Topic Replies Views Activity
X86 - the 32 bit assembly workflows you need in Information Security for Malware Analysis and Exploit Development
wiki
coding ,  malware-analysis ,  ia32 ,  reverse_engineering ,  offdev ,  asm ,  x86_32

It's not about reading CISC, it's about the flows In Exploit Development and Malware Analysis, it’s not about reading assembly. It’s about understanding and directing the control flow. That is valuable. Who needs all the…

2 4241 August 26, 2021
How to rock at Serverless - from beginner to Knative and Kubeless
blog
automation ,  coding ,  cloud ,  devops ,  linux ,  jenkins ,  java ,  javascript ,  spring ,  react ,  serverless ,  micro-services ,  python ,  kubernetes ,  knative

This is a hands-on lab guide for engineers. It assumes some experience but there are a lot of links and annotations. How to rock at Serverless - from beginner to Knative and Kubeless Motivation: building services…

2 2002 August 26, 2021
Technical Compliance - Enterprise Security beyond silos, gimmicks and paper shields
wiki
compliance ,  iso-27001 ,  security_management ,  risk_management ,  bsi-standards ,  vda-tisax ,  nist ,  gdpr ,  pci-dss

This is an intermediate level Wiki article about Information Security compliance. The InfoSec vs. Compliance FAQ section at the end is opinionated as well. Sub-sections deal with the integration points between an ISMS…

2 566 August 26, 2021
Machine Learning is a multi-year journey - Wiki essay
public-wiki-drafts
machine-learning ,  automation ,  statistics ,  coding ,  python ,  data_science ,  scikit ,  supervised_learning ,  unsupervised_learning ,  artifical_intelligence ,  estimation-theory
0 197 May 6, 2021
VMware ESXi remote code execution - steps to defend your systems (CVE-2020-3992)
blog
esxi ,  vmware ,  linux ,  ovirt
1 337 June 1, 2021
A technical look a Horusec - OpenSource Risk-driven Application Security for DevOps (SAST / DAST / CAST)
tech-notes
sast ,  dast ,  cast ,  jenkins ,  continuous-integration ,  containers ,  code-reviews ,  coding ,  devops
1 738 May 19, 2021
Network Security Monitoring - Threat Hunting Snippets
Snippets
threat-hunting ,  zeek ,  network_forensics ,  linux ,  rita ,  passer
0 426 May 16, 2021
Pf-dup on a PfSense gateway for separate distributed IDS sensors
blog
intrusion-detection ,  openbsd ,  pfsense ,  linux ,  suricata ,  esxi ,  vmware ,  zeek ,  cnc ,  lab-building
1 833 May 16, 2021
KubeCon + CloudNativeCon Europe 2021+ Pipeline hack - my wrap-up
blog
compliance ,  security_management ,  devops ,  kubernetes ,  linux ,  information_management ,  infosec_con
1 289 May 14, 2021
Discourse as a blog / knowledge base since Nov 2015. Documentation is not boring
blog
editorial ,  discourse-app ,  information_management
1 342 May 3, 2021
Active Directory - advanced topics - Wiki
public-wiki-drafts
windows-environment ,  cloud ,  active-directory
1 59 April 29, 2021
CentOS 7 on a Lenovo T480 in an enterprise environment
wiki
linux-desktop ,  linux ,  centos
1 1061 April 29, 2021
Rate limiting (Technitium) DNS with pfSense (Community Edition)
blog
dns ,  firewall ,  network-engineering ,  pfsense
1 862 April 29, 2021
AWS Security Reviews with the command-line
Snippets
automation ,  aws ,  cloud
1 163 April 29, 2021
Elasticsearch API and Python - JSON in, garbage out
wiki
elasticsearch ,  python ,  jupyter ,  graphs ,  pandas ,  networkx ,  data_science ,  log_management ,  siem
1 1500 April 29, 2021
How to use ssh ProxyCommands on Windows 10 from Powershell
blog
ssh ,  windows-environment ,  linux ,  openbsd
1 8403 April 29, 2021
Motivation for Risk Analysis to improve Risk Management? Or do we just manage the chaos?
blog
iso-27005 ,  iso-27001 ,  fair ,  iso-31000 ,  data_science ,  compliance ,  security_metrics
1 543 April 29, 2021
Quick-tipp: Windows Group Policy for Software Restrictions in suspicious folders
tech-notes
windows-environment ,  active-directory ,  group-policies ,  quick-tipp
1 510 April 29, 2021
Quick-tipp: use Online file systems from WSL 1 (Ubuntu on Windows 10)
tech-notes
quick-tipp ,  windows ,  wsl_1
1 502 April 29, 2021
Linux Software-Security - practical things
public-wiki-drafts
linux ,  aslr ,  gdb ,  abi ,  unix ,  c ,  coding
1 208 April 29, 2021
InfoSec Jupyterthon (May 2020) - links
wiki
threat-hunting ,  coding ,  python ,  jupyter ,  infosec_con
1 399 April 29, 2021
Autopsy - lab notes (hands on Blue Team)
public-wiki-drafts
forensics ,  incident_response ,  autopsy
1 271 April 29, 2021
Web Security basics: Third-Party assets and Application Security
wiki
web_apps ,  appsec ,  build-system ,  supply-chain
1 401 April 29, 2021
Quick-tipp: use Eclipse Theia as a Cloud-IDE like a web-version of VScode
tech-notes
quick-tipp ,  private_cloud ,  coding
1 690 April 29, 2021
Real World Java Security
public-wiki-drafts
appsec ,  java ,  coding ,  sast ,  sdlc
1 408 April 29, 2021
C++ Reverse Engineering - concepts and tools - Ghidra and WinDbg Preview
wiki
c ,  cpp ,  reverse_engineering ,  ghidra ,  radare ,  x86_32 ,  x86_64 ,  arm ,  windbg
1 6186 April 29, 2021
CodeQL - experiential notes for code audits, bug-hunts and CI/CD
public-wiki-drafts
vulnerability-discovery ,  sast ,  code-reviews ,  coding ,  variant-analysis ,  java ,  spring
1 2468 April 29, 2021
Ghidra Wiki
wiki
java ,  malware-analysis ,  reverse_engineering ,  ghidra
1 22841 April 29, 2021
WinDBG Preview
wiki
windbg ,  debugging
1 1356 April 29, 2021
Linux Without Borders, Edition 2 (Feb 2020): Windows Subsystem for Linux, X Window System and Remote Desktop Protocol - thin client experiences for lean DevOps teams
blog
linux-desktop ,  windows-environment ,  linux ,  x11 ,  rdp ,  gloss
1 1132 April 29, 2021