Mossé Cyber Security Institute Blog

2022

2022-06-23 » Environment Variables in Linux
2022-06-23 » Identifying ARP Request Packets with Wireshark
2022-06-23 » Netbios Enumeration
2022-06-23 » SNMP Enumeration with snmp-check
2022-06-23 » MAC flooding attack
2022-06-23 » PsTools
2022-06-23 » Hands on Windows Shellcoding: Create ROP via mona.py
2022-06-23 » Introduction to Configuration Management
2022-06-22 » Vi Editor in Linux
2022-06-22 » A General Overview of Nuclei Command Line
2022-06-22 » Introduction to Patching
2022-06-22 » Understanding Bug Bounty Hunting
2022-06-22 » The Basics of Securing Workstations: Virtual
2022-06-21 » A Note on Linux Package Managers
2022-06-21 » Windows Exploit Countermeasures: Part 1
2022-06-21 » Network protocols explained: IMAP, POP3, SMTP, RDP and VNC
2022-06-21 » Vulnerability Scanners: Result Accuracies
2022-06-21 » The Basics of Securing Workstations: Physical
2022-06-21 » Post-Exploitation: Information Collection and Persistance via Process Migration
2022-06-21 » Basic Physical Security
2022-06-21 » Basic Wireless Technologies and an Example of their Exploits
2022-06-21 » Secure Browsing 101
2022-06-21 » Common Constraints of Penetration Testing
2022-06-21 » An Overview of File Inclusion Vulnerabilities
2022-06-20 » So many Linux commands and switches – How do I remember them all?
2022-06-19 » Viewing hidden files and directories in Linux
2022-06-19 » Windows Universal Shellcoding x86
2022-06-19 » Kerberos Attack and Defense Techniques
2022-06-19 » Introduction to Malware Endpoint hunting
2022-06-19 » Malware hunting: Detection tools
2022-06-19 » MAC Spoofing with MAC Changer
2022-06-19 » Exploiting EternalBlue With Metasploit
2022-06-19 » Securing Servers: An Introductory Guide
2022-06-19 » What is Network Sniffing?
2022-06-19 » Common Application Security Testing (AST) Tools in DevSecOps
2022-06-19 » Introduction to Vulnerability Management
2022-06-15 » Hunting Webshells: Tools
2022-06-15 » AppSec Pipeline and Shift-left
2022-06-15 » Hunting Webshells: Linux and Windows Commands
2022-06-14 » Creating and Executing Linux Shell Scripts
2022-06-14 » Access Control Trends in Organizations
2022-06-14 » Access Control Technologies and Systems
2022-06-14 » Access Control Models
2022-06-14 » How Practical is Homomorphic Encryption?
2022-06-14 » The 6 components of DevSecOps
2022-06-14 » Linux Resource Monitoring Commands
2022-06-14 » Understanding GCP Identity and Access Management
2022-06-13 » Using Metasploit to Enumerate SSH
2022-06-13 » Intro to Hunting Webshells
2022-06-13 » Suspicious Traffic Hunting
2022-06-13 » Malware Classification
2022-06-13 » Securing Docker Containers
2022-06-13 » A Beginner’s Practical Guide to Docker
2022-06-13 » Basic Windows Shellcoding
2022-06-13 » Windows Egg-Hunting
2022-06-13 » API Security
2022-06-13 » Federated Identity Management and Single-Sign-On (SSO)
2022-06-13 » Shell Scripts in Linux
2022-06-13 » Managing Linux User Accounts
2022-06-13 » Hands-on with Google Cloud Key Management Service (KMS)
2022-06-13 » Enumerating and Exploiting AWS S3 Buckets with S3Scanner and Flaws.cloud
2022-06-09 » An Introduction to DevSecOps
2022-06-09 » Search, Seize, Preserve!: Digital Evidence
2022-06-09 » Azure Sentinel: A Beginner's Guide
2022-06-09 » A Quick Rundown of Cryptography and Steganography
2022-06-09 » What Is Phishing?
