SOC Analyst's Arsenal - Essential Tools, Tips and Tricks for Effective Investigations
Master essential tools and investigative techniques for SOC analysis, featuring proven tips and tricks to enhance security incident response and threat detection capabilities.
Cracking The Chaos Ransomware Family
Dive into the technical analysis and decryption methods of the Chaos ransomware family, exploring its characteristics, vulnerabilities, and countermeasures.
Getting Ahead of the Bad Guys with Internet Scanning Data
Discover how to leverage internet scanning services like Shodan and BinaryEdge to identify adversarial infrastructure, detect threats early, and enhance defensive capabilities through practical hunting techniques and real-world examples.
Crushing Crumbs of Information: Using OSINT to Build Complete Target Profiles
Discover how to leverage seemingly insignificant data leaks from public websites to build comprehensive OSINT profiles, with practical examples and tools demonstrated through Brazilian case studies.
Creating Personal Disinformation Campaigns for Digital Safety and Privacy
Discover innovative strategies for personal security by creating deliberate digital noise and misinformation to protect yourself from stalkers while maintaining an active online presence.
Azure AD Reconnaissance Using OSINT Tools
Discover how to gather intelligence on Azure AD environments using OSINT tools, including domain enumeration, authentication methods, and user information for security assessment purposes.
Easy EASM - The Zero-Dollar Attack Surface Management Tool
Discover how to implement Easy EASM, a zero-cost tool for automated external asset discovery and monitoring, featuring daily Slack/Discord alerts and comprehensive asset tracking capabilities.
Using Media Variants to Uncover Coordinated Influence Operations
Discover innovative techniques for uncovering coordinated influence operations through media metadata analysis, illustrated with a real-world case study of pro-PRC operator Dragonbridge.
OSINT Fundamentals - A Guide to Open Source Intelligence Gathering
Discover the art of Open Source Intelligence through a Dr. Seuss-inspired exploration of OSINT tools, techniques, and ethical considerations for gathering and analyzing publicly available information.
Mastering OSINT: Advanced Techniques in the Realm of Big Data
Discover advanced OSINT techniques for big data analysis, including practical applications of Google BigQuery, CommonCrawl, and Rapid7 Open-Data for enhanced intelligence gathering and security research.
How I Found Your Password and Other Advanced Data Hoarding Techniques
Discover advanced techniques for data breach research and legal frameworks while exploring DorXNG, a next-gen OSINT tool for ethical security testing and red team operations.
Using Maltego Monitor for Real-Time Event Analysis - The 2024 Olympics Case Study
Discover real-time monitoring techniques for public safety during major events using Maltego Monitor's AI-powered sentiment analysis and threat detection capabilities.
Privacy-First, User-Centric, Defensive Applications in Blockchain Development
Explore the principles of privacy-focused and user-centric decentralized applications, emphasizing defensive development strategies for enhanced security and user protection.
Building Encrypted DApps
Discover the fundamentals of building encrypted decentralized applications (DApps) through expert insights on secure blockchain development and implementation strategies.
Web3 Security: Incident Response for DeFi Retail Users
Master essential incident response strategies for DeFi retail users, focusing on Web3 security protocols and best practices to protect your digital assets and investments.
OPSEC and the Next Generation of DePIN
Explore operational security fundamentals and emerging challenges in decentralized physical infrastructure networks (DePIN), focusing on next-generation implementation strategies.
Plonky3 and Valida - Pushing the Performance and Usability of Zero Knowledge Proof
Explore cutting-edge developments in zero-knowledge proof systems through Plonky3 and Valida, focusing on enhanced performance metrics and practical implementation strategies.
mTLS: When Certificate Authentication Goes Wrong - Security Implementation Vulnerabilities
Dive into novel attacks on mTLS authentication systems, exploring implementation vulnerabilities, exploitation techniques, and secure coding practices for certificate-based authentication.
ELECTRONizing MacOS Privacy - A New Weapon in Red Teaming Armory
Discover how to bypass MacOS privacy controls through Electron apps, exploring TCC vulnerabilities and gaining insights into red teaming techniques for enhanced security testing and defense strategies.
Assessing Security of Digital Certificates at Scale
Discover tools and techniques for identifying weak digital certificates at scale through network monitoring, scanning, and mathematical testing to detect security vulnerabilities in RSA public keys.
Clocks Have Ears - Timing and Browser-Based Local Network Port Scanner
Discover how browser-based timing attacks can be used for local network port scanning, exploring innovative security techniques and network vulnerability assessment methods.