NetwerkLABS

Threat Hunting Threat Detection and Incident Response Understanding Log Sources

Useful Windows Event IDs

Windows System Logs Event ID 1074 (System Shutdown/Restart): This event log indicates when and why the system was shut down or restarted. By monitoring these events, you can determine if there are unexpected shutdowns or restarts, potentially…

Bharath Narayanasamy threat_detection, event-ids

SOC Analyst BLUE TEAM DETECT

Yara

"The pattern matching swiss knife for malware researchers (and everyone else)" Useful Yara Resources Various Github repositories provide a wealth of examples of YARA, https://github.com/Yara-Rules/rules/tree/master/malware https://github.com/mikesxrs/Open-Source-YARA-rules/tree/masterUseful Yara Rules Repositories The DFIR Report” shares YARA rules derived from…

Bharath Narayanasamy SOC, yara

WebPentest Web Enumeration RED TEAM

Web Attacks

Enumeration & Brute Force Authentication enumeration is a fundamental aspect of security testing, concentrating specifically on the mechanisms that protect sensitive aspects of web applications; this process involves methodically inspecting various authentication components ranging from username…

Bharath Narayanasamy web-enum

INFOSEC Governance and Regulation NIST

NIST Cybersecurity Framework (CSF) and ISO/IEC 27001

NIST Cybersecurity Framework (CSF) and ISO/IEC 27001 NIST CSF Functions and Categories to ISO/IEC 27001 Annex A Controls Identify (ID) Asset Management (ID.AM): A.8 (Asset Management) Business Environment (ID.BE): A.5 (Information Security Policies) Governance (ID.GV): A.6…

Bharath Narayanasamy 27001, NIST

Risk Management INFOSEC Governance and Regulation

Digital Operational Resilience Act (DORA)

Understanding the Digital Operational Resilience Act (DORA): A Comprehensive Overview In an era where digitalization permeates every aspect of our lives, the importance of cybersecurity and operational resilience has never been more critical. The European Union's…

Bharath Narayanasamy DORA

VulnLAB

Test Page

This is a test page to check migration status.

Bharath Narayanasamy

Cyber Threat Intelligence and Advisory

CTI_June2024: Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

SOURCE: MS-ISAC TLP:CLEARMS-ISAC CYBERSECURITY ADVISORY MS-ISAC ADVISORY NUMBER:2024-074 DATE(S) ISSUED:06/25/2024 SUBJECT:Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution OVERVIEW:Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code…

Bharath Narayanasamy CTI

DETECT wazuh

Wazuh: Detecting Web Attacks

Bharath Narayanasamy wazuh

DETECT wazuh

Ingesting OPNsense logs into Wazuh SIEM

Bharath Narayanasamy

RED TEAM

THREAT EMULATION: Introduction

Purpose of Threat Emulation Threat emulation is meant to assist security teams and organisations, in general, in better understanding their security posture and their defence mechanisms and performing due diligence in their compliance. Are our people…

Bharath Narayanasamy BAS, THreat, Emulation