Hayden Covington, SOC Alerting, automation, detection engineering, detections, Security Operations Center

The Detection Engineering Process

This webcast was originally published on November 8, 2024. In this video, Hayden Covington discusses the detection engineering process and how to apply the scientific method to improve the quality […]

Read the entire post here

GRC Compliance, Governance, Kelli Tarala, leadership, Risk, Risk Management

Cyber Risk Lessons We Can Learn From Hurricane Preparedness

Risk is real. To better understand cybersecurity risk, let’s compare cyber risks to risks in the natural world from hurricanes. We can learn lessons from hurricanes and unnamed storms in […]

Read the entire post here

Webcast Wrap-Up Craig Vincent, Desktop Application Testing, DLL Hijacking, penetration testing, Pentesting

Intro to Desktop Application Testing Methodology

In this video, experts delve into the intricacies of desktop application penetration testing methodologies.

Read the entire post here

Informational, InfoSec 101, John Malone Infosec for Beginners, penetration testing, Pentesting

What Is Penetration Testing?

In today’s world, security is more important than ever. As organizations increasingly rely on technology to drive business, digital threats are becoming more sophisticated, varied, and difficult to defend against. […]

Read the entire post here

Informational, Michael Allen, Social Engineering, Webcasts Adversary in the Middle, AitM, post-exploitation, Webcast Wrap-Up

Adversary in the Middle (AitM): Post-Exploitation

In this video, Michael Allen discusses adversary-in-the-middle post-exploitation techniques and processes.

Read the entire post here

Informational, InfoSec 101 Infosec for Beginners, InfoSec Survival Guide, penetration testing, Pentesting, Security Operations Center, SOC, threat hunting

Pentesting, Threat Hunting, and SOC: An Overview

By Ray Van Hoose, Wade Wells, and Edna Jonsson || Guest Authors This post is comprised of 3 articles that were originally published in the second edition of the InfoSec […]

Read the entire post here

Dave Blandford, How-To, Informational QEMU, virtual machines, VM

QEMU, MSYS2, and Emacs: Open-Source Solutions to Run Virtual Machines on Windows

As a tester, I do all my work inside a Virtual Machine (VM). Recently, I found myself in a situation where I needed to get a VM on a Windows […]

Read the entire post here

Blue Team, Hayden Covington, Informational, InfoSec 101 Security Operations Center, SOC

Clear, Concise, and Comprehensive: The Formula for Great SOC Tickets

A lot of emphasis and focus is put on the investigative part of SOC work, with the documentation and less glamorous side of things brushed under the rug. One such […]

Read the entire post here

Informational, Matthew Eidelberg, Red Team, Red Team Tools, Webcasts DLL, DLL Hijacking, Webcast Wrap-Up

DLL Hijacking – A New Spin on Proxying your Shellcode

This webcast was originally published on October 4, 2024. In this video, experts delve into the intricacies of DLL hijacking and new techniques for malicious code proxying, featuring a comprehensive […]

Read the entire post here