Introducing DeepBlueCLI v2 Now Available in PowerShell and Python
Explore DeepBlueCLI v2's enhanced features for Windows malware detection, including PowerShell and Python implementations, regex improvements, and automated whitelisting techniques.
Subverting Trust in Windows - A Case Study of the How and Why of Engaging in Security Research
Explore Windows security research through a case study on subverting trust, covering dynamic analysis, code signatures, and PowerShell, with insights on validating trust and lessons learned.
Practical Techniques for AV Bypass
Explore practical techniques for bypassing antivirus software, covering various scenarios, tools, and programming languages to enhance your cybersecurity skills.
Windows Event Logs - Zero to Hero
Comprehensive guide to leveraging Windows Event Logs for security monitoring, from basic concepts to advanced techniques for threat detection and incident response.
Weaponizing Splunk - Using Blue Team Tools for Evil
Explore how Splunk, a popular security tool, can be exploited for malicious purposes. Learn about vulnerabilities, attack surfaces, and practical demonstrations of potential threats.
Math Is Hard - Compliance to Continuous Risk Management
Explore strategies for implementing continuous risk management, from gaining management buy-in to selecting metrics and reporting at various organizational levels. Learn quantitative risk analysis methods and practical implementation tips.
Coding Secure Code - Best Practices, Advice for Writing Secure Code
Discover best practices for writing secure code, focusing on business-driven approaches, understanding your model, and integrating security seamlessly into development processes.
Lessons from Applying MITRE ATT&CK in the Wild
Experts discuss practical applications of MITRE ATT&CK framework, sharing insights on improving cybersecurity operations, leveraging adversary knowledge, and enhancing organizational defense strategies.
The Seven Most Dangerous New Attack Techniques, and What's Coming Next
Explore cutting-edge cyber threats, their mechanisms, and defense strategies. Learn about PowerShell attacks, Android vulnerabilities, and industrial control system risks from leading security experts.
Future Forests - Realistic Strategies for AD Security & Red Forest Architecture
Strategies for implementing Microsoft's Red Forest architecture to mitigate Active Directory attacks, covering benefits, challenges, and practical steps for enhanced security in enterprise domains.
Integrating Our DevSecOps Product Pipeline with Software Security Standards
Explore strategies for integrating security standards into DevOps pipelines, leveraging automation, and aligning innovation with compliance for efficient product development.
How to Implement a World-Class IAM Program Driven by Access Analytics
Discover how to build a robust IAM program using data analytics for risk assessment and management. Learn from Aetna's success in implementing a risk-based approach to enterprise security.
Advanced Persistence Threats - The Future of Kubernetes Attacks
Explore advanced Kubernetes attacks, their detection, and prevention methods. Gain insights into sophisticated threats and practical security techniques for protecting clusters.
Shadow IT and Shadow Remote Access - How to Find It
Discover hidden network access and vulnerabilities using free tools. Learn to identify and mitigate risks from vendor connections and IoT devices in your organization's infrastructure.
Untangling SaaS Security in the Enterprise
Explore enterprise SaaS security strategies, including controls frameworks, integration patterns, and BYOD solutions. Learn to protect data and manage risks in cloud-based business applications.
Open Source in Security-Critical Environments
Explore best practices for using open-source code securely in critical environments, focusing on DevOps and management strategies for edge, network, and cloud applications.
Demystifying 5G Security through Threat Modeling
Comprehensive analysis of 5G security risks using threat modeling. Explores new technology components, services, and mitigating controls in the 5G ecosystem, with a focus on the World Bank Group's approach.
Securing Your M&A Activity with Cybersecurity Due Diligence
Learn to conduct cybersecurity due diligence for M&A activities, including program components, metrics for informed decisions, and strategies for both buy and sell sides to protect and evaluate effectively.
Breaking Password Dependencies - Challenges in the Final Mile at Microsoft
Explore Microsoft's journey to eliminate password vulnerabilities, focusing on legacy authentication challenges and practical strategies for achieving 100% remediation in large enterprises.
The CCPA Is Here - What’s Changed and What You Need to Know for Compliance
Experts discuss CCPA compliance, recent amendments, and practical steps for businesses to adapt to California's privacy law, including enforcement priorities and future implications.
Enterprise Incident Management - How to Get Everyone Ready for a Crisis
Discover strategies for building an enterprise cyber-response program, including war games and tabletop exercises. Learn key lessons for preparing leadership and teams for potential security crises.