Any chance you could share what open source tools and frameworks you work with? I would be grateful for that.
CIS, https://www.cisecurity.org/
CIS audit, https://www.auditscripts.com
Mitre Attack, https://attack.mitre.org/
NIST, https://www.nist.gov/cyberframework
CISA, https://www.cisa.gov/cybersecurity
OWASP top 10, https://owasp.org/www-project-top-ten/
Cloud security alliance, https://cloudsecurityalliance.org/
Higher level standards: Iso27001
IEC62443
Tools:
AD: Bloodhound / Sharphound
PingCastle
Web:
Owasp ZAP
Burpsuite
Basically download the Kali linux distro
+++++++++++++++
Conferences:
Blackhat
Defcon
Hope
Great list thanks
And the community of practitioners are giving back to the community in all dimensions, code, knowledge, talks, support, heck even governments and institutions five free insights; mitre, nist, cis for instance.
With a few exceptions such as Nessus and Qualys.