Collaborate Disseminate
I’m currently trying to figure out the best way to configure Windows PowerShell logging, so that
it is secure (Attackers cannot gain sensitive data out of it)
it helps in DFIR (digital forensic and incident response) cases
… Continue reading How should you configure PowerShell logs permissions?
What would be the secure or preferred browsers used by the information security professionals/ analysts or recommended by pen testers etc. Browsers or browser settings or browser hardening applied etc.
Continue reading What are some of the browsers used by information security professionals? [on hold]
Is this possible? If not through ufw then some other software or iptables? How should I set up the ip tables?
Assuming my public ip is known (and I don’t want to change it), would it provide complete security against hacking… Continue reading For security purposes, can I use vpn with ufw to allow traffic only from the vpn on ubuntu?
It is possible to make Server respond with irrelevant data if it is scanned with Nmap? If yes, are there any examples of such SW?
Continue reading Hardening against Nmap and other network scanners
I am trying to develop a custom plugin for Lynis and followed the instructions here:
I created a custom plugin from the plugin template (custom_plugin.template)
I provided a test name and registered the plugin using the nam… Continue reading How to enable custom Lynis plugins
We are upgrading to RHEL 7.6. My Nessus scanner is giving me the following message:
2.2.3.c-d Mandatory Review Required: Find unauthorized SUID/GUID System Executables
RHEL7 SSGv0.1 2.2.3 Unauthorized SUID/GUID executables
/u… Continue reading RHEL7 SSGv0.1 2.2.3 Unauthorized SUID/GUID executables
Leather hardening has been around for such a long time that one might think that there was little left to discover, but [Jason F. Timmermans] certainly showed that is not the case. Right around the end of 2018 he set up experiments to compare different techniques for hardening leather, and …read more
Continue reading Loads of Testing Yields New, Reliable, and Cheap Leather Hardening Technique
I am hardening CentOS/RHEL 7.6. The hardening documents recommend disabling the automounter, “unless it is necessary.”
Why is autofs such a problem?
One of the benefits of networking is a shared file system. What other alternatives are the… Continue reading Why is autofs insecure?
I want to use my laptop to connect to a public WiFi in a library but…
I have strong security in my Windows host machine (comodo firewall using a public network settings and rules, protocols disabled, limited privileges acc… Continue reading Can I use a virtual machine to connect to a public WIFI to use Internet by totally isolating the host from it?
A comment from another user had me thinking. What are some well-known (or perhaps not quite so) examples of in-the-wild “malicious” software that do nothing actually malicious, but instead takes advantage of security vulnerab… Continue reading What are some examples of viruses/exploits with benevolent purposes?