How to run Security Operations on a budgetIntroduction The objective of this blog post is to offer helpful guidance to small businesses and non-profit organisations that are categorised under the "Cyber Security Poverty Line." These entities often lack adequate financial and human resources ...Mar 18, 2023 · 7 min readadamonsecurity.hashnode.dev
How to operationalise the MITRE ATT&CK framework for SOCsThe MITRE ATT&CK framework provides a comprehensive and standardized approach to mapping the tactics, techniques, and procedures (TTPs) used by attackers during different stages of an attack. However, simply having access to the framework is not enou...Feb 18, 2023 · 2 min readadamonsecurity.hashnode.dev
Improve your GitHub security with these stepsGitHub has become an essential platform for developers to collaborate, share, and manage code. With millions of users and repositories, it's critical to ensure the security of the platform. Unfortunately, over the years, there have been several high-...Feb 18, 2023 · 5 min readadamonsecurity.hashnode.dev
6 ways to obtain a PCAP for Attack SimulationI started to think about the different ways one could obtain a PCAP to replay malicious traffic on their network while I was using AttackIQ’s tool for Breach & Attack Simulation. Aside from the out-the-box scenarios provided by AttackIQ to test netwo...Jan 10, 2023 · 3 min readadamonsecurity.hashnode.dev
Extracting a Canary Token from a PDFIntroduction This blog post will focus on PDF files that have been created with a Canary Token embedded. Although this is a legitimate tool, it could also be utilised by an attacker to conduct reconnaissance on a target. If you suspect that someone m...Jan 1, 2023 · 4 min readadamonsecurity.hashnode.dev