Article Threat hunting: IOCs and artifacts Unusual behavior of information technology assets within an organization may be a hint that the organization is undergoing a cyberattack.…
Article Threat Hunting Methodologies Introduction Threat hunting is a proactive and iterative approach to detecting threats. It falls under the active defense category of cybersecurity…
Article QRL jacking Quick Response Code Login Jacking (also known as QRL Jacking) is a social engineering attack by which the attacker can hijack the session, affecting…
Article Important SQLMap commands The SQLMap tool can be found in every penetration tester's toolbox. It is one of the most popular and powerful tools when it comes to exploiting SQL…
Article Vulnhub machines walkthrough series — PwnLab-Init Continuing with our series on Vulnhub machines, in this article we will see a walkthrough of another interesting Vulnhub machine called PwnLab-Init.…
Article Interview With an Expert: How Does a CISO Learn to Be a CISO? The role of the chief information security officer (CISO) is quickly becoming more important as cybersecurity in general becomes more intertwined…
Article USV: 2017 Part 2 CTF Walkthrough In this article, we will continue the Capture the Flag (CTF) challenge which was posted on VulnHub by Suceava University. As you may already know…
Article Virtual Machine Introspection in Malware Analysis What is Virtual Machine Introspection? The word "introspection" generally refers to the observation and examination of one's own mental and…
Article Pentester Academy Command Injection ISO: SugarCRM 6.3.1 Exploitation Introduction The Pentester Academy by Vivek Ramachandran had compiled a virtual machine that consists of various vulnerable real-world application.…
Article Tabnabbing What is Tabnabbing? As described by Aza Raskin, tabnabbing goes like this: when a simple JavaScript detects that the user has moved to another…
Article Threat Hunting Techniques Introduction Cyberthreat-hunting is a way of scouring through a network and finding sophisticated threats that could cause harm to systems and data,…
Article 10 Benefits of Threat Hunting Introduction Organizations are constantly being challenged by an increasing number of cybersecurity threats. As the severity and frequency of…
Article Threat Hunting vs. SIEM Introduction To reduce attack surfaces and improve one’s cybersecurity posture, organizations can adopt two stances: a reactive approach and a…
Article AWS Cloud Security for Beginners — Part 1 Introduction to AWS cloud security Cloud computing has gained enormous attention during the past few years, and a lot of companies are shifting…
Article How Much Does a Data Breach Cost? Reading the 2018 Cost of a Data Breach Study How much does a data breach cost? It isn't a simple question, but the answer is the only way to transmit the urgency of the situation to C-level…
Article AWS Cloud Security for Beginners — Part 2 Introduction In the previous part of this series, we set up our free-tier account and then configured AWS CLI. In this article, we will discuss S3…
Article Threat Hunting and SOC Introduction “Threat hunting” refers to the process of proactively and repeatedly searching through networks to detect and isolate advanced threats…
Article How to Build a Threat-Hunting Tool in 10 Steps Introduction If you are planning on building your own threat-hunting tool but don’t know where to start, then this could be just the article for…
Article The Current Job Outlook for Threat Hunters Introduction Demand for cybersecurity professionals is on the rise, and even specialized niche positions are seeing an increase in popularity. This…
Article Threat Hunting for DDoS Activity and Geographic Irregularities Introduction So there you are, sitting at your desk at the organization where you work as an information security professional. You are performing…
Article Threat Hunting for Suspicious Registry and System File Changes Information security professionals are normally tasked with hunting threats that have been detected on their respective networks. What happens when…
Article iOS application security part 47 — Inspecting apps with Frida In this article, we will talk about Frida. Frida is a dynamic instrumentation toolkit which can prove to be extremely useful in iOS application…
Article Top 14 Social Engineering Red Flags Introduction Most people are aware of the technological side of cybersecurity. They’ve heard about viruses and vulnerabilities and hackers breaking…
Article Fraud as a Service (FaaS): Everything You Need to Know Introduction The 2017 LexisNexis® True Cost of Fraud report makes for sobering reading. After surveying nearly 1,200 risk and fraud executives, the…
