for Security+ and more, free on YouTube. When budget is the blocker, this is how thousands of people study, and the quality is genuinely good.
Explore resource (opens in a new tab)TryHackMe
Hands-on labs in your browser with guided rooms, so you learn by doing instead of just watching. The generous free tier is one of the best places to get your hands dirty on day one.
Explore resource (opens in a new tab)picoCTF
Free capture-the-flag challenges from Carnegie Mellon, built to be approachable. A low-stakes, genuinely fun way to find out whether the puzzle-solving side of security clicks for you.
Explore resource (opens in a new tab)Hack The Box
Realistic machines that expect you to think independently and enumerate on your own. Step here once guided rooms start to feel easy and you want to be pushed.
Explore resource (opens in a new tab)PortSwigger Web Security Academy
Free, deep, and made by the team behind Burp Suite. The standard place to actually learn web application security, with labs that build from the basics to genuinely hard.
Explore resource (opens in a new tab)LetsDefend
A simulated security operations center where you work real-feeling alerts. The closest thing to a SOC analyst day-in-the-life before you land the role, with paths that line up to defensive certs.
Explore resource (opens in a new tab)Blue Team Labs Online
Gamified defensive challenges and investigations refreshed regularly. Good for building the detection and incident-response reflexes a blue team role actually leans on.
Explore resource (opens in a new tab)CyberDefenders
Digital forensics and incident response challenges built from realistic data. Where you practice the analysis work that defenders are paid to do well under pressure.
Explore resource (opens in a new tab)NIST Cybersecurity Framework 2.0
The most transferable framework to learn first, and it is free to read cover to cover. Most organizations use it as the umbrella over their other commitments, so knowing it pays off everywhere.
Explore resource (opens in a new tab)CIS Controls v8.1
The practical, prioritized control set that sits underneath the big frameworks. Free to download, and concrete enough that you can see exactly what good security operations look like in practice.
Explore resource (opens in a new tab)ISO/IEC 27001
The international standard for information security management, and increasingly expected outside the US. Understanding how its controls map to audit evidence is core GRC literacy.
Explore resource (opens in a new tab)SOC 2 (AICPA Trust Services Criteria)
The report most cloud vendors live and die by. Read a publicly published SOC 2 Type II report once and the abstract idea of compliance turns into something concrete you can speak to in an interview.
Explore resource (opens in a new tab)ISO/IEC 42001 (AI management systems)
The new must-know as organizations race to meet the EU AI Act and govern their AI use. GRC professionals who understand it early are positioned for the work everyone is suddenly hiring for.
Explore resource (opens in a new tab)CompTIA CySA+ (CS0-003)
The logical step after Security+ for people aiming at analyst and SOC roles. It focuses on detecting, analyzing, and responding to threats with real tools, which is exactly what those jobs ask for.
Explore resource (opens in a new tab)Blue Team Level 1 (BTL1)
A hands-on defensive certification that asks you to actually investigate and respond, not memorize. A strong, practical signal for a first or second SOC role.
Explore resource (opens in a new tab)MITRE ATT&CK
The shared vocabulary defenders use to describe what attackers actually do. Free, deep, and worth learning early, because it shows up in detections, threat reports, and interviews alike.
Explore resource (opens in a new tab)Splunk free training & Search Tutorial
Free courses and a sandbox for one of the SIEM tools you will see most in SOC job descriptions. Getting comfortable querying logs here removes a real barrier on day one of the job.
Explore resource (opens in a new tab)TCM Security Academy (Practical Ethical Hacking)
Affordable, practical training from a team that teaches the way the work is really done. Much of the higher-level material is previewed free on their YouTube channel, so you can try before you buy.
Explore resource (opens in a new tab)eLearnSecurity Junior Penetration Tester (eJPTv2)
A fully hands-on entry credential for offensive work, with no multiple-choice. A friendly, well-respected first step that proves you can do the basics, not just recite them.
Explore resource (opens in a new tab)Practical Network Penetration Tester (PNPT)
A fully practical exam: a simulated corporate network, five days to compromise it, two to write the report, and a live debrief with senior testers. It has become one of the most respected entry-to-mid offensive certs.
