تحلیل عمیق حمله فیشینگ
#آکادمی_روزبه
https://www.huntress.com/blog/gone-phishing-an-analysis-of-a-targeted-user-attack
#آکادمی_روزبه
https://www.huntress.com/blog/gone-phishing-an-analysis-of-a-targeted-user-attack
Huntress
Gone Phishing: An Analysis of a Targeted User Attack | Huntress
Get an inside look at how threat actors use phishing and social engineering tactics to target users and infiltrate organizations.
تولید لاگ برای مقاصد تست
توسط ابزاری از مایکروسافت
#آکادمی_روزبه
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/eventcreate
توسط ابزاری از مایکروسافت
#آکادمی_روزبه
https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/eventcreate
Docs
eventcreate
Reference article for the eventcreate command, which enables an administrator to create a custom event in a specified event log.
آکادمی آموزش روزبه 📚
تولید لاگ برای مقاصد تست توسط ابزاری از مایکروسافت #آکادمی_روزبه https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/eventcreate
برای تولید لاگ سیسمان ، این ابزار پیشنهاد می‌شود
#آکادمی_روزبه
https://github.com/ScarredMonk/SysmonSimulator/tree/main
#آکادمی_روزبه
https://github.com/ScarredMonk/SysmonSimulator/tree/main
GitHub
GitHub - ScarredMonk/SysmonSimulator: Sysmon event simulation utility which can be used to simulate the attacks to generate the…
Sysmon event simulation utility which can be used to simulate the attacks to generate the Sysmon Event logs for testing the EDR detections and correlation rules by Blue teams. - ScarredMonk/SysmonS...
چرا LNK. فایل ها مهم اند ( تصویر فوق)
استفاده از LECmdبرای تحلیل لینک ( LNK)فایل ها : ویدئوی زیر
#آکادمی_روزبه
https://www.youtube.com/watch?v=wu4-nREmzGM
استفاده از LECmdبرای تحلیل لینک ( LNK)فایل ها : ویدئوی زیر
#آکادمی_روزبه
https://www.youtube.com/watch?v=wu4-nREmzGM
ابزارهایی برای جرم شناسی
#آکادمی_روزبه
https://securityonline.info/dfir-toolkit-cli-tools-for-forensic-investigation-of-windows-artifacts/
#آکادمی_روزبه
https://securityonline.info/dfir-toolkit-cli-tools-for-forensic-investigation-of-windows-artifacts/
Daily CyberSecurity
Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.
یک مثال از شکار تهدیدات
#آکادمی_روزبه
https://securityintelligence.com/posts/threat-hunting-101-how-to-outthink-attackers/
#آکادمی_روزبه
https://securityintelligence.com/posts/threat-hunting-101-how-to-outthink-attackers/
Security Intelligence
Threat hunting 101: How to outthink attackers
How do you hunt for threats in an organization's digital infrastructure? Uncover the steps and threat-hunting examples.
یک نمونه از ساختار امنیت سایبری سازمان
#آکادمی_روزبه
https://www.gadgetaccess.com/creating-a-cyber-security-organizational-chart/
#آکادمی_روزبه
https://www.gadgetaccess.com/creating-a-cyber-security-organizational-chart/
Gadget Access
Creating a Cyber Security Organizational Chart
I was recently asked for an example of a well-structured organizational chart segment that focused on delivery cyber security effectively. Of course, this might vary based on the size, industry, and specific needs of the organization. Here’s some of what…
توصیه دو سازمان امنیتی و موسسه استاندارد آمریکا برای آماده شدن در دنیای پسا کوانتوم
#آکادمی_روزبه
https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3498776/post-quantum-cryptography-cisa-nist-and-nsa-recommend-how-to-prepare-now/
#آکادمی_روزبه
https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/3498776/post-quantum-cryptography-cisa-nist-and-nsa-recommend-how-to-prepare-now/
National Security Agency/Central Security Service
Post-Quantum Cryptography: CISA, NIST, and NSA Recommend How to Prepar
The National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), and National Institute of Standards and Technology (NIST) warned that cyber actors could target our
نسخه جدید کالی
#آکادمی_روزبه
https://www.kali.org/blog/kali-linux-2023-3-release/?utm_campaign=Kali&utm_content=261664871&utm_medium=social&utm_source=linkedin&hss_channel=lcp-5384047
#آکادمی_روزبه
https://www.kali.org/blog/kali-linux-2023-3-release/?utm_campaign=Kali&utm_content=261664871&utm_medium=social&utm_source=linkedin&hss_channel=lcp-5384047
Kali Linux
Kali Linux 2023.3 Release (Internal Infrastructure & Kali Autopilot) | Kali Linux Blog
Today we are delighted to introduce our latest release of Kali, 2023.3. This release blog post does not have the most features in it, as a lot of the changes have been behind-the-scenes, which brings a huge benefit to us and an indirect positive effect to…
کمبود متخصص امنیت سایبری در مالزی
#آکادمی_روزبه
https://www.thestar.com.my/news/nation/2023/08/16/malaysia-faces-shortage-of-cybersecurity-experts
#آکادمی_روزبه
https://www.thestar.com.my/news/nation/2023/08/16/malaysia-faces-shortage-of-cybersecurity-experts
The Star
Malaysia faces shortage of cybersecurity experts
KUALA LUMPUR: Malaysia is short of experts in the cybersecurity segment to equip the nation with the recommended amount of industry workers of 27,000 by 2025, says Communications and Digital Minister Fahmi Fadzil.
تعیین اسکپ در هنگام پیاده سازی مدل بلوغ اطمینان از نرم افزار
OWASP SAMM
Software Assurance Maturity Model
#آکادمی_روزبه
https://owaspsamm.org/blog/2023/05/24/determining-scope-when-implementing-samm/
OWASP SAMM
Software Assurance Maturity Model
#آکادمی_روزبه
https://owaspsamm.org/blog/2023/05/24/determining-scope-when-implementing-samm/
owaspsamm.org
Determining scope when implementing SAMM
When performing a SAMM assessment, should the scope be the whole organization or should it be smaller, like a business unit or even a single team or application?
The short answer? Start small.
Getting started Start by evaluating your goals. What do you want…
The short answer? Start small.
Getting started Start by evaluating your goals. What do you want…
مایکروسافت پایتون را به اکسل می‌آورد
آیا باید منتظر تهدیدات جدیدی بواسطه ی این تلفیق بود ؟
#آکادمی_روزبه
https://techcrunch-com.cdn.ampproject.org/c/s/techcrunch.com/2023/08/22/microsoft-is-bringing-python-to-excel/amp/
آیا باید منتظر تهدیدات جدیدی بواسطه ی این تلفیق بود ؟
#آکادمی_روزبه
https://techcrunch-com.cdn.ampproject.org/c/s/techcrunch.com/2023/08/22/microsoft-is-bringing-python-to-excel/amp/
TechCrunch
Microsoft is bringing Python to Excel | TechCrunch
Microsoft today announced the public preview of Python in Excel, which will allow advanced spreadsheet users to combine scripts in the popular Python