Passive Recon through ExifTool, Social Engineering and WiGLE
ExifTool is an application for reading and modifying multimedia files such as images. Information contained in an image can be a starting point for pe…
A beginner's technology guide
Understand the tech behind the things you use.
Clear, practical explainers for cloud computing, cybersecurity, and system administration—without the unnecessary jargon.
Latest guides
Search Engine Indexing, SEO and Search Techniques
This Medium write-up uses a TryHackMe room and a WordPress Content Management System (CMS) to explore search engine indexing, SEO mechanism and the us…
Understanding Active Directory (AD) and Group Policy
Active Directory (AD) provides centralized authentication and authorization of users and computers on a network. It manages user credentials and permi…
Investigate a Compromised Exchange Server using SIEM and Sysmon
Microsoft Exchange Server is commonly deployed in an enterprise, offering email, contact management, calendar, scheduling services, and more. As Micro…
Investigate Attack Patterns using SIEM, Sysmon Utility and MITRE ATT&CK
In the “ New Hire Old Artifacts ” TryHackMe room, we can investigate a cyber incident using SIEM software — Splunk. The logs provided to Splunk were g…
Investigate Cyber Attacks through OSINT
“Juicy Details” TryHackMe Room simulates the aftermath of a cyber-attack where a SOC analyst is tasked with analyzing the attack patterns from log fil…
Using Threat Intelligence Tools to Investigate Cyber Attacks
TryHackMe Room: https://tryhackme.com/room/threatinteltools Threat intelligence tools allow us cyber security professionals to analyze security incide…
An Introduction to using Splunk for Malware Analysis
Splunk is one of the most widely used SIEM tools in enterprises. It offers centralized log management and analytics. Based on the log data collected b…
An Overview of SIEM and Log Management
Security Information and Event Management system (SIEM) software offers centralized log management and analytics. This article is an extension of a Tr…
The Diamond Model — A Methodology for Analyzing Cyber-Attacks
The Diamond Model — A Methodology for Analyzing Cyber-Attacks The Diamond Model helps identify attributes of an intrusion. It analyzes cyber-attacks a…
Configure Ubiquiti L2TP VPN and Split Tunneling
A series of Ubiquiti routers can act as a VPN server, which are also known as UniFi Gateway. UniFi Gateway supports Layer 2 Tunneling Protocol (L2TP) …
Cryptography: Concepts and Examples
Cryptography involves many topics and theories. This article covers topics including Symmetric Encryption Algorithms (also known as block ciphers), Ha…
Vulnerability Management with Nmap and Netdiscover
Nmap is a network scanning tool often used for vulnerability management. It can discover hosts and services on subnets accessible by the scanner. Thro…
Threat Management: Concepts and Examples
Threat Management helps organizations manage risks and comply with industrial standards and regulations. It includes identifying threats, formulating …
How to Protect and Encrypt Files using VeraCrypt
Using VeraCrypt, you can easily protect important files. This open-source software allows you to protect your files with passwords. You can create an …
How to Perform Network Speed Test with iPerf3
iPerf3 helps you scientifically perform a network speed test. It is available to install on Windows, Linux, and macOS devices. This article explores h…