Bharath Narayanasamy

Industrial Control Systems: PLC, DCS and SCADA

Industrial Control Systems: PLC, DCS and SCADA – CISSP Domain 3 Study Guide | NetwerkLABS NetwerkLABS · CISSP Series Industrial Control Systems: PLC, DCS and SCADA A visual, exam-focused guide to how industrial systems work, why…

Bharath Narayanasamy CISSP, OT, SCADA

DETECT Detection Engineering

Detection Engineering: An Introduction

Detection Engineering As cybersecurity environments continue to evolve, adversaries are becoming increasingly sophisticated, making cyber threats more frequent and difficult to detect. To keep pace with this changing landscape, organizations must adopt proactive security practices and…

Bharath Narayanasamy detection_engineering

DETECT MITRE ATT&CK Detection Engineering

Using MITRE ATT&CK Navigator to Strengthen Threat Modelling [PART: II]

🎯 A Hands-On, Step-by-Step Walkthrough 📚 1. Why Map a Threat Group at All? A threat model that stops at "we might get hacked" is not much use. ATT&CK lets you say something far more specific:…

Bharath Narayanasamy

Threat Hunting DETECT Detection Engineering

8 LOLBins Every Threat Hunter Should Know

🕵️‍♂️ 8 Key LOLBins and Hunting Them with Elastic Security 🎯 Attackers love tools that are already installed, already signed and already trusted. This post walks through the eight Windows binaries that showed up most often…

Bharath Narayanasamy LOLBINs

DETECT ATTACK Detection Engineering

Living Off the Land (LOTL) Resources

🌿 Living Off the Land (LOTL) Resources 🗺️ 🎯 Attackers don't always bring their own tools. Sometimes the best weapon is already sitting on the machine. This guide walks through a well-organized collection of Living Off…

Bharath Narayanasamy LOLBINs, LOTL

DFIR DETECT

Volatility3: Memory Forensics Cheatsheet

VOLATILITY 3 Memory Forensics Investigation Cheatsheet DFIR | Detection Engineering | Threat Hunting | CyberDefenders Labs 01 │ SETUP & FUNDAMENTALS # Install via pip pip install volatility3 # Or clone from GitHub git clone https://github.com/volatilityfoundation/volatility3.git…

Bharath Narayanasamy Volatility

DETECT Purple Teaming Detection Engineering

Misbehaving binaries: Hunting LOLBins

🕵️‍♂️ Detection Engineering: Catching jsc.exe Abuse (T1127) 🟣 Technique: Trusted Developer Utilities Proxy Execution (MITRE ATT&CK T1127)🔵 Tool abused: jsc.exe, the Microsoft JScript .NET compiler🟢 Stack: Atomic Red Team ➜ Sysmon ➜ Elastic Agent ➜ Elastic…

Bharath Narayanasamy LOLBINs

DETECT MITRE ATT&CK Purple Teaming

Using MITRE ATT&CK Navigator to Strengthen Threat Modelling [PART: I]

Getting More Out of MITRE ATT&CK in Threat Modelling MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) is an openly available knowledge base describing how cyber adversaries behave. The MITRE Corporation maintains it. Organisations use it…

Bharath Narayanasamy MITRE, ATT&CK

DETECT Purple Teaming

Testing Your Defences: TTP Simulation with Atomic Red Team

Every organisation with a SIEM, an EDR agent and an identity platform believes it would notice an attack. Few have checked. Atomic Red Team is a free, community-maintained set of short scripts that lets you check.…

Bharath Narayanasamy caldera

DEFEND Vulnerability Management

Stakeholder-Specific Vulnerability Categorization

Stop Patching by CVSS Score: A Practical Guide to CISA's SSVC Decision Tree | NetwerkLABS NetwerkLABS | AD² = ATTACK. DETECT. DEFEND. Stop patching by CVSS score: a practical guide to CISA's SSVC decision tree Five…

Bharath Narayanasamy vuln mgmt