Article Hack the Box (HTB) machines walkthrough series — Netmon Today, we will be continuing with our exploration of Hack the Box (HTB) machines as seen in previous articles. This walkthrough is of an HTB machine…
Article Should repeat offenders be sent to maximum security? If you listen regularly to the repeat offender buzz, eventually you’ll hear from those who believe disciplinary actions are the best response. In my…
Article Return on investment (ROI) of cybersecurity training Introduction Protection against cybersecurity threats come with a financial burden. Various analysts have looked at what the cybersecurity spend…
Article MITRE ATT&CK vulnerability spotlight: Valid accounts Introduction The MITRE Corporation is a non-profit, federally-funded research and development center (FFRDC) that, among other things, performs…
Article Threat hunting with osquery Introduction In this article, we take a look at osquery and how it can be used to query the security, reliability and compliance information of…
Article MITRE ATT&CK vulnerability spotlight: Obfuscated files or information Introduction MITRE helps support the U.S. government’s R&D efforts by acting as a Federally Funded Research and Development Center (FFRDC), a…
Article MinU 1: Capture-The-Flag (CTF) walkthrough In this article, we will solve a Capture the Flag (CTF) challenge that was posted on the VulnHub website by an author using the name 8bitsec. As per…
Article Keeping your cybersecurity skills relevant in 2019 Keeping your cybersecurity skills relevant in 2019 is a challenge, but in a world where threats are constantly evolving and changing, cybersecurity…
Article ICS/SCADA security overview Introduction The advent of Supervisory Control and Data Acquisition (SCADA), and Industrial Control Systems (ICS) generally can be described as a…
Article Introduction to SCADA security Introduction Supervisory Control and Data Acquisition, or SCADA, is a system used in many industries, including in the nation’s critical…
Article MITRE ATT&CK vulnerability spotlight: Valid accounts Introduction The MITRE Corporation is a non-profit, federally-funded research and development center (FFRDC) that, among other things, performs…
Article Physical security for ICS/SCADA environments Introduction Physical security for Industrial Control Systems/Supervisory Control and Data Acquisition systems (ICS/SCADA) is paramount for a…
Article How to create a more diverse cybersecurity workforce Introduction Some people reading this will probably think, oh no, not another article about diversity in the workplace. But what is diversity?…
Article MITRE ATT&CK vulnerability spotlight: Pass-the-hash Introduction Since the first appearance of pass-the-hash (PtH) in the nineties, this lateral movement tactic has been helping attackers leverage…
Article Lessons learned: the Marriott breach Overview of the breach Marriott International has been in the news throughout 2019 due to a major data breach discovered and investigated in late…
Article Types of ICS Introduction Industrial control systems (ICS) are mainstays in the worlds of manufacturing, automation, utilities facilities and more. They make…
Article Malware Analysis and Reverse Engineering Introduction This article provides a high-level overview of malware analysis and reverse engineering. If you are planning to get started with…
Article 16 business email/mobile phishing tricks to be aware of in 2019 Introduction It’s hard enough running a business without a cybercriminal trying to ruin it. According to PWC, in 2018, 49% of organizations across…
Article Disassembly 101 Introduction This article briefly explores topics connected to assembly basics, registers, operands, instructions, arithmetic instructions, logical…
Article Threat hunting with Kolide and osquery Introduction In this article, we’ll discuss how we can use Kolide Fleet for threat-hunting purposes. This article is not intended to be an…
Article MITRE ATT&CK vulnerability series: Trusted relationship Introduction What many who are not information security-savvy may think is that the attack surface of an organization is confined to simply the…
Article Security Concerns of Flying Motorcycles [Updated 2019] Section 1. Introduction Flying motorcycles resembling the flying machines from Star Wars are about to be placed on the market. A number of…
Article Debugging for malware analysis This article provides an overview of debugging and how to use some of the most commonly used debuggers. We will begin by discussing OllyDbg; using…
Article 16 phishing scams that consumers need to be aware of in 2019 Introduction Scams are as old as human society. There has, and likely always will be, an element of humanity that will try to take advantage of us…