Article McAfee: Endpoint Protection [product review] Introduction Many businesses and corporations have traditionally only secured their network communications just after the point of origination and…
Article Top 30 penetration tester (Pentester) interview questions and answers It seems like hardly has one cyber-threat appeared before many variants of it soon follow, affecting both individuals and corporations alike. But…
Article Top 30 incident responder interview questions and answers As systems move into the cloud and are increasingly exposed to the Internet, incident responders are becoming more necessary in the corporate world.…
Article Threat Hunting: Detecting Adversaries Introduction Threat hunting requires that the hunter understand the mind of the adversary and seek to take out attacks before the hunters can…
Article Threat Hunting: Data Collection and Analysis Introduction Threat hunting requires proactively looking within the network and searching for anomalies that might indicate a breach. The vast…
Article Carbon black: Endpoint security [product review] Carbon Black Endpoint Security is an effective and user-friendly endpoint solution for user devices such as PCs and laptops. It features malware…
Article Who Is Targeting Industrial Facilities and ICS Equipment, and How? Industrial Control Systems (ICS) Equipment Under Attack Industrial Control Systems (ICS) are expected to be installed and left isolated for a long…
Article What Is Malware? Malware is a common term in information security, but what exactly is it? In this article, we’ll explore where it comes from, what it is intended to…
Article VulnHub machines walkthrough series: Brainpan – Part 1 Continuing with our series on testing vulnerable virtual machines, in this article we will see a walkthrough of an interesting VulnHub machine…
Article How to become an information security (IS) auditor Introduction Being a security auditor means working with companies while conducting audits of security systems relating to the IT infrastructure.…
Article Red team assessment phases: Overview Computer systems and networks contain valuable information, and hackers are out there trying to steal that data. This has led to the development of…
Article Red Team Assessment Phases: Reconnaissance The second phase of a red team assessment is reconnaissance. In this phase, the red team attempts to collect information relevant to the assessment…
Article VulnHub Machines Walkthrough Series: Brainpan – Part 2 In this article, we’ll be carrying on with our walkthrough of an interesting VulnHub machine called Brainpan. In Part 1 of this article, we looked…
Article Red Team Assessment Phases: Target Identification The third phase of a red team assessment is target identification. In this phase, the red team moves from general information collected about the…
Article Red Team Assessment Phases: Gaining Access This phase is the first of several where the red team actively interacts with the target’s environment. Some of these phases tend to blend together,…
Article Red Team Assessment Phases: Establishing Foothold and Maintaining Presence In the previous phase, the goal was to gain initial access to the target network. The focus of this phase is to expand this access to the level…
Article Lampião 1: CTF walkthrough In this article, we will learn to solve a Capture the Flag (CTF) challenge which was posted on VulnHub by Tiago Tavares. According to the…
Article How to Measure the Success of Your Security Awareness Program Depending on the size and needs of your organization, a security awareness program usually equals a significant investment of time and funds.…
Article Red Team Assessment Phases: Completing Objectives The purpose of this phase of the assessment is fairly self-explanatory. In previous phases, the red team performed the operations necessary to set…
Article Red Team Assessment Phases: Reporting Reporting is the final and potentially most important phase of a red team assessment. The goal of a red team assessment is to provide the client…
Article Top 30 Web Developer Interview Questions and Answers for 2019 "Do what we say, or we shall replace you with a very small shell script." It's a bit of a dated threat now, but in the age of extreme optimization…
Article A Post-Compliant World? – Part 1 Over the next three articles, we will consider the past, present and future state of infosec compliance. Please note that these are personal views,…
Article Hack the Box (HTB) machines walkthrough series — Lazy So far, we have seen numerous Vulnhub machine walkthroughs which illustrate how to enumerate a machine and other possible entry points. We will…
Article A Post-Compliant World? – Part 2 Introduction Do we still have infosec compliance? Is the concept of upholding data and computer security outmoded? I showed in my previous piece how…
