Network Discovery Detection: Visualizing Scans in Elastic SIEMIf you are training for a SOC analyst role knowing what a network scan won't be enough. You have to know exactly what it looks like in the logs and how to hunt for it. I recently tackled the "Network Sep 29 · 4 min readkay-security-labs.hashnode.dev
Why CVSS Isn't a Measure of RiskWhen a new critical CVE drops, security teams often rush to patch any system with a 9.0+ CVSS score. However, prioritizing vulnerability remediation strictly by its Common Vulnerability Scoring SystemSep 15 · 4 min readkay-security-labs.hashnode.dev
Beyond Checkbox ComplianceWhat QSAs Wish You Knew About PCI DSS Compliance is often treated as a once a year fire drill. Organizations scramble to collect evidence, pass the audit, and return to business as usual. But as SecurSep 12 · 3 min readkay-security-labs.hashnode.dev
The Analyst's Guide to OSINT: Mastering GitHub Dorks and SearXNGReconnaissance is the foundation of any successful security operation. Whether you are actively hunting for exposed assets or analyzing threat intelligence, the quality of your data dictates the succeSep 10 · 3 min readkay-security-labs.hashnode.dev
Task7 Deep-Diving the Unified Kill Chain: Task 7 - Out (Action on Objectives) An adversary’s journey through a network always leads to a final destination: achieving their strategic goal. In the final phaseAug 12 · 3 min readkay-security-labs.hashnode.dev