Article Red Team Operations: Providing recommendations The importance of recommendations The Red Team’s final report is the most valuable part of the entire exercise for the client. In many cases, a Red…
Article The future of Red Team operations Introduction The Red Team assessment is an increasingly popular method for an organization to get a realistic feel for their overall security.…
Article MITRE ATT&CK: Man-in-the-browser Introduction Web browsing is a well-known cause of exposure to a variety of nasty pieces of malware and related maladies for web surfers. This is…
Article MITRE ATT&CK: Screen capture Introduction There is an old saying that goes “a picture is worth a thousand words.” In many ways, this saying is true: you can learn a great deal…
Article Malware spotlight: Point of sale malware Introducing point of sale malware Point of sale (PoS) systems are the payment devices that you can find at almost any store. Depending on their…
Article ThreatMetrix Cybercrime Report: An interview Introduction In a recent Infosec Cyber Work podcast, we welcomed Rebekah Moody, market planning director at ThreatMetrix, a LexisNexis Risk…
Article Cybersecurity Weekly: Active phishing attacks, breach blamed on password reuse, insecure smart lights New phishing attacks target U.N. and enterprise executives. Bed Bath & Beyond blames their breach on password reuse. A new study finds smart light…
Article Understanding if statements in C “If” statements in C programming are used to execute a block of statements if a certain condition is true. They allow programmers to control the…
Article MITRE ATT&CK: Audio Capture Introduction A common theme in literary, cinematic and real-world espionage is the use of a wire or bug that records audio of a target subject.…
Article Malware spotlight: What are botnets? Introduction They say simple plans are the most likely to be successful, and this adage definitely carries over to the world of cybersecurity. This…
Article Using data science to combat deepfakes, malware and social engineering Cybersecurity data science is a fast-growing field, but it’s difficult to find up-to-date training due to all the new technologies, said Infosec…
Article Network traffic analysis for IR: Data analysis for incident response Introduction While no incident is the same, security professionals have come to rely on pre-established procedures and best practices to help…
Article MITRE ATT&CK: Input capture Introduction Since the early days of computing, input has been the most basic form of interface with a system. Until attackers find a way to…
Article Malware spotlight: What are backdoors? Introduction Imagine staring down an impregnable fortress or network and determining that there is no conceivable way in without obvious detection.…
Article Network traffic analysis for IR: Connection analysis Introduction to connection analysis Connection analysis is the highest-level type of network analysis that is used in incident response. Rather than…
Article MITRE ATT&CK: Network sniffing Introduction Network sniffing may conjure images of a network-based bloodhound to some, but in the world of information security, it means the…
Article Network traffic analysis for IR: Event-based analysis Introduction to event-based analysis Event-based analysis, as its name suggests, focuses on analysis of specific events that occur on the monitored…
Article Network traffic analysis for incident response (IR): What incident responders should know about networking Introduction In this article, we’ll discuss the various things that incident responders must know about the operation of a network and how this can…
Article Network traffic analysis for IR: Statistical analysis Introduction to statistical analysis Statistical analysis is one of the three main categories of analysis that can be performed on network traffic…
Article MITRE ATT&CK: Command-line interface Introduction Try to remember the first time you sat at a PC. What was one of the seemingly high-level features about it that impressed you? Chances…
Article How to prepare for a ransomware attack The threat of ransomware Ransomware has become a common and well-known threat to organizations. Its success is largely based on the fact that it is…
Article Network traffic analysis for IR: Alternatives to Wireshark It is almost impossible to leave a conversation with a cybersecurity professional, take an introductory networking class, or break into ethical…
Article MITRE ATT&CK: Replication through removable media Introduction The progression of information security has been heavily focused on the internet as the primary source of threats. What may be…
Article Phishing in academic environments Introduction Higher education is a popular target for phishing scams. However, the industry’s vulnerability is often overlooked by both…
