Bharath Narayanasamy

Testing Your Defences: Safe Technique Simulation with Atomic Red Team

Every organisation with a SIEM, an EDR agent and an identity platform believes it would notice an attack. Few have checked. Atomic Red Team is a free, community-maintained set of short scripts that lets you check.…

Bharath Narayanasamy caldera

DEFEND Vulnerability Management

Stakeholder-Specific Vulnerability Categorization

Stop Patching by CVSS Score: A Practical Guide to CISA's SSVC Decision Tree | NetwerkLABS NetwerkLABS | AD² = ATTACK. DETECT. DEFEND. Stop patching by CVSS score: a practical guide to CISA's SSVC decision tree Five…

Bharath Narayanasamy vuln mgmt

GRC

NIS2 to ISO 27001:2022 Mapping Table

Complete Control Mapping for Belgian Organizations This comprehensive mapping shows how ISO 27001:2022 controls align with NIS2 Directive requirements, helping organizations leverage existing ISMS implementations for NIS2 compliance. Risk Management Measures 1. Policies on Risk Analysis…

Bharath Narayanasamy NIS2

DEFEND Network Infrastructure

NetBox Labs: Bringing Clarity and Control to Modern Network Infrastructure

NetBox Labs is the commercial steward and driving organizational engine behind the NetBox ecosystem. Their vision centers on turning NetBox — originally an open-source “network source of truth” — into a robust, enterprise-grade, scalable platform while…

Bharath Narayanasamy netboxlabs

GRC NIS2 | CyFUN

CyFUN Implementation: A Practical Roadmap

Framework basis: CyberFundamentals (CyFUN) — aligned with NIST CSF and NIS2 objectivesDuration: ~9–12 months initial cycle (Depends on Organizations)Approach: Risk-based, phased rollout with evidence collection from day one 🔹 Phase 1 — Initiation & Scoping ObjectiveKey…

Bharath Narayanasamy CyFUN, NIS2

Web Pentest

XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks

XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks AD² · Attack. Detect. Defend. XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks Same root cause — untrusted input crossing a boundary something else…

Bharath Narayanasamy VM, XSS, SSRF

LEARNING PATHS Wazuh SIEM & XDR DETECT

Importing the Wazuh 5.0 Beta OVA into Proxmox

Wazuh 5.0 is currently in beta, and the project also ships it as a ready-to-run OVA appliance. That's convenient if you just want to kick the tyres on the new release, but Proxmox doesn't import OVAs…

Bharath Narayanasamy SIEM, wazuh, EDR, XDR

EDR | SIEM | SOAR LEARNING PATHS Wazuh SIEM & XDR

Exploring Wazuh: Introduction

Introduction The Wazuh Agent At the heart of every monitored endpoint sits the Wazuh agent — a lightweight, cross-platform component that acts as your eyes and ears on the systems you care about. Once deployed, it…

Bharath Narayanasamy wazuh

GRC NIS2 | CyFUN

NIS2: A Complete Article-by-Article Reference

NIS2 Directive: Complete Article-by-Article Guide — TheCyberMatrix TheCyberMatrix GRC & Compliance EU Directive 2022/2555 NIS2: A CompleteArticle-by-Article Guide Category: Regulatory Compliance Coverage: All 46 Articles Applies to: Essential & Important Entities across the EU Effective: October…

Bharath Narayanasamy NIS2

PenTest ATTACK LEARNING PATHS

Metasploit: Quick Reference Sheet

Metasploit / msfvenom / Meterpreter Cheat Sheet // Metasploit Framework Cheat Sheet msfconsole, msfvenom payload generation, and Meterpreter post-exploitation reference for adversary simulation, purple team exercises, and detection engineering. Commands mapped to MITRE ATT&CK where applicable.…

Bharath Narayanasamy Metasploit, msfvenom, meterpreter