blog - because-security

Topic	Replies	Views	Activity
Access as a process - purpose-based Access - Zero Trust for the rest of us blog agile , automation , compliance , zero-trust , security_management Access as a process - purpose-based Access - Zero Trust for the rest of us In recent years tech-focused companies started to consolidate their development and operations organizations. Some followed the DevOps scheme m…	2	1006	August 27, 2021
Because Security - Recent topics (October 2022) updates python , active-directory , windows-environment , pandas , appsec , data_science , log-analysis , log_management	0	149	October 28, 2022
A show-case of concurrent swapped security event enrichment with Modin (Pandas-style), Python, and mapping from a CSV - Pivot tables tech-notes python , coding , data_science , pandas , continuous-integration , automation	0	116	October 27, 2022
Cloudflare Enterprise Web Application Firewall (WAF) Logs - event enrichment techniques using Python Pandas and tabular correlation tech-notes log_management , log-analysis , coding , log-parsers , data_science , splunk , cloudflare , elasticsearch , pandas	0	197	October 14, 2022
Make Application Security DevOps-friendly, continuous, manageable and keep it simple: GitHub Advanced Enterprise Security to Action(s) tech-notes pandas , linux , cast , python , data_science , security_management , sast , continuous-integration , software-testing , appsec , codeql , coding , automation , github	0	153	May 31, 2022
VMware ESXi remote code execution - steps to defend your systems (CVE-2020-3992) blog vmware , esxi , ovirt , linux	1	504	June 1, 2021
A technical look a Horusec - OpenSource Risk-driven Application Security for DevOps (SAST / DAST / CAST) tech-notes jenkins , cast , dast , sast , devops , coding , code-reviews , containers , continuous-integration	1	1134	May 19, 2021
Pf-dup on a PfSense gateway for separate distributed IDS sensors blog cnc , intrusion-detection , openbsd , pfsense , linux , suricata , esxi , vmware , zeek , lab-building	1	1237	May 16, 2021
KubeCon + CloudNativeCon Europe 2021+ Pipeline hack - my wrap-up blog devops , compliance , infosec_con , linux , kubernetes , security_management , information_management	1	402	May 14, 2021
Discourse as a blog / knowledge base since Nov 2015. Documentation is not boring blog information_management , editorial , discourse-app	1	481	May 3, 2021
Rate limiting (Technitium) DNS with pfSense (Community Edition) blog firewall , pfsense , network-engineering , dns	1	1379	April 29, 2021
How to use ssh ProxyCommands on Windows 10 from Powershell blog windows-environment , linux , openbsd , ssh	1	11181	April 29, 2021
Motivation for Risk Analysis to improve Risk Management? Or do we just manage the chaos? blog iso-27005 , fair , iso-31000 , data_science , compliance , security_metrics , iso-27001	1	714	April 29, 2021
Quick-tipp: Windows Group Policy for Software Restrictions in suspicious folders tech-notes active-directory , group-policies , quick-tipp , windows-environment	1	647	April 29, 2021
Quick-tipp: use Online file systems from WSL 1 (Ubuntu on Windows 10) tech-notes quick-tipp , windows , wsl_1	1	654	April 29, 2021
Quick-tipp: use Eclipse Theia as a Cloud-IDE like a web-version of VScode tech-notes private_cloud , coding , quick-tipp	1	909	April 29, 2021
How to rock at Serverless - from beginner to Knative and Kubeless blog automation , java , linux , knative , spring , coding , cloud , devops , javascript , jenkins , kubernetes , python , micro-services , serverless , react	3	2472	October 15, 2022
Linux Without Borders, Edition 2 (Feb 2020): Windows Subsystem for Linux, X Window System and Remote Desktop Protocol - thin client experiences for lean DevOps teams blog windows-environment , linux , x11 , rdp , gloss , linux-desktop	1	1362	April 29, 2021
Quick-tip: create tickets with the REST API of an on-premise JIRA / JSD using robust Bash functions blog coding , jira , json , bash	1	1200	April 29, 2021
Corelan Win32 Advanced Exploit Development class at BruCon 2019 - the story with 6 months of homework blog rop , incident_response , security_management , offdev , windbg , infosec_con , windows , heap	1	3381	April 29, 2021
What happened at Elbsides (BSides in Hamburg) 2019 blog infosec_con , reverse_engineering	1	554	April 29, 2021
Using Discourse as a Wiki / Knowledge Base - improvements blog discourse-app , information_management , knowledge-base	1	1556	April 29, 2021
Quick-tipp: install Windows 10 updates from Powershell tech-notes basics , automation , quick-tipp , powershell , windows-environment	1	737	April 29, 2021
Next-gen DataScience with Kotlin, Krangl and Graal Substrate VM AOT (Ahead Of Time) blog javascript , data-science , react , cloud , spring , kotlin , graal , krangl , coding	1	1631	April 29, 2021
Small security improvements - zero trust, zero budget, zero time, countless risks blog side-channel-attack , hsts , dnssec , livepatch , pfsense , spf , dkim , vmware , dmarc , arc , security_management , bimi , securitytxt	1	1221	April 29, 2021
Advanced Fuzzing & Crash Analysis (HITB 3-day training, May '19) - personal revue blog offdev , afl , smt , fuzzing , windows , devops , linux	1	1879	April 29, 2021
Getting your favorite Windows laptop ready for a security con - no bullshit guide tech-notes quick-tipp , windows , hardening	1	994	April 29, 2021
Quick-tip: coding with IDE-features and focus - Eclim and NeoVim blog eclipse , coding , vim	1	2023	April 29, 2021
Go and data-frames - JSON reading without mapping - get ready to machine-learn blog docker , cloudflare , golang , data_science , json , coding , superset	1	3091	April 29, 2021
Quick-tip: switch to Java 8 SDK on Mac OS X (2018) blog mac-os-x , java , coding	1	3028	April 29, 2021

Access as a process - purpose-based Access - Zero Trust for the rest of us

Access as a process - purpose-based Access - Zero Trust for the rest of us In recent years tech-focused companies started to consolidate their development and operations organizations. Some followed the DevOps scheme m…

2

1006

August 27, 2021

Because Security - Recent topics (October 2022)

updates

python , active-directory , windows-environment , pandas , appsec , data_science , log-analysis , log_management

0

149

October 28, 2022

A show-case of concurrent swapped security event enrichment with Modin (Pandas-style), Python, and mapping from a CSV - Pivot tables

tech-notes

python , coding , data_science , pandas , continuous-integration , automation

0

116

October 27, 2022

Cloudflare Enterprise Web Application Firewall (WAF) Logs - event enrichment techniques using Python Pandas and tabular correlation

tech-notes

log_management , log-analysis , coding , log-parsers , data_science , splunk , cloudflare , elasticsearch , pandas

0

197

October 14, 2022

Make Application Security DevOps-friendly, continuous, manageable and keep it simple: GitHub Advanced Enterprise Security to Action(s)

tech-notes

pandas , linux , cast , python , data_science , security_management , sast , continuous-integration , software-testing , appsec , codeql , coding , automation , github

0

153

May 31, 2022

VMware ESXi remote code execution - steps to defend your systems (CVE-2020-3992)