2022-06-09 » Windows Exploitation: SEH based overflow
2022-06-09 » Password Cracking Techniques, Tools and Protection Recommendations
2022-06-08 » S3 Bucket URL Enumeration
2022-06-08 » Hands-on with YAML Basics
2022-06-08 » Linux Exploitation: Format String Vulnerabilities and Exploitation
2022-06-08 » An Explanation of Knowledge and Behavior-Based Detection Within an IDS
2022-06-08 » Root Login vs. Sudo
2022-06-08 » Additional Security with Amazon EMR
2022-06-08 » Social Engineering: Basic Principals, Attacks, Phases and Prevention
2022-06-07 » File Types in Linux
2022-06-07 » A Brief Introduction to Wordlists and how to Generate them with CeWL
2022-06-07 » Open Redirection
2022-06-07 » File Permissions in Linux
2022-06-07 » Understanding User Roles and IAM in AWS
2022-06-07 » Enumerating Active Directory with Powerview
2022-06-07 » Enumerating SMTP with Metasploit
2022-06-07 » The Working Environment of Popular Debuggers and Disassemblers
2022-06-06 » User Accounts on Linux Systems
2022-06-06 » An Introduction to Active Directory and how PowerShell can be used as a Security Auditor
2022-06-06 » Introduction to Debuggers and Disassemblers
2022-06-06 » Sandboxing
2022-06-06 » Security as a Service (SECaaS)
2022-06-06 » Platform as a Service (Paas)
2022-06-06 » Software as a Service (SaaS)
2022-06-06 » Tools to get you Started in Malware Analysis
2022-06-06 » Linux Exploitation: x64 shellcode
2022-06-05 » Linux Exploitation: Basic Linux Shellcoding
2022-06-05 » Investigating Crypto Crimes: An Introduction
2022-06-05 » Custom Security Groups on AWS
2022-06-05 » A Brief Overview into Containers and the Challenges they Address
2022-06-05 » Improving DevOps Pipeline Security
2022-06-05 » General Security Risks when Applying DevOps
2022-06-05 » Shared Security Responsibilities in AWS
2022-06-05 » Identifying Malware Persistance
2022-06-05 » The NIST Cybersecurity Framework and the Benefits of Implementing it
2022-06-05 » Linux Exploitation: Linux Reverse TCP Shellcode
2022-06-02 » Infrastructure as a Service (IaaS)
2022-06-02 » A Quick Overview of Container Vulnerabilities
2022-06-02 » Security Measures to Protect your AWS Simple Storage Service (S3)
2022-06-02 » A Brief Explanation of Zero-Trust Security Architecture
2022-06-02 » The Security Advantages of AWS Elastic Load Balancing (ELB)
2022-06-02 » Linux Command Line 101: Basic Redirection and Pipes
2022-06-02 » Broken Access Control (BAC)
2022-06-02 » Introduction to GRC and its importance in Cyber Security
2022-06-01 » Linux Command Line 101: Viewing File Contents
2022-06-01 » Linux Exploitation: Advanced Exploit Protection Evasion
2022-06-01 » A Look into AWS Data Center Security Procedures
2022-06-01 » Introduction to the DevSecOps Environment
2022-06-01 » An Overview of Version Control System (VCS)
2022-06-01 » A Brief Introduction to AWS Key Management Service
2022-06-01 » Access Control Monitoring
2022-06-01 » Access Control Levels
2022-06-01 » Access Control Threats
2022-06-01 » Access Control Fundamentals
2022-06-01 » Introduction to RSA encryption
2022-06-01 » PowerShell Basics for Security Professionals
2022-05-31 » AWS Password Policies
2022-05-31 » AWS - Five Pillars of a Well-Architected Framework
2022-05-31 » A Quick Start Guide to Network Monitoring and Security features in AWS
2022-05-31 » Compliance and Security in Amazon Web Services (AWS)
2022-05-31 » Linux Command Line 101: Basic File and Directory Operations
2022-05-31 » Introduction to Resilient Data Protection Systems
2022-05-31 » Linux Exploitation: Evading Exploit Protection
2022-05-31 » Getting started with Linux Forensics
2022-05-30 » Manual and automated password acquisition
2022-05-30 » Fundamental threat hunting concepts and examples
2022-05-30 » An introduction to web shells
2022-05-30 » Scanning SMB, Telnet and FTP default ports
2022-05-30 » Common methods an adversary may adopt to cover their tracks
2022-05-30 » Securing Data in the Cloud with Cryptographic Appliances
2022-05-30 » Host discovery
2022-05-30 » Collecting Linux System Information for DFIR
2022-05-30 » Basic Components of a Secure Network Architecture in the Cloud
2022-05-30 » Directory traversal
2022-05-30 » Analyzing malicious code without reverse engineering the assembly
2022-05-30 » Server-side request forgery
2022-05-30 » Insecure Direct Object References
2022-05-30 » NTFS data stream manipulation
2022-05-30 » What is fileless malware?
