Threat hunting with osquery
In this article, we take a look at osquery and how it can be used to query the security, reliability and compliance information of systems within your network...
Lester Obbayi
Lester Obbayi is a Cyber Security Consultant with one of the largest Cyber Security Companies in East and Central Africa. He has a deep interest in Cyber Security and spends most of his free time doing freelance Penetration Tests and Vulnerability Assessments for numerous organizations.
Page 5
A brief introduction to the Nessus vulnerability scanner
Nessus is one of the many vulnerability scanners used during vulnerability assessments and penetration testing engagements, including malicious attacks. This...
Computer forensics: Chain of custody [updated 2019]
In this article, we will learn what the chain of custody entails in digital forensics and how it is maintained. We’ll also look at the chain of custody process...
CISM: Overview of domains
Although CISM certification is multi-faceted and requires knowledge of a number of academic, technical, and career-based subjects, the core of the exam is to...
CISM Domain 4: Information Security Incident Management (ISIM) [Updated 2019]
This domain review covers the areas of knowledge that CISM candidates must grasp in order to be able to establish an effective program to respond to and subsequently...
CISM Domain 3: Information Security Program Development & Management [Updated 2019]
This domain reviews one of the areas of knowledge that CISM candidates must grasp in order to be able to develop, manage and maintain an information security...
CISM Domain 2: Information Risk Management (IRM) [Updated 2019]
This domain tests the knowledge base that CISM candidates must understand in order to show the ability to appropriately apply risk management principles and...
CISM domain 1: Information security governance [Updated 2019]
This domain reviews the body of knowledge and associated tasks that are necessary in developing an information security governance structure for candidates,...
Ransomware analysis with Volatility
In this article, we’ll discuss the Volatility framework and how to perform analysis on ransomware using it. We’ll discuss various capabilities of the tool...
Using third-party services for credential theft
In this article, we discuss the security of third-party services which perform specialized functions, such as storing user credentials or logging in on behalf...