Introduction Mitre ATT&CK is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. ATT&CK stands for adversarial tactics, techniques, and common knowledge. This framework provides the ability to create threat models and methodologies within the realm of cybersecurity. …

Introduction In this post, I’ll be walking you through how to easily set up a research honeypot on AWS. Honeypots are servers that are made to look vulnerable and contain what looks to be sensitive information. The honeypots will log actions taken, providing valuable threat intelligence. A research honeypot collects information…

Nessus Nessus by Tenable is a vulnerability scanning tool used to scan networks for known vulnerabilities with a variety of plug-ins. Other types of vulnerability scanners include Qualys, Rapid7, and OpenVAS. There are a few different versions of Nessus available for use: Nessus Essentials Nessus Professional Tenable.io Nessus Essentials is what…

By the end of this post, I hope you will be able to explain what a VPN, virtual private network, is and how to set up AWS Client VPN in order to access AWS private resources in a VPC, virtual private cloud. What is a VPN? A virtual private network provides a way to…

What is a VPC? A virtual private cloud is an on-demand group of shared resources allocated within a public cloud environment. Creating private and public subnets can provide a level of isolation between different organizations using those resources. Amazon Virtual Private Cloud is a commercial cloud computing service that provides users a virtual private…

Have you ever received an email from your bank saying that you’re account has been locked because of suspicious activity? That email may instruct you to click on a link embedded in the message to verify your identity and keep your account open. DO NOT fall for this scam! There…

After analyzing password attacks using my honeypot, one easy thing you can do to protect yourself is to have strong passwords. Anything that you need to sign in to can be a vulnerability. Hackers execute password attacks against authentication systems. …

INTRODUCTION A honeypot is a great tool used to detect and gain insights into hacking attempts by setting up a decoy to lure in cyber attackers. There are many details that can be analyzed using a honeypot including origin of attack, how many attempts from a specific ip, input used in…