ThreatSystems

6 ms·

1.
by ThreatSystems 1mo ago
If you're on Linux you can probably use proxychains.
2.
by ThreatSystems 3mo ago
I run training courses on developer security to broaden their understanding of threat surface from their behaviour, day-to-day tooling, the repositories they work on and broader supply chain. One of the modules covers this exact scenario, i
3.
by ThreatSystems 3mo ago
In agreement with frodd above. Dependencies and supply chain attacks are probably the greatest risk to a lot of software orgs, as they run them across all their environments: Development (with secrets and other valuable artefacts on develop
4.
by ThreatSystems 5mo ago
If anyone is looking for a solution in this space. Fire me an email, I have a partner whose focussed closely on that problem set!
5.
by ThreatSystems 8mo ago
*Unless your in the cloud, then it's a metric to nickel and dime with throttling! On a more serious note, the performance of hardware today is mind boggling from what we all encountered way back when. What I struggle to comprehend thou
6.
by ThreatSystems 9mo ago
Thanks! I actually wrote my master thesis surrounding cyber resilience, and the same week of submission they released their Cyber Action Toolkit (a precursor to Cyber Essentials). I was able to provide them some feedback which has since bee
7.
by ThreatSystems 9mo ago
I'm building a training platform for cyber security and secure development practices. Mainly to address the junior to mid engineer gaps of "depth" across general cyber security and software engineering skills. I've encou
8.
by ThreatSystems 11mo ago
Call me dumb - I'll take it! But if we really are trying to keep it simple simple... Then you just query from event_receiver_svcX side, for events published > datetime and event_receiver_svcX = FALSE. Once read set to TRUE. To mitig
9.
by ThreatSystems 11mo ago
It does sound like you've been compromised by an outfit that has got automation to run these types of activities across compromised accounts. A Reddit post[0] from 3 years ago seems to indicate similar activities. Do what you can to tr
10.
by ThreatSystems 11mo ago
I'm officially off of AWS so don't have any consoles to check against, but back on a laptop. Based on docs and some of the concerns about this happening to someone else, I would probably start with the following: 1. Check who&#x2
11.
by ThreatSystems 11mo ago
Cloudtrail events should be able to demonstrate WHAT created the EC2s. Off the top of my head I think it's the runinstance event.
12.
by ThreatSystems 11mo ago
Cognisant US pricing for the HP Z Book Ultra was astronomical, within the EU it's on par with standard laptops and to good effect. The only regret I have is ordering on release day and not wanting to wait for the 128gb version; but bat
13.
by ThreatSystems 1y ago
I am genuinely curious, as to how this would be a solution for a law practice? How many lawyers are SSH'd into servers? Or am I being ignorant?
14.
by ThreatSystems 2y ago
Sure then throw Ansible over the top for configuration/change management. Packer gives you a solid base for repeatable deployments. Their model was to ensure that data stays within the VM which a deployed AMI made from Packer would sui
15.
by ThreatSystems 2y ago
Vagrant / Packer?
16.
by ThreatSystems 2y ago
If you want to integrate this into Windows AD look at ADFS[1] and MSAL[2]. Pretty much can give you OIDC from AD, but you'll have to deal with Microsoft licencing :D. [1] https://learn.microsoft.com/en-us/windows-s
17.
by ThreatSystems 2y ago
Up to
18.
by ThreatSystems 3y ago
Would the easiest route for text be too make your own WebFont in both serif / san-serif which are "blurred/pixelated" to over ride font-family tags in CSS? Then do the remainder of the image blurring in the technique alr
19.
by ThreatSystems 4y ago
Thanks! This looks like just the thing I needed.
20.
by ThreatSystems 4y ago
Closely related to this! Does anyone know of any good books that would build upon this knowledge as an introduction to integrating RF / the theory of RF circuits, antennae's etc?
21.
by ThreatSystems 4y ago
Why not look at Packer? I use it quite significantly for creating base VMs. Provisioner scripts can effectively be broken down from the Dockerfile RUN layers as Bash or Powershell scripts. Then output as a vagrant box or hypervisor VM expor