Detecting the “Next” SolarWinds-Style Cyber Attack
18 April 2021
Detecting the "Next" SolarWinds-Style Cyber Attack https://thehackernews.com/2021/04/detecting-next-solarwinds-attack.html https://app.cymulate.com/lo…
Security
Hardening SaaS
17 April 2021
Hardening SaaS Great talk by [email protected] https://www.meetup.com/Cloud-Security-Alliance-CSA-Orange-County/events/276020126 Har…
Microsoft Cyberattack Simulator
9 April 2021
Microsoft Cyberattack Simulator Microsoft has released an open-source cyberattack simulator that allows security researchers and data scientists to cr…
Detecting Zero-days in ArcSight
22 March 2021
Detecting Zero-days in ArcSight Allot of customers ask; "Can you detect Zero-days", most Cyber vendors, will give you a marketing answer, and really, …
Linux privilege escalation
12 March 2021
Linux privilege escalation Curated list of Linux pops. Research GTFOBins is a curated list of Unix binaries that can used to bypass local security res…
“Hafnium,” Researcher Publishes Code to Exploit Microsoft Exchange Vulnerabilities on Github
11 March 2021
“Hafnium,” Researcher Publishes Code to Exploit Microsoft Exchange Vulnerabilities on Github Microsoft owns GitHub, the Hafnium Exploit code has been …
Cyber Treat Intelligence Research – Can you nmap a Country for research?
10 March 2021
Cyber Treat Intelligence Research - Can you nmap a Country for research? It should be common knowledge, that you are not allowed to run reconnaissance…
Windows Registry Locations for Persistence
7 March 2021
Windows Registry Locations for Persistence TechniqueRegistry LocationNotesAccessibility FeaturesHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Curre…
Active Directory Kerberos Gold Ticket Exploit
25 February 2021
Active Directory Gold Ticket Exploit This is my research and attempt to replicate the exploit utilised by the SolarWinds perpetrators, as per US gover…