Skip to content

Official & Authoritative References

EC-Council (the exam owner — treat as ground truth)

  • CEH program — https://www.eccouncil.org/train-certify/certified-ethical-hacker-ceh/
  • CEH v13 brochure / syllabus PDF — https://www.eccouncil.org/cehv13-brochure/
  • CEH learning framework — https://www.eccouncil.org/cybersecurity-exchange/ethical-hacking/ceh-learning-framework/
  • Certification portal (eligibility, application, retake policy) — https://cert.eccouncil.org/
  • ECE (continuing education) policy — https://cert.eccouncil.org/ece-policy.html
  • Exam scheduling via Pearson VUE — https://home.pearsonvue.com/eccouncil

Standards, frameworks & vulnerability data

  • MITRE ATT&CK — https://attack.mitre.org/
  • Lockheed Martin Cyber Kill Chain — https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.html
  • NIST Cybersecurity Framework — https://www.nist.gov/cyberframework
  • NIST SP 800-115 (technical assessment) — https://csrc.nist.gov/pubs/sp/800/115/final
  • OWASP Top 10 (web) — https://owasp.org/www-project-top-ten/
  • OWASP Web Security Testing Guide — https://owasp.org/www-project-web-security-testing-guide/
  • OWASP Mobile Top 10 — https://owasp.org/www-project-mobile-top-10/
  • OWASP IoT Top 10 — https://owasp.org/www-project-internet-of-things/
  • FIRST CVSS (scoring spec + calculator) — https://www.first.org/cvss/
  • CVE (MITRE) — https://www.cve.org/
  • CWE (MITRE) — https://cwe.mitre.org/
  • NVD (NIST vulnerability database) — https://nvd.nist.gov/
  • PTES (Penetration Testing Execution Standard) — http://www.pentest-standard.org/

Vendor security guidance relevant to the PAM/defender angle

  • Microsoft — Securing privileged access (tier model) — https://learn.microsoft.com/en-us/security/privileged-access-workstations/overview
  • Microsoft — Windows LAPS — https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-overview
  • Microsoft — Protected Users security group — https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/protected-users-security-group
  • CIS Benchmarks (hardening) — https://www.cisecurity.org/cis-benchmarks