--- title: "#securityengineering articles | Hashnode" description: "Explore 14 articles tagged #securityengineering on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/securityengineering" --- Tag # #securityengineering 14 posts · 1 followers [victor nkereuwem](https://hashnode.com/@iameskor) · [Oct 17](https://hashnode.com/posts/what-i-found-inside-a-forensic-disk-image-using-autopsy-zimmerman-tools/6ad401f3be7216ec405532f5) ### [What I Found Inside a Forensic Disk Image Using Autopsy & Zimmerman Tools](https://iameskor.hashnode.dev/what-i-found-inside-a-forensic-disk-image-using-autopsy-zimmerman-tools?utm_source=hashnode&utm_medium=feed) Step-by-step DFIR analysis of the 2020JimmyWilson.E01 disk image using Autopsy & Zimmerman tools to uncover insider exfiltration and chain of custody 3 min read · [iameskor.hashnode.dev](https://iameskor.hashnode.dev/what-i-found-inside-a-forensic-disk-image-using-autopsy-zimmerman-tools?utm_source=hashnode&utm_medium=feed) [Anonymous Endpoint](https://hashnode.com/@anonymousendpoint) · [Sep 2](https://hashnode.com/posts/mcp-connectors-agent-interfaces-security-teams/6a980c741ad16ce96037ff59) ### [MCP Connectors Are Becoming Agent Interfaces: What Security Teams Need to Know](https://cyberpod.hashnode.dev/mcp-connectors-agent-interfaces-security-teams?utm_source=hashnode&utm_medium=feed) Learn how MCP connectors are evolving into agent interfaces, enabling AI agents to access security tools, data, and workflows more effectively. 7 min read · [cyberpod.hashnode.dev](https://cyberpod.hashnode.dev/mcp-connectors-agent-interfaces-security-teams?utm_source=hashnode&utm_medium=feed) [Mira Ezz-Eldin](https://hashnode.com/@mira3zzeldin) · [Aug 15](https://hashnode.com/posts/security-principles-trust-is-not-a-feeling/6a0c6d3a883727741159737c) ### [Security Principles - Part I: Trust Is Not a Feeling](https://rootshadow.hashnode.dev/security-principles-trust-is-not-a-feeling?utm_source=hashnode&utm_medium=feed) Learn why secure systems verify evidence instead of trusting claims, through lessons from a biometric fintech wallet and Zero Trust design. 10 min read · [rootshadow.hashnode.dev](https://rootshadow.hashnode.dev/security-principles-trust-is-not-a-feeling?utm_source=hashnode&utm_medium=feed) [ZeroProtocol](https://hashnode.com/@zeroprotocol) · [Aug 13](https://hashnode.com/posts/common-web-application-technologies/6a7e0e84bc892488c6743968) ### [Common Web Application Technologies](https://webpentestingdeepdive.hashnode.dev/common-web-application-technologies?utm_source=hashnode&utm_medium=feed) Learn how Java, ASP.NET, PHP, Rails, SQL, XML, and SOAP work in web applications and where security weaknesses can appear during web pentesting. 7 min read · [webpentestingdeepdive.hashnode.dev](https://webpentestingdeepdive.hashnode.dev/common-web-application-technologies?utm_source=hashnode&utm_medium=feed) [Nova](https://hashnode.com/@novacont) · [Aug 4](https://hashnode.com/posts/regulation-is-not-a-security-control/6a717910005418a0800475e1) ### [Regulation Is Not a Security Control](https://novacont.hashnode.dev/regulation-is-not-a-security-control?utm_source=hashnode&utm_medium=feed) Learn why compliance and regulation don't prevent cyber attacks, and why security controls must exist before an incident occurs. 