Article What Is It Like to Be a Penetration Tester for an In-House Team? Being a penetration tester is an exciting and lucrative career, but is it the right one for you? You may be reading this article because you: Are…
Article How to Advance In Your Career as a Penetration Tester Penetration testing is essential for maintaining security in modern enterprises, with some organizations hiring staff specifically for this purpose…
Article JIS-CTF: VulnUpload Walkthrough In this article, we will solve another Capture the Flag (CTF) challenge. This time, we'll be using an exercise which was posted on the VulnHub…
Article Leaders’ Meetings: A Privileged Target for Hackers Leaders' meetings are privileged targets for nation-state attackers that launch massive offensives to gather intelligence from the ongoing events.…
Article Threat Hunting for Anomalies in Privileged Account Activity Introduction A tell-tale sign of your network being hacked is that a privileged account, such as a system administrator account, has been…
Article Threat Hunting for Unusual DNS Requests Searching for Unusual DNS Requests is a standard method for threat hunting. The presence of Unusual DNS Requests can often tip off Information…
Article Threat Hunting for Swells in Database Read Volume Introduction When attackers have breached your network, one of the most common things they will be doing is looking into your systems that have…
Article Threat Hunting for Unusual Logon Activity What is one of the first things that you think of when thinking of potential threat activity on your network? Most would probably say that there has…
Article Threat Hunting and HTML Response Size Introduction Imagine that you are sitting at your workstation at work and you notice that your environment is experiencing a higher than usual HTML…
Article Threat Hunting for Domains as an IOC Introduction When threats are detected on a network, domains can serve as good indicators that the network is compromised. In many cases, this…
Article Threat Hunting for URLs as an IoC Introduction Unfortunately, cyber-attacks are just a fact of life in today’s world. Anyone with a laptop or smartphone can quickly write malicious…
Article Threat Hunting for File Names as an IoC Introduction Just like any good treasure hunt, you need a map or clues to be successful. Threat hunting is no different – Indicators of Compromise…
Article Threat Hunting for File Hashes as an IOC Threat Hunting is "the process of proactively and iteratively searching through networks to detect and isolate advanced threats that evade existing…
Article How to implement a data privacy strategy - 10 steps Ensuring data privacy is one of the biggest challenges organizations face. A quick look at the statistics related to personal data leaks in 2017 is…
Article Penetration Testing for a Company Vs. Being Freelance Introduction The Cybersecurity job market has become a hot field, seeking new, highly qualified candidates. It is a diverse field with various job…
Article What is the Difference Between Penetration Testing and Vulnerability Assessment? There is a substantial amount of confusion in the IT industry with regard to the difference between Penetration Testing and Vulnerability…
Article QA, Certification, & Accreditation in Computer Forensics Introduction The purpose of digital forensics is to answer one or more investigative or legal questions, with the purpose of using the evidence to…
Article How to comply with COPPA — 7 steps Protecting children online should be of paramount importance to all, especially in today's world. In response to this pressing issue, in 1998…
Article How to comply with the Red Flags Rule The Red Flags Rule, or RFR, is one of the identity protection rules found in the Federal Credit Reporting Act (FCRA). More specifically, RFR deals…
Article How to comply with the GLBA Act — 10 Steps The Gramm-Leach-Bliley Act is a U.S. federal law created to control how financial institutions deal with a consumer's non-public personal…
Article How to comply with FCRA — 6 steps The Fair Credit Reporting Act, or FCRA, is a piece of legislation passed by Congress in 1970 to promote fairness, accuracy and privacy for…
Article How to Comply with HIPAA Regulations – 10 Steps There is a tremendous amount of data in the world of healthcare. That data includes personal healthcare information (PHI), which is regulated by the…
Article The Main Concerns with Biometric Authentication Part of my job is to coordinate technical specifications for mobile app development projects with the customers. In the process, I often hear the…
Article Technical Skills vs. Soft Skills: Which Are More Important as an InfoSec Professional? "People, Not Technology, Are Key Elements of Cybersecurity," write Ivo Ivanovs and Sintija Deruma in an ISACA Journal issue. In fact, finding…
