Comparisons of the published methodologies and adversary models that structure a security test: NIST SP 800-115, PTES, OSSTMM, OWASP WSTG, MITRE ATT&CK and the Cyber Kill Chain.
NIST's technique guide against the Penetration Testing Execution Standard: phases and sections, rules of engagement, depth of technical guidance, age and maintenance, and which one to cite as the methodology PCI DSS 11.4.1 requires.
ISECOM's operational security testing manual, with its channels and attack surface metric, against the engagement-focused PTES: structure, reporting (STAR versus findings report), license terms and when a buyer benefits from OSSTMM's metrics.
A web-application test catalog against a general penetration testing process: what each covers, how testers combine them on a web engagement, and which reference to require in a statement of work for an application test.
A detailed, unordered knowledge base of adversary techniques against Lockheed Martin's ordered seven-step intrusion model: level of detail, use in red team planning, detection coverage mapping and reporting, and why most testers use both.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.