Tools, references, papers, repos, and other things I found useful enough to keep.
I reference this non-stop when it comes to measuring and prioritizing cybersecurity efforts.