a-guide-to-cyber-security-threat-hunting-ebook.pdf
440.1 KB
A Guide to Cyber Security Threat Hunting
The art of proactively detecting advanced security threats
The art of proactively detecting advanced security threats
بیاموزیم
برنامه استعداد یابی امنیت سایبری،
دپارتمان امنیت ملی امریکا
https://dhs.gov/cybersecurityservice
برنامه استعداد یابی امنیت سایبری،
دپارتمان امنیت ملی امریکا
https://dhs.gov/cybersecurityservice
www.dhs.gov
DHS Cybersecurity Service | Homeland Security
Join the Nation’s preeminent federal cybersecurity team and serve your country by working with us to protect critical infrastructure and the American people from cyber threats.
با استفاده از TRAM محققان میتوانند مدلهای یادگیری ماشینی را برای یافتن تکنیک های جدول ATT&CK بهینه کنند . در این روش در الحاق داده های هوش تهدید به جدول فوق تسریع میشود .
#آکادمی_روزبه
https://github.com/mitre-attack/tram
#آکادمی_روزبه
https://github.com/mitre-attack/tram
GitHub
GitHub - mitre-attack/tram: Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK.
Threat Report ATT&CK™ Mapping (TRAM) is a tool to aid analyst in mapping finished reports to ATT&CK. - mitre-attack/tram
PowerShell script (Get-InjectedThread) that could discover threads of processes which are potentially injected by arbitrary code.
https://gist.github.com/jaredcatkinson/23905d34537ce4b5b1818c3e6405c1d2
https://gist.github.com/jaredcatkinson/23905d34537ce4b5b1818c3e6405c1d2
Gist
Code from "Taking Hunting to the Next Level: Hunting in Memory" presentation at SANS Threat Hunting Summit 2017 by Jared Atkinson…
Code from "Taking Hunting to the Next Level: Hunting in Memory" presentation at SANS Threat Hunting Summit 2017 by Jared Atkinson and Joe Desimone - Get-InjectedThread.ps1
42250_how_to_write_fully_undetectable_malware_english_translation.pdf
9.6 MB
Fully Undetectable Malware
Zero Trust Architectures (ZTA).pdf
2.3 MB
ZERO TRUST ARCHITECTURES: ARE WE THERE YET?
چقدر با حکمرانی داده آشنایی دارید ؟
#cybersecurity #datagovernance #cissp
https://www.cio.com/article/3521011/what-is-data-governance-a-best-practices-framework-for-managing-data-assets.html
#cybersecurity #datagovernance #cissp
https://www.cio.com/article/3521011/what-is-data-governance-a-best-practices-framework-for-managing-data-assets.html
CIO
Data governance: A best practices framework for managing data assets
Data governance defines roles, responsibilities, and processes for ensuring accountability for and ownership of data assets across the enterprise.
یادبگیریم
امن سازی هوش مصنوعی
https://saeedtasbih.blog/professional-blog/securing-artificial-intelligence-systems/
امن سازی هوش مصنوعی
https://saeedtasbih.blog/professional-blog/securing-artificial-intelligence-systems/
SaeedTasbih
Securing Artificial Intelligence systems
How do we secure our AI?
We have an interesting problem on our hands. Our reliance on Artificial intelligence has increased exponentially over the last few years and yet our strategies and technologies to secure those systems have not. Couple that…
We have an interesting problem on our hands. Our reliance on Artificial intelligence has increased exponentially over the last few years and yet our strategies and technologies to secure those systems have not. Couple that…
۱۷ آذر ماه
💫شروع پکیج سطح ۲ استخدامی
✅دوره های سنز ۵۰۳، ۵۱۱، ۵۵۵
⚡️واتس اپ 09902857289
🕹مدارک صادره با لوگوی افتا
#آکادمی_روزبه #مدرسهSOC
💫شروع پکیج سطح ۲ استخدامی
✅دوره های سنز ۵۰۳، ۵۱۱، ۵۵۵
⚡️واتس اپ 09902857289
🕹مدارک صادره با لوگوی افتا
#آکادمی_روزبه #مدرسهSOC
Advanced_Incident_Detection_and_Threat_Hunting_using_Sysmon_and.pdf
4.9 MB
Advanced Incident Detection and Threat Hunting using Sysmon (and Splunk)
امنیت سایبری و هک مساله ایران نیست و جهانی است .البته که ما هم کاهلی میکنیم
.
اطلاعات DNA دو میلیون نفر در اوهایو امریکا لو رفت
https://www.bleepingcomputer.com/news/security/dna-testing-firm-discloses-data-breach-affecting-21-million-people/amp/
.
