Restarting: fridges, shelves and PHP
Why I moved my writing off Medium, and three incidents from the last few weeks that stuck with me: hacked supermarket fridges, the Albert Heijn outage and PHP2Shell.
2 min
Tag: Cybersecurity
Posts
8 entriesAnxAIity? Keep calm and carry a layered defense.
Staying calm about AI-driven threats by relying on layered defence rather than on any single control.
Using a Yubikey As Multi-Factor Authentication for MacOS
Archived guide: using a YubiKey as second factor for macOS login on unmanaged devices. Deprecated since July 2023.
How To Detect Remote Desktop Protocol tunneling over SSH
How RDP tunnelled over SSH shows up in logs and network traffic, and how to detect it.
Threat Hunting Toolset and Operational Security Considerations
Building an open source threat hunting toolset, and the opsec that keeps the adversary from noticing you are hunting.
Dealing With Advanced Windows Defender Bypass Attempts
Detecting C2 traffic and fileless malware when Defender is bypassed, and what to harden on the endpoint and in PowerShell.
Analysing A Security Alert 101
How I work through a security alert: what to check first, what context to pull in, and when to escalate.
An Introduction To Security Monitoring With Open Source Software
Security monitoring does not need a SOC contract or a commercial SIEM. What open source software gets you when you start from zero visibility.