NetwerkLABS

NIS2 to ISO 27001:2022 Mapping Table

Complete Control Mapping for Belgian Organizations This comprehensive mapping shows how ISO 27001:2022 controls align with NIS2 Directive requirements, helping organizations leverage existing ISMS implementations for NIS2 compliance. Risk Management Measures 1. Policies on Risk Analysis…

Bharath Narayanasamy NIS2

DEFEND Network Infrastructure

NetBox Labs: Bringing Clarity and Control to Modern Network Infrastructure

NetBox Labs is the commercial steward and driving organizational engine behind the NetBox ecosystem. Their vision centers on turning NetBox — originally an open-source “network source of truth” — into a robust, enterprise-grade, scalable platform while…

Bharath Narayanasamy netboxlabs

NIS2 | CyFUN GRC

CyFUN Implementation: A Practical Roadmap

Framework basis: CyberFundamentals (CyFUN) — aligned with NIST CSF and NIS2 objectivesDuration: ~9–12 months initial cycle (Depends on Organizations)Approach: Risk-based, phased rollout with evidence collection from day one 🔹 Phase 1 — Initiation & Scoping ObjectiveKey…

Bharath Narayanasamy CyFUN, NIS2

Web Pentest

XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks

XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks AD² · Attack. Detect. Defend. XSS vs SSRF: Two Different Trust Boundaries, Two Different Attacks Same root cause — untrusted input crossing a boundary something else…

Bharath Narayanasamy VM, XSS, SSRF

EDR | SIEM | SOAR LEARNING PATHS Wazuh SIEM & XDR

Importing the Wazuh 5.0 Beta OVA into Proxmox

Wazuh 5.0 is currently in beta, and the project also ships it as a ready-to-run OVA appliance. That's convenient if you just want to kick the tyres on the new release, but Proxmox doesn't import OVAs…

Bharath Narayanasamy EDR, XDR, SIEM, wazuh

DETECT EDR | SIEM | SOAR LEARNING PATHS

Exploring Wazuh: Introduction

Introduction The Wazuh Agent At the heart of every monitored endpoint sits the Wazuh agent — a lightweight, cross-platform component that acts as your eyes and ears on the systems you care about. Once deployed, it…

Bharath Narayanasamy wazuh

GRC NIS2 | CyFUN

NIS2: A Complete Article-by-Article Reference

NIS2 Directive: Complete Article-by-Article Guide — TheCyberMatrix TheCyberMatrix GRC & Compliance EU Directive 2022/2555 NIS2: A CompleteArticle-by-Article Guide Category: Regulatory Compliance Coverage: All 46 Articles Applies to: Essential & Important Entities across the EU Effective: October…

Bharath Narayanasamy NIS2

Cheat Sheets PenTest ATTACK

Metasploit: Quick Reference Sheet

Metasploit / msfvenom / Meterpreter Cheat Sheet // Metasploit Framework Cheat Sheet msfconsole, msfvenom payload generation, and Meterpreter post-exploitation reference for adversary simulation, purple team exercises, and detection engineering. Commands mapped to MITRE ATT&CK where applicable.…

Bharath Narayanasamy Metasploit, msfvenom, meterpreter

RED TEAM

HAVOC C2: COMMAND & CONTROL FRAMEWORK [PART – I]

A deep-dive into deploying and operating Havoc — the modern, open-source post-exploitation C2 framework built for red teams and purple team simulation labs. From installation and team server configuration to listener setup, payload generation, and agent…

Bharath Narayanasamy red-team, c2, Havoc C2

Traffic Analysis DFIR SOC Analyst

Wireshark Threat Hunting – From Packets to Indicators [HTTP: DEEP-DIVE]

HTTP/HTTP2 Deep-Dive — Wireshark DFIR // HTTP / HTTP2 — Deep-Dive Filter Reference Granular Wireshark display filters for HTTP/1.1 and HTTP/2 — request methods, path & file access, credential extraction, brute force detection, SQL injection, XSS,…

Bharath Narayanasamy wireshark