2022-05-30 » Evading IDS/Firewall while network scanning
2022-05-30 » What is Privilege Escalation?
2022-05-30 » Business Continuity Planning
2022-05-30 » The Importance of Security Training and Awareness
2022-05-30 » Introduction to Web Application Firewall (WAF)
2022-05-30 » Securing Wireless Network-based IDPS (NIDPS)
2022-05-30 » Business Impact Analysis Issues in the Cloud
2022-05-30 » Securing Computing Resources
2022-05-30 » Malware Injection Techniques: API hooking techniques
2022-05-30 » Using YARA for Threat Hunting in Enterprise Environments
2022-05-29 » Cloud-Based Key Control
2022-05-29 » Common Myths about Password Security
2022-05-29 » Content Discovery - Part 2
2022-05-29 » Content Discovery - Part 1
2022-05-29 » Hybrid Cloud
2022-05-29 » Private Cloud
2022-05-29 » Public Cloud
2022-05-29 » Cloud computing
2022-05-29 » Introduction to Security Control Types and Functions
2022-05-29 » Windows Exploitation: Stack Overflow Part 2
2022-05-29 » Windows Exploitation: Stack Overflow Part 1
2022-05-26 » Disaster Recovery
2022-05-26 » Advanced Persistent Threat Lifecycle
2022-05-26 » Understanding the different types of scan you can perform with Nmap
2022-05-26 » Common Code Injection Vulnerabilities
2022-05-26 » How to Stop SMTP Open Relays
2022-05-26 » A Note on Linux Directory Structure for DFIR
2022-05-26 » Introduction to Honeypots, Honeynets, and Padded Cells
2022-05-26 » Introduction to Threat Modeling
2022-05-26 » A gentle introduction to digital forensics on Linux
2022-05-25 » Understanding Security Information and Event Management Systems (SIEMs)
2022-05-25 » DNS enumeration using zone transfer
2022-05-25 » What is a Keylogger?
2022-05-25 » Understanding Proxy Servers
2022-05-25 » Perimeter Security
2022-05-25 » DMZ security risks and opportunities
2022-05-25 » What Is Spyware?
2022-05-25 » What is Adware?
2022-05-25 » Secure Peer-to-Peer Networks
2022-05-25 » Develop Secure Java Applets: A Step-by-Step Guide
2022-05-25 » Find Out Which Cloud model Fits for Your Security Concerns
2022-05-25 » Significance of ‘strings’ tool in Digital Forensics
2022-05-25 » Malware Injection Techniques: AtomBombing, EWMI, NtTestAlert
2022-05-24 » Security risks and protection of VMs
2022-05-24 » Types of virtualization
2022-05-24 » Windows update types
2022-05-24 » Application restriction
2022-05-24 » Enumerating AWS S3 Buckets
2022-05-24 » What is OS Fingerprinting/Banner grabbing?
2022-05-24 » What are Security Roles And Responsibilities?
