Author

Ethan Robish, Webcast Wrap-Up Data Analytics, DuckDB, SQL, Structured Query Language

Intro to Data Analytics Using SQL

In this video, Ethan Robish discusses the fundamentals and intricacies of data analytics using SQL.

Read the entire post here

Craig Vincent, Informational, Web App Access Control Vulnerability, Access Controls, Autorize, IDOR

Finding Access Control Vulnerabilities with Autorize

In the most recent revision of the OWASP Top 10, Broken Access Controls leapt from fifth to first.1 OWASP describes an access control as something that “enforces policy such that […]

Read the entire post here

Hayden Covington, SOC Alerting, automation, detection engineering, detections, Security Operations Center

The Detection Engineering Process

This webcast was originally published on November 8, 2024. In this video, Hayden Covington discusses the detection engineering process and how to apply the scientific method to improve the quality […]

Read the entire post here

Informational, InfoSec 101, John Malone Infosec for Beginners, penetration testing, Pentesting

What Is Penetration Testing?

In today’s world, security is more important than ever. As organizations increasingly rely on technology to drive business, digital threats are becoming more sophisticated, varied, and difficult to defend against. […]

Read the entire post here

Informational, Michael Allen, Social Engineering, Webcasts Adversary in the Middle, AitM, post-exploitation, Webcast Wrap-Up

Adversary in the Middle (AitM): Post-Exploitation

In this video, Michael Allen discusses adversary-in-the-middle post-exploitation techniques and processes.

Read the entire post here

Dave Blandford, How-To, Informational QEMU, virtual machines, VM

QEMU, MSYS2, and Emacs: Open-Source Solutions to Run Virtual Machines on Windows

As a tester, I do all my work inside a Virtual Machine (VM). Recently, I found myself in a situation where I needed to get a VM on a Windows […]

Read the entire post here

Blue Team, Hayden Covington, Informational, InfoSec 101 Security Operations Center, SOC

Clear, Concise, and Comprehensive: The Formula for Great SOC Tickets

A lot of emphasis and focus is put on the investigative part of SOC work, with the documentation and less glamorous side of things brushed under the rug. One such […]

Read the entire post here

Informational, Matthew Eidelberg, Red Team, Red Team Tools, Webcasts DLL, DLL Hijacking, Webcast Wrap-Up

DLL Hijacking – A New Spin on Proxying your Shellcode

This webcast was originally published on October 4, 2024. In this video, experts delve into the intricacies of DLL hijacking and new techniques for malicious code proxying, featuring a comprehensive […]

Read the entire post here

Blue Team, Blue Team Tools, Guest Author, Informational, InfoSec 101, Red Team, Red Team Tools Infosec for Beginners, InfoSec Survival Guide, Purple Team

Blue Team, Red Team, and Purple Team: An Overview

By Erik Goldoff, Ray Van Hoose, and Max Boehner || Guest Authors This post is comprised of 3 articles that were originally published in the second edition of the InfoSec […]

Read the entire post here