Article Using MITRE ATT&CK®-based analytics for threat detection: 5 principles MITRE ATT&CK-based threat detection vs. conventional methods A number of traditional methods for threat detection exist; however, cyber threat…
Article How to Use MITRE ATT&CK® to Map Defenses and Understand Gaps Developing detection and prevention controls for techniques in the enterprise matrix The MITRE ATT&CK® framework is a useful way to standardize…
Article 7 Steps of the MITRE ATT&CK®-based Analytics Development Method What is the MITRE ATT&CK®-based analytics development method? The MITRE ATT&CK-based analytics development method is a process of using red and blue
Article First Safe Harbor, then Privacy Shield: What EU-US data-sharing agreement is next? What is data sharing? The EU has become known internationally as an organization that takes data privacy very seriously. The EU’s stand-out data…
Article CyberSploit 1: VulnHub CTF walkthrough In this article, we will find an answer to a Capture the Flag (CTF) challenge published on VulnHub website by the author “CyberSploit”. As per the…
Article CyberSploit 2 VulnHub CTF walkthrough In this article, we will solve a Capture the Flag (CTF) challenge published on VulnHub by the author “CyberSploit”. As per the information given by…
Article SQL Injection Vulnerabilities Exploitation Case Study Introduction In the earlier articles about SQL Injection, we discussed how SQL Injection vulnerabilities can be identified and exploited. We also…
Article What is is integer overflow and underflow? This article provides an overview of Integer Overflow and Overflow vulnerabilities and how they can be exploited. Integer Overflows and Underflows…
Article XSS Vulnerabilities Exploitation Case Study Introduction In the earlier articles about SQL Injection, we discussed how SQL Injection vulnerabilities can be identified and exploited. We also…
Article Phishing attack timeline: 21 hours from target to detection Introduction Phishing seems to be ever-present in the modern cyber-threat landscape. During the COVID-19 pandemic, there has even been an increase…
Article How To Exploit Least Privilege Vulnerabilities Introduction In the previous article, we discussed the importance of access controls and understood that the principle of least privilege is an…
Article How Are Credentials Used In Applications? Introduction Use of credentials is one of the most common aspects of applications. Be it a web application or a mobile client application,…
Article Browser Forensics: Safari Introduction Browsers have become an inherent part of our virtual life and we all make use of browsers for surfing the internet in some or the other…
Article Cybersecurity Weekly: Hackers for hire, DNS cache poisoning, The North Face attacked APT hackers for hire target financial and entertainment firms. DNS cache poisoning attacks return due to Linux weakness. The North Face website…
Article Microsoft Azure job outlook Introduction The business world is relocating to the cloud and the trend is strong. It has been predicted that by the end of 2020, 83% of all…
Article My CMSMS 1: VulnHub CTF walkthrough In this article, we will solve a capture the flag (CTF) challenge posted on the VulnHub website by an author named Pankaj Verma. As per the…
Article Fundamentals of symmetric and asymmetric cryptography Cryptography uses symmetric and asymmetric encryption for encryption and decryption of data. If the sender and the recipient of the data use the…
Article 2020: The year's biggest hacks and cyberattacks Just when you thought Halloween was over, it turns out there is something out there far scarier to security professionals around the world: the…
Article Scalability & elasticity: Technical considerations when selecting a cyber range Introduction Cyber ranges are excellent training tools. You can simulate advanced cloud infrastructure and create various test scenarios, or you can…
Article Photographer 1: VulnHub CTF walkthrough, part 2 In the first part of this article, we identified the admin page of the application. In this article, we will continue from this step and complete…
Article The Advanced Encryption Standard (AES) Advanced Encryption Standard short formed as AES falls under the symmetric encryption category. Thus, in AES the sender and the recipient of the…
Article Introduction to Asymmetric Cryptography Cryptography uses symmetric and asymmetric encryption for encryption and decryption of data. In this post, we will be focusing on and discussing…
Article Introduction to hash functions Hash functions are the most commonly used mathematical functions in cryptography for implementing security. A hash function converts an input value…
Article Spoofing and Anonymization (Hiding Network Activity) Introduction Forensic investigators should always pay heed to the possibility of a cybercriminal to have been using spoofing and anonymizing…
