Tag it

Cloud Security Compliance

This post summarizes some aspects of cloud security that need to be taken into account regarding compliance. To monitor cloud security compliance, we need to check all compliance sources and how they affect cloud security. Compliance sources: Limits of Cloud…

HTTP Traffic Interception Tools

This post features HTTP traffic interception tools for performing penetration tests. List of HTTP Traffic Interception Tools HTTP traffic interception tools: Burp Proxy Burp Proxy is a tool contained within Burp Suite. Proprietary and freemium. It is developed by British…

Software Versioning

Software versioning is the process of assigning version names or numbers to software Software created Visual Studio separates four numbers with dots. The meaning of each number is: Example: 4.5.13.89 Software Code Version Control System Some software assigns the version…

Cybersecurity Threat Modeling

Threat modeling is the process of identifying, analyzing and categorizing threats. List of Cybersecurity Threat Models Cybersecurity Threat Models featured on this post: The most popular is MITTRE ATT&CK. MITRE ATT&CK MITRE ATT&CK (Adversarial Tactics, Techniques, and Common Knowledge) Matrix is…

IT Threat Intelligence

This post explores some aspects of threat intelligence in the context of IT security. Concepts related to IT Threat Intelligence Tactics, techniques and procedures are commonly referred as TTPs. IT Thread Modelling Thread modelling is a process by which potential…

Introduction to C++

This post is an introduction to C++. C++ is an adaptation of C to the object-oriented paradigm. It was originally developed by Bjarne Stroustrup. C++ Versions and Standards There are different standard versions of C++. Each version is standardized through…