The Concise Blue Team Cheat Sheets - Networking and Incident Response Tools - Quick Reference

Oct 13, 2026

Upload by Ophelia

Concise blue team cheat sheets compiling practical reference materials for networking security and incident response. The contents cover common ports and IPv4/IPv6 concepts, OSI and protocol basics, HTTP/FTP and encoding conversions, and key defensive frameworks. It also lists hands-on tooling and workflows including tcpdump/Wireshark/Nmap, packet filtering, scripting quick references, Snort/rwfilter/Scapy/Bro, plus Windows and Linux command and hardening resources. Incident response sections provide guidance mapped by common scenarios and include incident documentation forms.

LanguageEnglish

CategoryGeneral

FormatPDF

Pages151

Reading Time53 min

AccessFree to download

Networking / Blue Team Tools

Common Ports

IPv4/TCP-UDP-ICMP Headers, Subnetting

IPv6/TCP Header

OSI Model

HTTP / FTP and Decimal to Hex Conversion

20 Critical Security Controls

Cisco Networking All in One Reference

ARGUS/TCPDUMP/TSHARK/NGREP

Tcpdump

Berkeley Packet Filters and Bit Masking

Wireshark

NMAP

Python Quick Reference

Regular Expressions

SNORT

rwfilter

Scapy

Bro

Windows

Useful Windows Commands (Reg/Netsh/Netstat)

Intrusion Detection Cheat Sheets

Windows Incident Response

Windows Security Log Event IDs

PowerShell

Linux / Unix

Linux Hardening

Basic Linux Commands

SSH Forwarding

Iptables

Searching Through Files

Cron

VI Editor

Remnux / Reverse Engineer Malware

Incident Response (By Situation)

Worm Infection Response

Windows Malware Detection

Windows Intrusion Detection

Website Defacement

Linux / Unix Intrusion Detection

Malicious Network Behavior

DDOS Incident Response

Phishing Incident Response

Social Engineering Incident Response

Incident Response Forms

Incident Communications Log

Incident Contact List

Incident Identification

Incident Containment

TABLE OF CONTENTS SECTION TITLE PAGE Table of Contents-Networking/Blue Team Tools ............................................................ i Table of Contents-IR / Linux / Windows / Misc ............................................................... i Table of Contents-Incident Response / Notes ................................................................ i NETWORKING / BLUE TEAM TOOLS Common Ports...................................................................................................... 1 IPv4/TCP-UDP-ICMP Headers, Subnetting.......................................................... 2 IPv6/TCP Header ................................................................................................. 6 OSI Model , ............................................................................................................ 9 [HTTP](HTTP) , FTP, Decimal to Hex Conversion ............................................................ 12 20 Critical Security Controls ............................................................................... 15 Cisco Networking All in One Reference.............................................................. 17 ARGUS/TCPDUMP/TSHARK/NGREP ............................................................... 21 Tcpdump ........................................................................................................... 23 Berkeley Packet Filters and Bit Masking ............................................................ 24 Wireshark ........................................................................................................... 27 NMAP ................................................................................................................. 30 Python Quick Reference .................................................................................... 34 Regular Expressions .......................................................................................... 36 SNORT ............................................................................................................... 38 rwfilter ................................................................................................................ 41 Scapy ................................................................................................................. 43 Bro ...................................................................................................................... 44 MISC TOOLS / CHEAT SHEETS Google Hacking .................................................................................................. 52 Netcat ................................................................................................................. 54 Hping .................................................................................................................. 56 Metasploit ........................................................................................................... 57 WINDOWS Useful Windows Commands, Reg, Netsh, Netstat, Loops, ................................. 62 Intrusion Detection Cheat Sheets ....................................................................... 64 Windows Incident Response .............................................................................. 68 Windows Security Log Event IDs........................................................................ 69 Powershell .......................................................................................................... 70 LINUX/UNIX Linux Hardening ................................................................................................. 74 Basic Linux Commands ...................................................................................... 78 SSH Forwarding ................................................................................................. 80 Iptables ....................................................

FAQs

What topics are covered in the networking and blue team tools section?

The networking section covers common ports, IPv4/IPv6 fundamentals, OSI model basics, protocol and conversion references, and security control checklists. It also includes multiple packet analysis and detection tools such as tcpdump, Wireshark, and Nmap.

Which incident response topics are organized by specific situations?

Incident response guidance is grouped by scenarios including worm infections, malware detection and intrusion detection on Windows, website defacement, Linux/Unix intrusion detection, malicious network behavior, DDoS, phishing, and social engineering.

What incident response documentation forms are included?

The forms section includes templates for incident communications logs, incident contact lists, incident identification, and incident containment materials.

Oct 13, 2026

Upload by Ophelia