2022-05-24 » Introduction to Data Classification
2022-05-24 » SDLC Software Development Life Cycle
2022-05-24 » BYOD Bring Your Own Device
2022-05-24 » Content Filtering
2022-05-24 » Types of Alerts
2022-05-24 » Internet Protocol Security (IPSec)
2022-05-23 » Transport Layer Security (TLS): An Introduction
2022-05-23 » Secure Sockets Layer (SSL) and Secure-HTTP (HTTP-S) Protocols
2022-05-23 » Benefits of Separation of Duties
2022-05-23 » Windows Recycle Bin Forensics
2022-05-23 » Malware Injection Techniques: APC injection
2022-05-23 » Linux Exploitation: Abusing EIP
2022-05-23 » Rootkits
2022-05-23 » Network Footprinting
2022-05-23 » Network Switches
2022-05-23 » Weaknesses in default configuration settings
2022-05-23 » Design vulnerabilities
2022-05-23 » Race conditions
2022-05-23 » XML External Entity Injection
2022-05-23 » SQL Injection Attacks
2022-05-23 » Hashing Algorithms: Introduction
2022-05-23 » Remote Access Authentication: PAP and CHAP
2022-05-23 » How Do You Prevent Brute Force Attacks?
2022-05-23 » Hands-on with Hash Functions
2022-05-22 » Low-security VPN solution: Point-to-Point Tunneling Protocol
2022-05-22 » The Role of Security Policies in an Organization
2022-05-22 » A Note on Volatility Profiles for Memory Forensics
2022-05-22 » Server-Client Communication Security: Digital Certificates
2022-05-22 » Site-to-Site VPN
2022-05-22 » Introduction to Virtual Private Network (VPN)
2022-05-22 » A Beginner's Guide to Mimikatz
2022-05-22 » Linux Exploitation: Stack Smashing
2022-05-19 » Data Security Management
2022-05-19 » Cross-Site Request Forgery
2022-05-19 » The Biba Model: A comparison between Bell-laPadula
2022-05-19 » The Attacker Mindset: The DAD Triad
2022-05-19 » Introduction to Risk Management
2022-05-19 » Importance of Hashing in Digital Forensics
2022-05-19 » Deploy Your First Project on Terraform with Basic HCL
2022-05-19 » Input Validation
2022-05-19 » Practical Windows Hardening: Security Templates
2022-05-19 » Identification and Authentication Methods: Kerberos
2022-05-19 » Different types of vulnerability scanners
2022-05-19 » Significance of Windows Alternate Data Streams in DFIR
2022-05-18 » Introduction to Linux binary exploitation - Part 1
2022-05-18 » Cross-Site Scripting (XSS) Vulnerabilities
2022-05-18 » Buffer overflow vulnerabilities
2022-05-18 » Introduction to Access Controls
2022-05-18 » Windows NTFS File Attributes for Digital Forensics
2022-05-18 » Securing application cookies
2022-05-17 » What are software backdoors?
2022-05-17 » File system security: Overview of File System
2022-05-17 » What is Infrastructure as Code (IAC) and its Benefits?
2022-05-17 » Detecting exfiltration over network protocols
2022-05-17 » Windows Shellbags in Digital Forensics
2022-05-17 » Introduction to DevOps: Culture and Practices
2022-05-17 » Network protocols explained: ARP, DNS, DHCP, HTTP and FTP
2022-05-17 » Data Audit Best Practices
2022-05-17 » Network Security with a Packet Filtering Firewalls
2022-05-16 » An Introduction to Web Browser Forensics
2022-05-16 » Hands On with Public Key Cryptography
2022-05-16 » Malware Injection Techniques: Thread Execution Hijacking and SetWindowsHookEx
2022-05-16 » Malware Injection Techniques: Process Hollowing
2022-05-16 » Malware Injection Techniques: Introduction
2022-05-16 » What is a Firewall?
