Mohamed AboElKheirinAppSec UntangledNew Notion template for Threat modeling published!Hi All, I have an exciting announcement to share! I’ve created a Notion template to help with creating threat models for your projects, you…May 3May 3
Mohamed AboElKheirinAppSec UntangledHow I contributed my first custom rule to Semgrep Rule RegistrySince I learned that Semgrep enables users to create and use custom SAST rules, I was instantly intrigued. That is mainly because the value…Mar 19Mar 19
Mohamed AboElKheirinAppSec UntangledWhat is wrong with this code?Why code reviews/scans are not enoughMar 1Mar 1
Mohamed AboElKheirinAppSec UntangledHow to “Shift-Left” SAST scans (Semgrep as an example)“Shift-Left” has become quite the buzzword recently and I assume you probably have already seen a dozen talks and blog posts discussing the…Jan 261Jan 261
Mohamed AboElKheirinAppSec UntangledWhy “Chainguard Images” is a game-changer for container vulnerabilitiesI’ve recently tried Chainguard Images and was impressed by the results. Chainguard images are minimized hardened container images that…Dec 21, 2023Dec 21, 2023
Mohamed AboElKheirinAppSec UntangledThreat Modeling Handbook #6: Agile Threat ModelingIt has been a long journey! In the past stories (links below) of this series we discussed in detail how to build a process using threat…Nov 21, 2023Nov 21, 2023
Mohamed AboElKheirinAppSec UntangledThreat Modeling Handbook #5: Convert your threat model into an automated pentest using DevSecOps…Now it is time to make use of what we have completed in phase 1 of the threat modeling process (threat and mitigation identification) in…Oct 12, 20231Oct 12, 20231
Mohamed AboElKheirinAppSec UntangledThreat modeling Handbook #4: How to get better at Threat modelingI know the previous story of this series (links to all previous stories below) was a bit long and may have been a little overwhelming…Sep 25, 20231Sep 25, 20231
Mohamed AboElKheirinAppSec UntangledThreat modeling Handbook #3: The Thought process behind identifying threats (with an Example)Okay, It is time to jump into an actual threat modeling example. But first, let’s start with a quick recap of what was discussed in the…Sep 19, 20231Sep 19, 20231
Mohamed AboElKheirinAppSec UntangledThreat Modeling Handbook #2: Threat modeling is a process, not a documentWelcome back to the 2nd story in the “Threat Modeling Handbook” series. In the last story, we discussed what is a threat model and why it…Aug 25, 2023Aug 25, 2023
