Rolling for Resilience Part 6 – Loot Drops & Learning Points: Measuring What Matters
Explore the importance of role-based paths in cybersecurity incident response training, enhancing engagement and realism in tabletop exercises.
Rolling for Resilience Part 5 – Side Quests: Not Every Member of the Party Swings a Sword!
Explore the importance of role-based paths in cybersecurity incident response training, enhancing engagement and realism in tabletop exercises.
Rolling for Resilience Part 4 – Boots in the Field: Manuals for Real-Time Action
Enhance cybersecurity incident response with actionable field guides that ensure quick, precise actions under pressure, transforming preparation into real-time strategic execution.
Detecting Dangling SaaS Subdomains and Real Subdomain Takeovers
Detecting and mitigating dangling SaaS subdomains and real subdomain takeovers with a more accurate, reliable tool to reduce false positives and build trust in security assessments.
Rolling for Resilience Part 3: Battle Prep – The Scrolls of Response
Part three focuses on Playbooks. Understanding their purpose, importance, and responsibilities to review and keep them updated.
Extract Secrets from Multiple Configuration Files Using Vim
Learn how to extract secrets from compromised Linux servers using Vim’s built-in capabilities. This guide shows penetration testers how to search config files, extract credentials, and exfiltrate data without leaving forensic artifacts.
Rolling for Resilience Part 2: The Communication Gauntlet
A typical table-top exercise where the parties are technically all in the same room, but operationally acting like solo adventurers in different realms.
Rolling for Resilience: A Strategic Guide to Cybersecurity Table-top Exercises
Discover how tabletop exercises & gamification can transform cybersecurity training by making it engaging, collaborative, and effective in building a resilient security culture.
Risk-Driven Approach: The Federal Government’s Shift in Cybersecurity Burden
Explore the shift from all-hazards to risk-informed security testing. Learn how Threat-Led and Assumed Breach testing support the new risk-informed paradigm.
Understanding Garbage Findings
Learn how to identify garbage findings in penetration testing reports by evaluating real risk, impact, and conditions in application security assessments.