Mitre ATT&CK Technique ID Data from Cloud Storage Object T1530 Buckets? S3 buckets, first introduced in 2006, is one of Amazon Web Services' most …
Mitre ATT&CK Technique ID Account Discovery: Domain Account T1087.002 Active Directory is a platform that has received plenty of attention from ad…
Password Spraying Mitre ATT&CK Technique ID Brute Force: Password Spraying T1110.003 Password spraying is the process of brute-force guessing pass…
Kerberoasting Mitre ATT&CK Technique ID Steal or Forge Kerberos Tickets: Kerberoasting T1558.003 What is it? Kerberoasting is the attack that keep…
Pass the Hash Mitre ATT&CK Technique ID Use Alternate Authentication Material: Pass the Hash T1550.002 What is it? Passing the hash is a technique…
Mitre ATT&CK Technique ID Unsecured Credentials: Cloud Instance Metadata API T1552.005 The AWS Metadata service facilitates information access for…
ScoutSuite Introduction ScoutSuite is a multi-cloud security auditing tool written by the wonderful folks over at NCC group. We use it heavily here at…
In modern web applications, almost all functionality offered to users is handled by an Application Programming Interface or API for short. To help vis…
This is the second blog post covering NISTIR 8259 and securing IoT devices . If you missed it, be sure to check out part 1 where we cover the “pre-mar…
How IoT device manufacturers can use guidance from NISTIR 8259 to secure the IoT devices of tomorrow. The growing footprint of the Internet of Things …
The things that go through a security professional’s head during a regular doctor's visit, why they matter to the healthcare industry, and why they sh…
A quick explanation of one of the most influential and misconfigured computing utilities.