Explore resource (opens in a new tab)HTB Certified Penetration Testing Specialist (CPTS)
A practical penetration-testing certification backed by Hack The Box's realistic labs, with a generous timeline. A strong, hands-on alternative path toward professional offensive work.
Explore resource (opens in a new tab)OffSec Certified Professional (OSCP+)
The most widely recognized mid-level offensive certification, earned by compromising machines in a timed exam and writing a professional report. Demanding by design, and still the name most pentest postings ask for.
Explore resource (opens in a new tab)AWS Skill Builder (free security learning)
Free, official learning paths for securing AWS, the platform an enormous share of the internet runs on. A practical way to build cloud security fluency without paying for a course first.
Explore resource (opens in a new tab)Microsoft Security Fundamentals (SC-900)
A foundational, approachable certification covering security, compliance, and identity across Microsoft cloud. A clean entry point if your target employers live in the Azure and Microsoft 365 world.
Explore resource (opens in a new tab)Microsoft Security Operations Analyst (SC-200)
Focused on detecting and responding to threats with Microsoft Defender and Sentinel. A practical certification for SOC-adjacent cloud defense in Microsoft-heavy environments.
Explore resource (opens in a new tab)AWS Certified Security - Specialty
A specialist credential that goes deep on securing AWS, and one of the highest-signal certifications for cloud security pay and roles. Aim here once you have real AWS time behind you.
Explore resource (opens in a new tab)OWASP Top 10 for LLM Applications
The starting map of what goes wrong in apps built on large language models: prompt injection, data leakage, and the rest. Free, current, and the fastest way to get fluent in AI application risk.
Explore resource (opens in a new tab)MITRE ATLAS
The ATT&CK-style knowledge base for attacks against machine-learning systems, with real tactics, techniques, and case studies. Pair it with the OWASP LLM list and you cover both layers of the AI security stack.
Explore resource (opens in a new tab)NIST AI Risk Management Framework
The free framework organizations are leaning on to govern AI risk responsibly. Knowing it bridges the security and GRC sides of AI, which is exactly where a lot of the new work is opening up.
Explore resource (opens in a new tab)Blacks In Cybersecurity (BIC)
A community and conference series built to highlight and elevate Black people in cybersecurity, with meetups and events worldwide. A place to find people who look like you and are doing the work you want to do.
Explore resource (opens in a new tab)Black Girls in Cyber
A nonprofit focused squarely on women of color entering cybersecurity, STEM, and privacy. Built to raise awareness and open doors at exactly the entry point where it matters most.
Explore resource (opens in a new tab)Women in CyberSecurity (WiCyS)
A national nonprofit dedicated to recruiting, retaining, and advancing women in the field, with mentorship, a strong job board, and scholarships. One of the most established communities to grow inside of.
Explore resource (opens in a new tab)Cyversity
A nonprofit working to bring consistent representation of women, underrepresented communities, and veterans into cybersecurity through scholarships, mentoring, and workforce programs.
Explore resource (opens in a new tab)Women's Society of Cyberjutsu (WSC)
A 501(c)(3) focused on advancing women in cybersecurity through training, networking, mentorship, and a job board. Local chapters mean the support can be in-person, not just online.
Explore resource (opens in a new tab)ISC2 Women's Cybersecurity Scholarships
Annual scholarships from the Center for Cyber Safety and Education to help women start or advance a cybersecurity career, including named awards. Check the current cycle's deadline before you apply.
Explore resource (opens in a new tab)WiCyS Scholarship Opportunities
A multi-stage program offering financial help toward tuition, certifications, and conference attendance for women in cybersecurity. A practical way to lower the cost of the credentials on this page.
Explore resource (opens in a new tab)SANS / SANS.edu external scholarships
Scholarship and diversity programs that can cover SANS course fees and certification exams, some aimed specifically at women entering the field. The awards are competitive but life-changing when they land.
Explore resource (opens in a new tab)