Full Circle Detection - From Hunting to Actionable Detection
Comprehensive guide to creating efficient detection rules, from initial hunting ideas to actionable alerts for security analysts, using a real-world example of an Outlook persistence technique.
Forensicating Endpoint Artifacts in the World of Cloud Storage Services
Explore key forensic artifacts in cloud storage services like OneDrive and Dropbox, focusing on data exfiltration detection and acquisition techniques for endpoint investigations.
Real Solutions From Real Incidents - Save Money and Your Job
Learn cost-effective strategies to prevent security incidents through real-world scenarios, gap analysis, and enterprise protection methods. Gain insights on leveraging incident response lessons for improved security programs.
xRAT - Monitoring Chinese Interests Abroad With Mobile Surveillance-ware
Explore mobile surveillance-ware xRAT, used for monitoring Chinese interests abroad. Learn about threat detection, reverse engineering, and emerging mobile security challenges.
Surprise Supplies
Exploring major supply chain attacks of 2017, including MeDoc and CCleaner compromises. Analyzes attacker methods, malware used, and impact on victims. Discusses the history and future of supply chain attacks.
Impactful Cyber Army Workflows
Explore effective cybersecurity strategies and workflows for building a robust cyber army, as presented by Volodymyr T. at DefCamp 2022, Eastern Europe's premier hacking and infosec conference.
Curse of the Mirage Forest - An Incident Responder's Tale
Explore a gripping incident response case study from DefCamp 2021, delving into cybersecurity challenges, investigative techniques, and lessons learned in the "Curse of the Mirage Forest."
Invoke Obfuscation - PowerShell Obfuscation Techniques and How To Try To Detect Them
Explore advanced PowerShell obfuscation techniques and detection methods. Learn about layered obfuscation, evasion strategies, and the Invoke-Obfuscation tool for enhancing cybersecurity defenses against sophisticated attacks.
Crónica de un Incidente Anunciado - Generando Resiliencia con Historias Reales
Análisis de ataques reales en entidades financieras, destacando indicadores de compromiso ignorados y estrategias para mejorar la seguridad del ecosistema mediante experiencias y controles efectivos.
Introduction to ATM Penetration Testing - CyberFinance
Explore ATM penetration testing essentials, including attack methods, security vulnerabilities, and defensive strategies. Gain insights from an experienced cybersecurity consultant on protecting financial institutions.
Gestión de Respuesta a Incidentes
Revisión sobre gestión de incidentes de seguridad informática, incluyendo estado del arte y herramientas para equipos de respuesta. Enfoque en compliance, gestión de riesgos y concientización.
AWS Well-Architected Framework - Security Pillar
Guía de estrategias para diseñar sistemas seguros en la nube, abordando gestión de identidades, detección, protección de infraestructura, protección de datos y respuesta a incidentes en AWS.
Automatizando la Respuesta Ante Incidentes
Automatización de respuesta ante incidentes: técnicas y herramientas para mejorar la eficiencia y efectividad en la gestión de amenazas de seguridad en entornos empresariales.
La importancia del triage en la seguridad informática
Exploración del triage en seguridad informática: proceso vital para evaluar sistemas y tomar decisiones efectivas ante incidentes digitales. Enfoque en la normalización y mejores prácticas.
Digital Forensics and Incident Response in G Suite
Learn digital forensics and incident response techniques for G Suite environments, focusing on effective investigation and mitigation strategies for cloud-based security incidents.
You Try to Detect Mimikatz
Explore techniques for detecting Mimikatz, a powerful post-exploitation tool, to enhance cybersecurity defenses and protect against credential theft attacks.
Incident Response and SAP Systems
Explore incident response strategies for SAP systems, focusing on effective handling of security breaches and minimizing potential damage to critical business operations.
Hunting Them All
Explore advanced threat hunting techniques and strategies to proactively detect and mitigate cyber threats in complex network environments.
Building Systems on Shaky Grounds - 10 Tactics to Manage the Modern Supply Chain
Explore 10 tactics for managing modern software supply chains, balancing open-source benefits with security risks. Learn to assess vendors, conduct red team exercises, and implement effective incident response strategies.
Investigando transacciones sospechosas de bitcoins con OSINT
Aprende técnicas OSINT para investigar transacciones sospechosas de Bitcoin. Euler Neto comparte su experiencia en ciberseguridad y análisis forense de criptomonedas.
Steps and Thoughts - The Journey Towards Phishing Takedown
Expertos de Mercado Libre comparten su experiencia en detección y respuesta anti-phishing, enfocándose en la protección de usuarios y clientes de la plataforma.