# ArtOfTheHak

> Free cybersecurity research and training platform for youth, funded by the Embassy Row Project.

ArtOfTheHak provides 100 cybersecurity research modules at zero cost to troubled and disenfranchised youth. The platform covers threat intelligence, defense engineering, digital forensics, governance and compliance, incident response, network security, cryptography, malware analysis, vulnerability assessment, and monitoring.

All modules align with MITRE ATT&CK, NIST CSF, and ISO 27001 frameworks. Output is audit-ready with ECIA-7 provenance tagging and ARCS compliance scoring.

The program is personally funded by technologist James Scott through the Embassy Row Project, a network of 35 institutes. No donations accepted. No fees charged.

## Key Pages

- [Home](https://artofthehak.org/): Platform overview, capabilities, and access information
- [About](https://artofthehak.org/about): Mission, philosophy, and what participants receive
- [Founder](https://artofthehak.org/founder): James Scott's background, career, and philanthropic model
- [Scholarship](https://artofthehak.org/scholarship): Full scholarship application for free platform access
- [Service Library](https://artofthehak.org/services): Browse all 100 cybersecurity research modules
- [Contact](https://artofthehak.org/contact): Inquiries, partnerships, and research collaboration
- [Resources](https://artofthehak.org/resources): Cybersecurity career guides and learning resources

## Topics Covered

- Advanced Persistent Threat (APT) profiling and attribution
- MITRE ATT&CK technique mapping and TTP analysis
- Real-time threat feed integration and OSINT correlation
- Ransomware campaign analysis and extortion pattern detection
- Network intrusion detection and defense engineering
- Zero trust architecture and security control implementation
- Incident response planning and digital forensics
- Governance, compliance auditing, and policy generation
- Cryptographic implementation and key management
- Vulnerability assessment and patch management

## Frameworks

- MITRE ATT&CK (Enterprise, Mobile, ICS)
- NIST CSF (Cybersecurity Framework)
- ISO 27001 (Information Security Management)
- ARCS (Adaptive Regulatory Compliance System)
- ECIA-7 (Evidence Provenance and Audit Trail)
- D3FEND (Defensive Technique Knowledge Base)