2022-05-16 » Securing Windows: An Introduction to Windows Group Policy
2022-05-16 » Securing Confidentiality of Data using the Bell-LaPadula Model
2022-05-15 » Components of an Information System
2022-05-15 » Hands-on with shared key encryption
2022-05-15 » Introduction to STRIDE as a Threat Modelling Framework
2022-05-15 » Common network devices you need to know
2022-05-15 » Introduction to Cryptography and Block Cipher Modes
2022-05-13 » Windows File System Tunneling in Digital Forensics
2022-05-13 » Bluetooth Attacks
2022-05-13 » Securing wireless devices
2022-05-13 » BIOS Security 101
2022-05-13 » Data Loss Prevention - Part 2
2022-05-13 » Different types of cyber attacks
2022-05-12 » How do intrusion detection systems work?
2022-05-12 » What is WOW64?
2022-05-12 » Windows Processes and Services
2022-05-11 » Windows Scheduled Tasks in Digital Forensics
2022-05-11 » Native Scripting Tools in Windows: Should You Use Powershell?
2022-05-11 » Windows Event Logs in Digital Forensics
2022-05-10 » Reverse Shells 101
2022-05-10 » Introduction to the Sysinternals Tools
2022-05-10 » Secure Your AWS Root Account with 5 Best Practices
2022-05-10 » A Day in the Life of a Digital Forensic Investigator
2022-05-10 » Data Loss Prevention - Part 1
2022-05-09 » Windows Internals: Processes
2022-05-09 » Introduction to Behavior Analysis Techniques
2022-05-09 » Model, provision and manage AWS using CloudFormation
2022-05-09 » Windows Master File Table (MFT) in Digital Forensics
2022-05-08 » The OSI Model
2022-05-08 » Fuzzy Hashing, Import Hashing and Section Hashing
2022-05-08 » Introduction to YARA Rules - Part 2
2022-05-07 » What is Data Governance?
2022-05-07 » A General Overview of Penetration Testing Methodologies
2022-05-07 » What is vulnerability scanning?
2022-05-06 » What is Security Testing and Penetration Testing?
2022-05-06 » Windows File System Journal in Digital Forensics
2022-05-06 » Network protocols explained: what are they, and why are they important?
2022-05-06 » What is Ransomware?
2022-05-05 » Cybersecurity Business Analyst
2022-05-04 » Introduction to YARA Rules - Part 1
2022-05-04 » Identifying Obfuscated Malware
2022-05-04 » Forensic Importance of Windows File Management
2022-05-03 » Windows Volume Shadow Copies in Digital Forensics
2022-05-03 » Windows Registry in Digital Forensics
2022-05-02 » Reverse Engineering Portable Executables (PE) - Part 2
2022-05-02 » Reverse Engineering Portable Executables (PE) - Part 1
2022-05-02 » What will I do as an Incident Responder?
2022-04-29 » Introduction to Static Code Analysis for Malware Reverse Engineering
2022-04-29 » Using Netcat as a Reverse Shell
2022-04-28 » What is Pre-Incident Preparation?
2022-04-28 » Botnets and Zombies
2022-04-28 » Review and Testimonial: Samuel Romanov
2022-04-28 » OWASP Top 10 Web Application Vulnerabilities
2022-04-27 » Importance of Timelines in a Forensic Investigation
2022-04-27 » Person-in-the-Middle Attack (PITM)
2022-04-27 » Windows Hibernation files in Digital Forensics
2022-04-26 » A simple introduction to Red, Blue and Purple Teaming
2022-04-26 » Hunting in distributed organizations
2022-04-26 » What information can I find in a memory dump?