اطلاعات DNA دو میلیون نفر در اوهایو امریکا لو رفت
https://www.bleepingcomputer.com/news/security/dna-testing-firm-discloses-data-breach-affecting-21-million-people/amp/
BleepingComputer
DNA testing firm discloses data breach affecting 2.1 million people
DNA Diagnostics Center (DDC), an Ohio-based DNA testing company, has disclosed a hacking incident that affects 2,102,436 persons.
پلیس فدرال امریکا چطور به پیامهای پیام رسانها دسترسی دارد
مستند افشا شده
https://propertyofthepeople.org/document-detail/?doc-id=21114562
مستند افشا شده
https://propertyofthepeople.org/document-detail/?doc-id=21114562
Property of the People
Document Detail
ShareTweet4FlipEmail4 Shares
Anatomy_Of_Native_IIS_Malware.pdf
4.6 MB
Anatomy of native IIS malware
#استخدام
شرکت *خدمات ارتباطی رایتل* به منظور تامین و تکمیل تیم سیستم مدیریت امنیت اطلاعات از کارشناسان این حوزه دعوت به همکاری می نماید.
جنسیت : مرد/زن
خدمت سربازی : اتمام یا معافیت
عنوان شغلی: *کارشناس سیستم مدیریت امنیت اطلاعات*
Job Responsibilities:
•Ability to evaluate and Gap Analysis based on various standards in the field of information security
•Identification, valuation and documentation of IT services and assets
•Implementing information security risk assessment (Identification, analysis, evaluation).
•Measuring information security risks and developing corresponding Risk Treatment Plans
•Designing ISMS policies and procedures and auditing them
•Auditing of ISMS and other requirement (Develop and maintain audit checklist and documents) and perform it by coordinating related teams and vendors.
•Create and monitor Key Performance Indicators (KPIs) and evaluate the effectiveness of the ISMS
•Keep the Cyber Security Department updated on latest security trends and security technologies, policies, and standards.
•Create the Security Awareness Plan across the company using different communication channels and enhance security culture beyond the organization.
•Ability to manage technical and managerial meetings
Requirement:
•Fluent in ISO 27001 and familiar with ISO 9001
•Familiar with the concepts of information security
•Familiar with computer networks, servers and services
•Adequate familiarity with technical issues
•Good communication skills. •Good documentation skills.
•Familiar with project control topics (BCNP)
•Sufficient English language proficiency (Reading / Speaking / Listening)
•At least 2 years of relevant work experience.
Job Category:
· IT
Employment type:
· Full Time
Education:
· Engineering(Computer-ITIL)
Seniority:
·Experienced professional
ارسال رزومه به:
B.Habibi@Rightel.ir
@roozbeh_learning
شرکت *خدمات ارتباطی رایتل* به منظور تامین و تکمیل تیم سیستم مدیریت امنیت اطلاعات از کارشناسان این حوزه دعوت به همکاری می نماید.
جنسیت : مرد/زن
خدمت سربازی : اتمام یا معافیت
عنوان شغلی: *کارشناس سیستم مدیریت امنیت اطلاعات*
Job Responsibilities:
•Ability to evaluate and Gap Analysis based on various standards in the field of information security
•Identification, valuation and documentation of IT services and assets
•Implementing information security risk assessment (Identification, analysis, evaluation).
•Measuring information security risks and developing corresponding Risk Treatment Plans
•Designing ISMS policies and procedures and auditing them
•Auditing of ISMS and other requirement (Develop and maintain audit checklist and documents) and perform it by coordinating related teams and vendors.
•Create and monitor Key Performance Indicators (KPIs) and evaluate the effectiveness of the ISMS
•Keep the Cyber Security Department updated on latest security trends and security technologies, policies, and standards.
•Create the Security Awareness Plan across the company using different communication channels and enhance security culture beyond the organization.
•Ability to manage technical and managerial meetings
Requirement:
•Fluent in ISO 27001 and familiar with ISO 9001
•Familiar with the concepts of information security
•Familiar with computer networks, servers and services
•Adequate familiarity with technical issues
•Good communication skills. •Good documentation skills.
•Familiar with project control topics (BCNP)
•Sufficient English language proficiency (Reading / Speaking / Listening)
•At least 2 years of relevant work experience.
Job Category:
· IT
Employment type:
· Full Time
Education:
· Engineering(Computer-ITIL)
Seniority:
·Experienced professional
ارسال رزومه به:
B.Habibi@Rightel.ir
@roozbeh_learning