Bharath Narayanasamy

Attacking Active Directory Active Directory

Active Directory Domain Service (AD DS)

Overview AD DS acts as a catalog for all objects in a network (users, groups, machines, printers, etc.). Some objects, such as users and machines, are security principals, meaning they can be authenticated and assigned privileges.…

Bharath Narayanasamy AD attacks

GRC

GRC 101: SimpleRisk Core (Community Edition)

What is SimpleRisk CORE (Community Edition)? SimpleRisk CORE (Community Edition) is an open-source Governance, Risk, and Compliance (GRC) tool designed to help organizations identify, assess, and manage risks effectively. It provides a structured framework for risk…

Bharath Narayanasamy GRC, SimpleRisk

Metasploit PenTest

Metasploit Cheat Sheet

MSFconsole Commands CommandDescriptionshow exploitsShow all exploits within the Framework.show payloadsShow all payloads within the Framework.grep meterpreter show payloadsgrep meterpreter grep reverse_tcp show payloadsMSF - Searching for Specific Payloadshow auxiliaryShow all auxiliary modules within the Framework.search <name>Search…

Bharath Narayanasamy msfconsole, Metasploit

Enumeration

Shodan 101

Shodan is a search engine for Internet-connected devices.It lets users search for various types of servers (webcams, routers, servers, etc.) connected to the internet using a variety of filters.Some have also described it as a search…

Bharath Narayanasamy shodan, osint

DFIR

Concepts of Forensic Imaging

Core Concepts The process of imaging a disk starts by identifying the target drive, preparing it for imaging, and then creating the image file which is later verified for integrity. This needs to be performed in…

Bharath Narayanasamy dfir

IDENTIFY DETECT RESPOND

Wireshark 101 | Traffic Analysis and Investigation (PART 02)

Identifying Hosts When investigating a compromise or malware infection activity, a security analyst should know how to identify the hosts on the network apart from IP to MAC address match. One of the best methods is…

Bharath Narayanasamy wireshark

Threat Detection and Incident Response

Wireshark 101 | Traffic Analysis and Investigation (PART 01)

Wireshark: Traffic Analysis Display Filter Reference Investigating Nmap scans Nmap is an industry-standard tool for mapping networks, identifying live hosts and discovering the services. As it is one of the most used network scanner tools, a security…

Bharath Narayanasamy wireshark

CyBER Tools Cyber Threat Intelligence and Advisory DETECT

Endpoint Detection and Response (EDR) : Lima Charlie (Part 01)

Introduction to Endpoint Detection and Response (EDR) Endpoint Detection and Response (EDR) is a cybersecurity solution designed to detect, investigate, and respond to threats at the endpoint level. Endpoints include devices like laptops, desktops, servers, and…

Bharath Narayanasamy LIMA, EDR

DETECT PROTECT RESPOND

SNORT 101 (Part 03)

Snort Rules Each rule should have a type of action, protocol, source and destination IP, source and destination port and an option. Remember, Snort is in passive mode by default. So most of the time, we…

Bharath Narayanasamy snort

RESPOND DETECT

SNORT 101 (Part 02)

SNORT in IDS/IPS mode IDS/IPS mode with parameter "-A" There are several alert modes available in snort; console: Provides fast style alerts on the console screen. cmg: Provides basic header details with payload in hex and text format. full: Full…

Bharath Narayanasamy snort