Bharath Narayanasamy

NIST Cybersecurity Framework v1.1: Fundamentals

NIST Functions Identify – Understand what you have and includes activities such as asset management, governance, risk assessment. Protect – Build safeguards and controls to protect what is important to you. Detect – Implement capabilities to…

Bharath Narayanasamy NIST

Threat Detection and Incident Response

Incident Handling Life Cycle

NIST - Security Incident Handling 1. Preparation The preparation phase covers the readiness of an organization against an attack. That means documenting the requirements, defining the policies, incorporating the security controls to monitor like EDR / SIEM /…

Bharath Narayanasamy CISO, NIST, Incident Management, dfir

Bash Scripting

Bourne Again Shell The main difference between scripting and programming languages is that we don't need to compile the code to execute the scripting language, as opposed to programming languages. Structure of Scripting Language Input &…

Bharath Narayanasamy

Splunk Splunk Basics Investigating with Splunk

Splunk: SPL Cheat Sheet for SOC Analysts

Splunk Cheat Sheet Query to identify failed login attempts: #Query to identify failed login attempts: sourcetype=auth* "authentication failure" | stats count by user | sort -count Query to identify privilege escalation attempts: #Query to identify privilege…

Bharath Narayanasamy splunk, SPL

Splunk

Splunk Fundamentals

Splunk Components Splunk Forwarder Splunk Forwarder is a lightweight agent installed on the endpoint intended to be monitored, and its main task is to collect the data and send it to the Splunk instance. Splunk Indexer Splunk…

Bharath Narayanasamy

INFOSEC Governance and Regulation BLUE TEAM Risk Management

Risk Assessment Methodologies

Risk Management Frameworks There are several frameworks for risk assessment. Example methodologies are: NIST SP 800-30: A risk assessment methodology developed by the National Institute of Standards and Technology (NIST). It involves identifying and evaluating risks,…

Bharath Narayanasamy NIST, Risk management, CISO, ISO 27001

BLUE TEAM Risk Management

Risk Management – Terminology

Risk Avoidance Risk Acceptance Risk Reduction Basic Terminology Threat: an intentional or accidental event that can compromise the security of an information system. Examples include hacking, phishing attacks, human error, and natural disasters. Vulnerability: a software,…

Bharath Narayanasamy Risk management, CISO, ISO 27001, NIST

RED TEAM

Attacking AD – Cheatsheet

# Initial Enumeration | Command | Description | | ------------------------------------------------------------ | ------------------------------------------------------------ | | `nslookup ns1.inlanefreight.com` | Used to query the domain name system and discover the IP address to domain name mapping of the target…

Bharath Narayanasamy AD, Active Directory, Cheatsheet

VulnLAB

OpenCTI

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. OpenCTI is designed to provide organizations with the means to manage CTI through the storage, analysis, visualization and presentation of threat campaigns, malware…

Bharath Narayanasamy Threat Intel, BLUE

PenTest

How to Brute Force Websites with Hydra

Bharath Narayanasamy hydra, brute-force