6 min read · [novacont.hashnode.dev](https://novacont.hashnode.dev/regulation-is-not-a-security-control?utm_source=hashnode&utm_medium=feed) [Manuela Schrittwieser](https://hashnode.com/@neuralstackms) · [Jun 17](https://hashnode.com/posts/rag-under-fire-retrieval-pipeline-vulnerabilities-indirect-prompt-injection/6a326413624edc7d6999b70a) ### [RAG Under Fire: Retrieval Pipeline Vulnerabilities & Indirect Prompt Injection](https://neuralstackms.tech/rag-under-fire-retrieval-pipeline-vulnerabilities-indirect-prompt-injection?utm_source=hashnode&utm_medium=feed) NeuralStack | MS Tech Blog – Databases & Data Engineering in AI Security Engineering, Part 3 of 4 The Retrieval Pipeline as a Trust Boundary Retrieval-Augmented Generation (RAG) is now the dominant a 14 min read · [neuralstackms.tech](https://neuralstackms.tech/rag-under-fire-retrieval-pipeline-vulnerabilities-indirect-prompt-injection?utm_source=hashnode&utm_medium=feed) [Brian Olson](https://hashnode.com/@brianolson) · [Mar 28](https://hashnode.com/posts/from-operations-to-leadership-what-19-years-in-cybersecurity-actually-taught-me/69c7e4727cf2706510230306) ### [From Operations to Leadership: What 19 Years in Cybersecurity Actually Taught Me](https://www.hurrikane.net/from-operations-to-leadership-what-19-years-in-cybersecurity-actually-taught-me?utm_source=hashnode&utm_medium=feed) The technical skills that compound, the people skills nobody warns you about, and the shift from doing to multiplying your impact. 13 min read · [hurrikane.net](https://www.hurrikane.net/from-operations-to-leadership-what-19-years-in-cybersecurity-actually-taught-me?utm_source=hashnode&utm_medium=feed) [Nguyễn Việt Tùng](https://hashnode.com/@nvtung) · [Feb 19](https://hashnode.com/posts/passwordless-what-worked-what-didnt-what-id-change/6996802b0b8ae0611c70fde8) ### [Passwordless: What Worked, What Didn’t, What I’d Change](https://devpath-traveler.nguyenviettung.id.vn/passwordless-what-worked-what-didnt-what-id-change?utm_source=hashnode&utm_medium=feed) Production lessons from building a passwordless-first PWA with WebAuthn, Feide OIDC, and ASP.NET Core 5 min read · [devpath-traveler.nguyenviettung.id.vn](https://devpath-traveler.nguyenviettung.id.vn/passwordless-what-worked-what-didnt-what-id-change?utm_source=hashnode&utm_medium=feed) [Sesank Munukutla (Naga)](https://hashnode.com/@nagasesank) · [Feb 1](https://hashnode.com/posts/project-5-zero-trust-ec2-access-in-aws-using-iam-ssm-cloudtrail-and-guardduty/697f810f634c7aaada25c771) ### [🔐 Project 5: Zero-Trust EC2 Access in AWS Using IAM, SSM, CloudTrail, and GuardDuty](https://fridaysecurity.hashnode.dev/project-5-zero-trust-ec2-access-in-aws-using-iam-ssm-cloudtrail-and-guardduty?utm_source=hashnode&utm_medium=feed) Introduction SSH has been the default way to access Linux servers for decades. In cloud environments like AWS, however, SSH introduces unnecessary risk: static keys, open network ports, weak identity attribution, and poor auditability at scale. In th... 5 min read · [fridaysecurity.hashnode.dev](https://fridaysecurity.hashnode.dev/project-5-zero-trust-ec2-access-in-aws-using-iam-ssm-cloudtrail-and-guardduty?utm_source=hashnode&utm_medium=feed) [Sesank Munukutla (Naga)](https://hashnode.com/@nagasesank) · [Jan 17](https://hashnode.com/posts/project-3-implementing-and-testing-security-controls-in-a-real-cloud-environment/696a14cfa231df1fb1d0db34) ### [🔐 Project 3: Implementing and Testing Security Controls in a Real Cloud Environment](https://fridaysecurity.hashnode.dev/project-3-implementing-and-testing-security-controls-in-a-real-cloud-environment?utm_source=hashnode&utm_medium=feed) 📌 Why This Project Matters Security controls appear perfect on paper — until real-world traffic, misconfigurations, and human errors expose the gaps. In Project 3, I focused on implementing core cloud security controls and then actively testing them... 3 min read · [fridaysecurity.hashnode.dev](https://fridaysecurity.hashnode.dev/project-3-implementing-and-testing-security-controls-in-a-real-cloud-environment?utm_source=hashnode&utm_medium=feed)