Introduction The objective of this blog post is to offer helpful guidance to small businesses and non-profit organisations that are categorised under the "Cyber Security Poverty Line." These entities often lack adequate financial and human resources ...
The MITRE ATT&CK framework provides a comprehensive and standardized approach to mapping the tactics, techniques, and procedures (TTPs) used by attackers during different stages of an attack. However, simply having access to the framework is not enou...
GitHub has become an essential platform for developers to collaborate, share, and manage code. With millions of users and repositories, it's critical to ensure the security of the platform. Unfortunately, over the years, there have been several high-...
Ensuring your Active Directory meets security controls and best practices.
A list of best practices to implement
Carrying out Incident Response in line with the NIST framework
SIEM solutions are designed to provide real-time analysis of security alerts generated by network hardware and applications. They help organisations identify and respond to security threats quickly, allowing them to mitigate potential damage and prev...
In this blog post, I will be focusing on how Attack Simulation can be operationalised with Purple Team to achieve the successful collaboration of different security teams. This will ensure that security teams do not feel like they have been burdened ...
I started to think about the different ways one could obtain a PCAP to replay malicious traffic on their network while I was using AttackIQ’s tool for Breach & Attack Simulation. Aside from the out-the-box scenarios provided by AttackIQ to test netwo...