Article Data loss prevention (DLP) strategy guide In this article, we'll learn about the concept of data loss prevention: why it is needed, what are the different types of DLP and its modes of…
Article Advanced sqlmap sqlmap is an attack tool which can be effectively used to perform SQL injection attacks and post exploitation acts. It is a versatile tool when it…
Article Windows Cryptography API Microsoft Windows provides a sleek API for cryptographic purposes. It is a generic interface for accessing cryptographic services provided by…
Article Honey Encryption Current Scenario In today's world, cyber criminals often use software to brute force passwords, and some may lead to successful attacks. Since there…
Article DragonFly, Cosmic Duke and Pitty Tiger: From State-Sponsored Espionage to Campaign of Independent APTs Introduction Cyber espionage is one of the most aggressive cyber threats for private companies and government entities. In recent years, the number…
Article Computer Forensics with P2 Commander Introduction Computer Forensics is the methodical series of procedures and techniques used for procuring evidence from computer systems and storage…
Article File integrity monitoring (FIM) and PCI-DSS In this article, we will learn about the requirement of file integrity monitoring in PCI-DSS (Payment Card Industry Data Security Standard). If we…
Article Configuring the ModSecurity Firewall with OWASP Rules In today's world, over 70% of all attacks carried out over are done so at the web application level, so we need to implement security at multiple…
Article Explaining cyberterrorism Introduction People feel endangered by cyberterrorists, and this topic has raised an alarm in many societies. Many experts in the IT field and many…
Article Pafish (Paranoid Fish) Introduction In this tutorial we'll take a look at a Pafish tool, which performs anti debugger/vm/sandbox tricks to detect whether the malware is…
Article Padding oracle attack Firstly, this vulnerability is not related to the Oracle database or the Oracle Company in any way. In cryptography, an 'oracle' is a system that…
Article How cybercrime exploits digital certificates What is a digital certificate? The digital certificate is a critical component of a public key infrastructure. It is an electronic document that…
Article Crowdsensing: State of the Art and Privacy Aspects 1. Introduction It is estimated that today approximately three-quarters of the human population has a mobile phone. Crowdsensing, a new business…
Article Shellcode Detection and Emulation with Libemu Introduction Libemu is a library which can be used for x86 emulation and shellcode detection. Libemu can be used in IDS/IPS/Honeypot systems for…
Article Xplico Downloading Xplico In this article we'll present Xplico, which is a network forensics tool installed in major digital forensics Linux distributions…
Article Have New Backdoors Been Discovered in iOS? An Interview With iOS Developer and Digital Forensics Expert Jonathan Zdziarski When the HOPE X (Hackers On Planet Earth) 2014 convention started on July 18th, one particular presentation caught the undivided attention of…
Article Bringing Down Security Risks With A BYOD Encryption Policy The number of employees using their personal devices for work-related purposes is absurd. Let's just say there's an employee or two in every…
Article Blackbox Assessments with Introspy This article explains how to start performing black box assessments on Android applications using Introspy. Introspy is one of the important tools…
Article Securing Shared Preferences with Third Party Libraries In one of the previous articles, we have seen how developers implement Shared Preferences in Android applications. We have also seen how one can…
Article Securing VoIP systems Voice over Internet Protocol (VoIP) is a methodology and group of technologies for the delivery of voice communications and multimedia sessions over…
Article Cookies with Secure Flag: Undesired Behavior in Modern Browsers Introduction When a cookie has secure flag set, it will only be sent over secure HTTPS, which is HTTP over SSL/TLS. This way, the authentication…
Article Analyzing the mod security logs In the previous article, we had already configured the Mod-Security Firewall with OWASP Core Rule Set (CRS). But installing and configuring the Mod…
Article Cyber Insurance Introduction Cyber insurance coverage has been available on the market for a decade, but only recently companies have been seeing a significant…
Article Windows registry forensics using ‘RegRipper’ command-line on Linux Windows registry is a gold mine for a computer forensics investigator. During case analysis, the registry is capable of supplying the evidence…
