Today’s cybersecurity operations center (CSOC) should have everything it needs to mount a competent defense of the ever-changing information technology (IT) enterprise. This includes a vast array of sophisticated detection and prevention technologies, a virtual sea of cyber intelligence reporting, and access to a rapidly expanding workforce of talented IT professionals.

(more…)

The principal goal of an organization’s risk management process should be to protect the organization and its ability to perform their mission, not just its IT assets.
Risk is the net negative impact of the exercise of vulnerability, considering both the probability and the impact of occurrence. Risk management is the process of identifying risk, assessing risk, and taking steps to reduce risk to an acceptable level.

(more…)

The Red Team Field Manual (RTFM) is a no fluff, but thorough reference guide for serious Red Team members who routinely find themselves on a mission without Google or the time to scan through a man page. The RTFM contains the basic syntax for commonly used Linux and Windows command line tools, but it also encapsulates unique use cases for powerful tools such as Python and Windows PowerShell.

(more…)

Application programming interfaces (APIs) inspire innovation and create new business opportunities. They slice through barriers to change by inviting more people to contribute to success and helping forward-thinking companies stand out from the competition.
To put it relatively simply, APIs are sets of requirements that govern how one software application can communicate and interact with another. But the truth is, APIs are far more than bits and bytes.

(more…)

High-value penetration testing involves modeling the techniques used by real-world computer attackers to find vulnerabilities, and, under controlled circumstances, to exploit those flaws in a professional, safe manner according to a carefully designed scope and rules of engagement. This process helps to determine business risk and potential impact of attacks, all with the goal of helping the organization improve its security stance.

(more…)