2022-04-25 » Guidelines for creating a Mission Update Brief
2022-04-24 » Setting up a DFIR Lab at home
2022-04-24 » Introduction to Risk Assessments
2022-04-23 » 4 Approaches to threat hunt
2022-04-22 » Understanding Denial of Service Attacks
2022-04-22 » Hunting with Threat Emulation
2022-04-22 » Introduction to Memory Forensics
2022-04-21 » Email: Another source for data exfiltration
2022-04-21 » Visual signs of a malware infection
2022-04-20 » Understanding File Magic Numbers for Digital Forensics
2022-04-20 » Intrusion detection systems
2022-04-20 » Writing Digital Forensics Reports
2022-04-19 » Generating a threat hunting hypothesis
2022-04-19 » Windows Prefetch files in digital forensics
2022-04-19 » Common delivery malware infection methods
2022-04-18 » The business case for threat hunting for small businesses
2022-04-18 » Using DNS for Threat Hunting
2022-04-18 » Understanding the Threat Hunting Process Step-by-Step
2022-04-17 » Types of Malware
2022-04-17 » Cyber Kill Chain
2022-04-15 » Physical, Technical and Administrative Controls
2022-04-15 » Threat actors in cyberspace
2022-04-14 » Types of hackers
2022-04-14 » Types of Security Threats
2022-04-14 » AAA of security
2022-04-14 » What is an Incident Response Toolkit?
2022-04-13 » Timestamp Format in Windows, Linux-based and MAC Operating Systems
2022-04-13 » Little-endian vs Big-endian
2022-04-12 » What is a forensic image?
2022-04-12 » A short introduction to the major cyber disciplines
2022-04-12 » Cybersecurity for pre-beginners
2022-04-12 » CIA Triad
2022-04-12 » Mossé Cyber Security Institute: Part III
2022-04-11 » Performing digital forensics on a windows machine – where do I start?
2022-04-05 » Using organizational chart to show the structure of teams and organizations
2022-03-31 » What are Zero-Day Vulnerabilities and Who Uses Them?
2022-03-24 » Guidelines for creating a CONOP Brief
2022-03-23 » The Reconnaissance Phase in Penetration Testing Engagements
2022-03-21 » Mastering the Preparation Phase in penetration testing engagements
2022-03-20 » Introduction to the Penetration Testing Workflow
2022-02-26 » Review and Testimonial: Nathan Collins
2022-02-18 » Example of a penetration testing report executive summary
2022-02-17 » Introduction to Red Team Tools and Techniques
2022-02-16 » Using Contextual Analysis to decide on a target software for vulnerability research
2022-02-15 » Introduction to the Vulnerability Research and Exploitation Workflow
2022-02-15 » Designing Threat Emulation Scenarios
2022-02-14 » How can CISOs make sense of Cyber Red Team results?
2022-02-14 » Can Red Teaming exercises be automated?
2022-02-13 » Top reasons why Red Teamers should know how to write their own custom tools
2022-02-13 » Choosing a Command and Control Infrastructure
2022-02-13 » The importance of Freedom of Movement when running Red Team exercises
2022-02-12 » Key metrics to measure the success of a Red Team Exercise
2022-02-12 » The business case against Red Teaming
2022-02-10 » What role does incident handling play when a cyber attack occurs?
2022-02-10 » What is the difference between Red Teaming, Penetration Testing and Vulnerability Assessments?
2022-02-09 » What is the OODA Loop and why is it relevant to Red Teaming?
2022-02-09 » Using the Cyber Kill Chain and the MITRE Matrix for Red Team Operations
2022-02-09 » Designing realistic cyber threat emulations
2022-02-09 » What is the right mindset for Red Teaming?
2022-02-09 » Why do we Red Team?
2022-02-09 » A short introduction to writing incident response playbooks
2022-02-08 » Why do we do incident response?
2022-01-20 » Review and Testimonial: Anushka Lal
2022-01-16 » Mossé Cyber Security Institute: Part II
2022-01-12 » Mossé Cyber Security Institute: Part I

2021

2021-12-15 » Becoming a Threat Hunter
2021-12-15 » Becoming an Incident Responder
2021-11-29 » Becoming a Malware Analyst
2021-11-23 » Review and Testimonial: Duane Dunston
2021-11-22 » Becoming a Digital Forensics Investigator
2021-11-18 » Review and Testimonial: Bushra Safdar
2021-11-17 » Review and Testimonial: Nathan Chan
2021-11-09 » Review and Testimonial: Divya Lakshmanan