Network Discovery Detection: Visualizing Scans in Elastic SIEMLearn how to hunt for internal network discovery tactics and visualize ICMP ping sweeps using raw CLI logs and Elastic SIEM (Kibana)4 min read·kay-security-labs.hashnode.devSep 29
Why CVSS Isn't a Measure of RiskA high CVSS score doesn't always mean high risk. Learn the difference between severity and risk, and how the NVD actually scores vulnerabilities.4 min read·kay-security-labs.hashnode.devSep 15
Beyond Checkbox ComplianceWhat QSAs Wish You Knew About PCI DSS Compliance is often treated as a once a year fire drill. Organizations scramble to collect evidence, pass the audit, and return to business as usual. But as Secur3 min read·kay-security-labs.hashnode.devSep 12
The Analyst's Guide to OSINT: Mastering GitHub Dorks and SearXNGLearn how to use GitHub Dorks for secret discovery and deploy SearXNG for private, untracked OSINT reconnaissance3 min read·kay-security-labs.hashnode.devSep 10
Task7 Deep-Diving the Unified Kill Chain: Task 7 - Out (Action on Objectives) An adversary’s journey through a network always leads to a final destination: achieving their strategic goal. In the final phase3 min read·kay-security-labs.hashnode.devAug 12