Collaborate Disseminate
Gatekeepers Pigeonholed My Dreams
Katrina K.
Feb 11
Naysayers claimed I would not be well-suited to pursue a role in STEM — look at me now!
I have always loved computers, video games, and messing… Continue reading Guest Post – Katrina K.
Nmap is the most well known and most used port scanner in existence. It’s not the fastest.. MassScan and UnicornScan are much faster. Masscan is a duplex scanner, using one port to send packets and another to listen for responses. However, nmap h… Continue reading Nmap for Beginners – Part 1
Much of our defensive architecture today is based on the ability to extract indicators of compromise from logs, packet data and flow data and the monitoring of processes on the system. While this is good, to work through the enormous amounts of alerts … Continue reading Behavioral analysis versus artifacts/IOC’s
I’ve previously posted this, but I am moving back over to the Blue Team and thought it might be helpful for new analysts. Dusted off and updated where needed.
Mining Packets Via The Command Line
If you’re considering becoming an intrusion analyst, ther… Continue reading Mining Packets Via The Command Line (Repost)
Everyone in NetSec knows of, or has at least heard of netcat, the brainchild of Hobbit, written in 1995 and ported to Windows by Weld Pond in 1998. It’s called the “TCP/IP Swiss Army Knife of Networking” for good reason. You can create just about any t… Continue reading Netcat and Ncat
While a co-worker basks in sunny Hawaii, I’ve taken over his task of sending out a short email with information security news. Never one to waste keystrokes, thought I’d post the briefings here as well.
Information Security News for January 25, 2018
I moved from Desktop Supervisor to Network Security in 2000. I did Blue Team for two companies from 2000 until early this year. At that point I was given an opportunity to move to Red Team as the company’s in-house penetration tester. Starting in a new… Continue reading Transitioning from Blue Team to Red Team
Nice site at https://gchq.github.io/CyberChef/ – Allows you to do all sorts of conversions of data format, generate encoding and encryption, parse network data, extract strings, IPs, email addresses, etc., analyze hashes and a lot more. Continue reading Cyber Chef
If you weren’t fortunate to get a ticket to DerbyCon this year, the conference will once again be live streaming talks. More information will be available closer to the conference at www.derbycon.com.But did you know every talk (almost) is also availab… Continue reading DerbyCon 7 Live Stream
Some things are so obvious things after they are pointed out to you.Go to a web site that requires a login. Put in any username with any password. Did the page come back with both the User and Password fields blank? Now put YOUR username in, but with s… Continue reading Simple Username Harvesting (from SANS SEC542)