Active Directory - Real Defense for Domain Admins
Practical strategies for securing Domain Admins and Domain Controllers in Active Directory environments, including account management, password policies, and logon restrictions.
Windows Event Logs - Zero to Hero
Comprehensive guide to Windows Event Logs, covering forwarding, analysis, and practical applications in cybersecurity, with real-world examples and best practices.
Lies, Damn Lies, and Metrics
Explore the pitfalls of metrics analysis and learn strategies to extract actionable insights beyond raw numbers in software development and operations.
The Eight Fallacies of Distributed Computing
Explore eight common misconceptions in distributed computing, their implications, and real-world examples to help developers design more robust and scalable server architectures.
CertGraph - A Tool to Crawl the Graph of SSL Certificate Alternate Names Using Certificate Transparency
Explore SSL certificate security, Certificate Transparency, and CertGraph tool for domain enumeration. Learn to protect your organization and uncover hidden information in SSL certificates.
BECs and Beyond - Investigating and Defending Office 365
Explore Office 365 security through real-world attack case studies. Learn investigation techniques, log analysis, and defense strategies to protect cloud-based enterprise environments.
Argus - Debugging Performance Issues in Modern Desktop Applications with Annotated Causal Tracing
Innovative tool for debugging performance issues in desktop applications, using annotated causal tracing to model ambiguities and efficiently diagnose root causes of slowdowns.
Automated Operating System and Environment Certification at LinkedIn - Reducing Toil and Increasing Velocity
Automated OS certification at LinkedIn: Reducing toil, increasing velocity. Discusses project evolution, challenges, and early results in enhancing certification processes across data centers and Azure.
Keepers of the Machines - Examining How System Administrators Manage Software Updates
Examining system administrators' software update management practices, challenges, and potential improvements for multiple machines to enhance organizational cybersecurity.
DNSControl - A DSL for DNS as Code from StackOverflow.com
Explore DNSControl, a DNS DSL and compiler enabling DevOps practices for DNS management. Learn how StackOverflow.com automates complex configurations, simplifies updates, and enhances reliability.
Speeding Up Linux Disk Encryption
Explore techniques to optimize Linux disk encryption performance, focusing on dm-crypt architecture and potential improvements for faster transparent data protection.
Network Fault Finding System - Packet Loss Triangulation
Discover how Facebook's active probing system detects network faults in real-time, even in deep layers. Learn to build a similar system using open-source tools and see a live demo.
LXDs - Towards Isolation of Kernel Subsystems
Explores Lightweight Execution Domains (LXDs) as a solution for isolating kernel subsystems, enhancing security by confining potential exploits without significant modifications or performance impact.
When - Bin - Sh Attacks - Revisiting Automate All the Things
Explores challenges and impacts of pervasive automation in SRE, discussing human factors, potential harm, and strategies for effective implementation in complex socio-technical systems.
Lessons Learned from a Ransomware Attack
Comprehensive analysis of a real-world ransomware attack on a school district, covering timeline, damage, recovery, and preventive measures for future cybersecurity preparedness.
Graph Based Detection and Response with Grapl
Explore graph-based security analytics with Grapl, leveraging Python for powerful attack detection, behavior analysis, and streamlined investigations in complex environments.
When Lightning Strikes Thrice - Breaking Thunderbolt 3 Security
Explore Thunderspy attacks that compromise Thunderbolt security, revealing vulnerabilities in device authentication and DMA protection across Thunderbolt 1, 2, and 3 interfaces.
ChaosDB - How We Hacked Databases of Thousands of Azure Customers
Uncover the critical ChaosDB vulnerability in Azure Cosmos DB, allowing unauthorized access to thousands of customer databases. Learn about the discovery, exploitation, and implications of this unprecedented cloud security flaw.
What the Log - So Many Events, So Little Time
Explore Windows Event Log for efficient adversary detection, leveraging automation and MITRE ATT&CK framework to enhance cybersecurity monitoring and response capabilities.
Dynamic Process Isolation
Explore cloud computing security with in-process isolation techniques, addressing vulnerabilities in shared hardware resources while maintaining high performance.
Abusing Windows Management Instrumentation - WMI
Explore WMI's potential for stealthy, persistent attacks on Windows systems. Learn offensive techniques, backdoor creation, and defense strategies against WMI-based threats.