Article How to protect a Windows 10 host against malware Contrary to popular belief, malware is not a Space Cowboy costume — that would be "Mal Wear." Malware is the shortened form of "Malicious Software",…
Article Influencing security mindsets to build a culture of cybersecurity Cybersecurity specialists aren’t the only people who play an indispensable role in protecting businesses from cyberattacks. Every employee who uses…
Article How to use Microsoft DirectAccess When you are physically located at an organization's site, it is relatively straightforward to present users with an experience that is consistent…
Article Wireless analysis In this article, we will discuss how to perform wireless analysis, specifically on Wi-Fi networks. We will perform active packet capturing by using…
Article Protocol analysis using Wireshark Protocol analysis is examination of one or more fields within a protocol’s data structure during a network investigation. Understanding the bits and…
Article RansomExx: The malware that attacks Linux OS RansomExx is the new malware used by criminals to attack both Windows and Linux environments. With companies using a mixed environment of Windows…
Article Ask us anything about security awareness, behavior & culture (session #2) It is vital that cybersecurity programs find a balance between securing the operations that their businesses rely on and enabling them to work…
Article Top five open source intelligence (OSINT) tools [updated 2021] In this article, we will look at the top five open-source intelligence tools. Before we jump directly into the tools, it is essential to understand…
Article Ask us anything about developing security talent and teams (session #2) Organizations of all sizes continually struggle to address modern-day cybersecurity talent supply and demand disparities. Thankfully, there are…
Article BAHAMUT: Uncovering a massive hack-for-hire cyberespionage group Introduction In October 2020, the BlackBerry Research Operations team released a comprehensive report highlighting the reach, tradecraft and…
Article Infosec Skills author Matthew Campagnola is forging a new path in ICS security "I coalesce broad themes that I've had to embody over the past couple of years. The course crosses a lot of different areas, and they're very broad,…
Article Infosec Skills author Vladimir de Turckheim explains the importance of hands-on Node.js security experience There is a hands-on experience gap in traditional security education. Hands-on experience not only helps in developing transferable skills but also…
Article What is enumeration? [updated 2021] Enumeration is defined as a process which establishes an active connection to the target hosts to discover potential attack vectors in the system,…
Article Wireless networking fundamentals for forensics With the evolution of Internet of Things (IoT) devices, there are countless wireless devices around us these days. Many people carry small-sized…
Article Investigating wireless attacks In an earlier article, we discussed the fundamentals of wireless networks: the common types of wireless devices, terminology used, WLAN security…
Article Software maturity models for AppSec initiatives Introduction Software is on the front lines of security: a 2019 report from GitLab found that almost half of respondents deploy software on-demand…
Article Email analysis In this article, we will explore the fundamentals concepts associated with email that will help us to perform email analysis. We will begin by…
Article Email forensics: Web-based clients This article discusses how to perform forensic investigations of Web-based email clients. While many organizations use Desktop based email clients…
Article Open source IDS: Snort or Suricata? [updated 2021] Although early types of Network Intrusion Detection Systems go back all the way to the early 1980s, the concept of IDS took off when Martin Roesch…
Article Proper use and training are the keys to mastering secure C++, says Infosec Skills author Martin Dubois “When we started, we simply didn’t think about security. We were alone in the world, and no one could connect to what we were doing,”
Article PenTest+: DoDD 8570 overview In November 2020, the US Department of Defense (DoD) has selected CompTIA PenTest+ as an approved certification for military personnel and defense…
Article Hacking clients with WPAD (web proxy auto-discovery) protocol [updated 2021] In this tutorial, we’ll take a look at how we can hack clients in the local network by using WPAD (Web Proxy Auto-Discovery). The WPAD protocol…
Article What is a Honey Pot? [updated 2021] Introduction: What is a Honeypot? Honeypots are special programs that are written for one purpose: to be exploited. Honeypots emulate the appearance…
Article Email forensics: desktop-based clients Emails are the most commonly used technology for exchanging messages between people/businesses using electronic media. With every technology, there…
