blog - because-security

Topic	Replies	Views	Activity
Access as a process - purpose-based Access - Zero Trust for the rest of us blog automation , agile , compliance , zero-trust , security_management Access as a process - purpose-based Access - Zero Trust for the rest of us In recent years tech-focused companies started to consolidate their development and operations organizations. Some followed the DevOps scheme m…	2	1207	August 27, 2021
Because Security - Recent topics (October 2022) updates appsec , pandas , windows-environment , active-directory , python , log_management , log-analysis , data_science	0	256	October 28, 2022
A show-case of concurrent swapped security event enrichment with Modin (Pandas-style), Python, and mapping from a CSV - Pivot tables tech-notes automation , continuous-integration , pandas , coding , data_science , python	0	271	October 27, 2022
Cloudflare Enterprise Web Application Firewall (WAF) Logs - event enrichment techniques using Python Pandas and tabular correlation tech-notes splunk , cloudflare , elasticsearch , pandas , data_science , log-parsers , log_management , log-analysis , coding	0	444	October 14, 2022
Make Application Security DevOps-friendly, continuous, manageable and keep it simple: GitHub Advanced Enterprise Security to Action(s) tech-notes software-testing , continuous-integration , sast , security_management , data_science , python , cast , linux , github , pandas , automation , coding , codeql , appsec	0	255	May 31, 2022
VMware ESXi remote code execution - steps to defend your systems (CVE-2020-3992) blog esxi , vmware , linux , ovirt	1	626	June 1, 2021
A technical look a Horusec - OpenSource Risk-driven Application Security for DevOps (SAST / DAST / CAST) tech-notes sast , dast , cast , jenkins , continuous-integration , containers , code-reviews , coding , devops	1	1397	May 19, 2021
Pf-dup on a PfSense gateway for separate distributed IDS sensors blog intrusion-detection , openbsd , pfsense , linux , suricata , esxi , vmware , zeek , cnc , lab-building	1	1584	May 16, 2021
Discourse as a blog / knowledge base since Nov 2015. Documentation is not boring blog editorial , discourse-app , information_management	1	629	May 3, 2021
Rate limiting (Technitium) DNS with pfSense (Community Edition) blog dns , firewall , network-engineering , pfsense	1	1767	April 29, 2021
How to use ssh ProxyCommands on Windows 10 from Powershell blog ssh , windows-environment , linux , openbsd	1	12827	April 29, 2021
Motivation for Risk Analysis to improve Risk Management? Or do we just manage the chaos? blog iso-27005 , iso-27001 , fair , iso-31000 , data_science , compliance , security_metrics	1	831	April 29, 2021
Quick-tipp: Windows Group Policy for Software Restrictions in suspicious folders tech-notes windows-environment , active-directory , group-policies , quick-tipp	1	762	April 29, 2021
Quick-tipp: use Online file systems from WSL 1 (Ubuntu on Windows 10) tech-notes quick-tipp , windows , wsl_1	1	843	April 29, 2021
Quick-tipp: use Eclipse Theia as a Cloud-IDE like a web-version of VScode tech-notes quick-tipp , private_cloud , coding	1	1143	April 29, 2021
How to rock at Serverless - from beginner to Knative and Kubeless blog automation , coding , cloud , devops , linux , jenkins , java , javascript , spring , react , serverless , micro-services , python , kubernetes , knative	3	2852	October 15, 2022
Linux Without Borders, Edition 2 (Feb 2020): Windows Subsystem for Linux, X Window System and Remote Desktop Protocol - thin client experiences for lean DevOps teams blog linux-desktop , windows-environment , linux , x11 , rdp , gloss	1	1578	April 29, 2021
Quick-tip: create tickets with the REST API of an on-premise JIRA / JSD using robust Bash functions blog json , bash , coding , jira	1	1345	April 29, 2021
Corelan Win32 Advanced Exploit Development class at BruCon 2019 - the story with 6 months of homework blog windbg , offdev , security_management , incident_response , windows , heap , rop , infosec_con	1	3821	April 29, 2021
What happened at Elbsides (BSides in Hamburg) 2019 blog reverse_engineering , infosec_con	1	693	April 29, 2021
Using Discourse as a Wiki / Knowledge Base - improvements blog discourse-app , knowledge-base , information_management	1	1727	April 29, 2021
Quick-tipp: install Windows 10 updates from Powershell tech-notes quick-tipp , powershell , windows-environment , basics , automation	1	848	April 29, 2021
Next-gen DataScience with Kotlin, Krangl and Graal Substrate VM AOT (Ahead Of Time) blog spring , data-science , kotlin , graal , krangl , coding , javascript , react , cloud	1	1900	April 29, 2021
Small security improvements - zero trust, zero budget, zero time, countless risks blog hsts , dnssec , livepatch , pfsense , spf , dkim , side-channel-attack , vmware , dmarc , arc , security_management , bimi , securitytxt	1	1324	April 29, 2021
Advanced Fuzzing & Crash Analysis (HITB 3-day training, May '19) - personal revue blog fuzzing , smt , windows , devops , linux , offdev , afl	1	2034	April 29, 2021
Getting your favorite Windows laptop ready for a security con - no bullshit guide tech-notes windows , quick-tipp , hardening	1	1118	April 29, 2021
Quick-tip: coding with IDE-features and focus - Eclim and NeoVim blog coding , vim , eclipse	1	2242	April 29, 2021
Go and data-frames - JSON reading without mapping - get ready to machine-learn blog data_science , json , coding , golang , cloudflare , docker , superset	1	3540	April 29, 2021
Quick-tip: switch to Java 8 SDK on Mac OS X (2018) blog java , mac-os-x , coding	1	3197	April 29, 2021
The Cynefin framework to overlay formative security management approaches blog security_management , project_management , audit , influence_models , devops , knowledge-compression , six-sigma , cmmi	1	1467	April 29, 2021

Access as a process - purpose-based Access - Zero Trust for the rest of us

Access as a process - purpose-based Access - Zero Trust for the rest of us In recent years tech-focused companies started to consolidate their development and operations organizations. Some followed the DevOps scheme m…

2

1207

August 27, 2021

Because Security - Recent topics (October 2022)

updates

appsec , pandas , windows-environment , active-directory , python , log_management , log-analysis , data_science

0

256

October 28, 2022

A show-case of concurrent swapped security event enrichment with Modin (Pandas-style), Python, and mapping from a CSV - Pivot tables

tech-notes

automation , continuous-integration , pandas , coding , data_science , python

0

271

October 27, 2022

Cloudflare Enterprise Web Application Firewall (WAF) Logs - event enrichment techniques using Python Pandas and tabular correlation

tech-notes

splunk , cloudflare , elasticsearch , pandas , data_science , log-parsers , log_management , log-analysis , coding

0

444

October 14, 2022

Make Application Security DevOps-friendly, continuous, manageable and keep it simple: GitHub Advanced Enterprise Security to Action(s)

tech-notes

software-testing , continuous-integration , sast , security_management , data_science , python , cast , linux , github , pandas , automation , coding , codeql , appsec

0

255

May 31, 2022

VMware ESXi remote code execution - steps to defend your systems (CVE-2020-3992)