1 day agoDevOps PipelineWhat is DevOps DevOps is a set of cultural concepts, practices, and technologies that improves an organization’s capacity to produce high-velocity applications and services, allowing it to evolve and improve products at a faster rate than traditional software development and infrastructure management methods.This …Dev Ops7 min read
May 13Popular Cybersecurity FrameworksThe purpose of this article is to provide security professionals with a foundational understanding of management practices needed for effective cybersecurity. To that end, this article makes extensive use of standards and best practices documents that have broad support and are used to guide — and in many cases require…Cybersecurity7 min read
May 6HOW I GOT ACCESS OF A VULNERABLE SITE THROUGH SESSION HIJACKINGWhat is a session? It is an event assigned by servers to every new request sent to them from any new client seeking access to servers’ services. …Vulnerability Management6 min read
Apr 22Data Exfiltration on CloudData exfiltration is defined as when an unauthorized person extracts data from the secured systems where it belongs, and moves it to insecure or unauthorized systems. Data exfiltration on cloud could therefore mean the unauthorized movement of data from cloud resources. …Data Exfiltration7 min read
Apr 8Introduction to Package Management in LinuxOften Linux users need to install additional software (applications) to use in their day-to-day Linux activities. Linux bundles these applications and files needed to run them as packages. Various Linux distributions have different package management systems which more of work on the same concepts according to my experience. This article…Linux11 min read
Apr 1Digging into the PwnKit Vulnerability.What if I told you, there has been a rather unnoticed vulnerability within most, if not all, Linux operating systems for over 10 years!? …Cybersecurity6 min read
Mar 25Cyber Risk Quantified is Cyber Risk Managed.Introduction According to the Center for Strategic and International Studies, the websites of the Ukrainian Cabinet of Ministers and Ministries of Foreign Affairs, Infrastructure, and Education were disrupted in the days before Russian troops invaded Ukraine. Wiper Malware was also used to penetrate the networks of one of Ukrainian financial…Shehacks4 min read
Mar 11Installation of Wazuh Agent, Sysmon and Shipping of Logs to the Wazuh Manager on (Jira)What is wazuh agent? The Wazuh agent is multi-platform and runs on the hosts that the user wants to monitor. It communicates with the Wazuh manager, sending data in real time through an encrypted and authenticated channel. What is sysmon? System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system…Wazuh6 min read
Feb 25Setting up an AWS VPCWhat is a VPC Amazon Virtual Private Cloud (Amazon VPC) is a service that lets you launch AWS resources in a logically isolated virtual network that you define. You have complete control over your virtual networking environment, including selection of your own IP address range, creation of subnets, and configuration…AWS5 min read
Feb 18LOG ANALYSIS AND LOG VIEWING WITH WAZUHWhat is log analysis? This is a process in which a security analyst reviews, interprets and tries to get an understanding of computer generated records called logs. Logs are generated by a couple of programmable technologies, this include: networking devices, operating systems, servers and many more. A log consists of a series of messages…Wazuh Manager8 min read
