My Blogs -> Cybersecurity

1. Vulnerability Management - How to Prioritize Vulnerabilities ?

2. My thoughts on Vulnerability Management

3. Vulnerability Management - Scan vs Host based findings

4. Vulnerability Management - Discovery Scan

5. Vulnerability Management - Authentication not attempted

6. Vulnerability Management - No DNS name

7. Vulnerability Management - Importance

8. Vulnerability Management - FIRST, NIST and MITRE

9. Vulnerability Management - Why do False Positives occur ?

10. Firewall Review

11. Vulnerability Management - Network Authentication Failure Causes

12. Vulnerability Management - Qualys QIDs with no CVE IDs

13. CyberSecurity - RegEx

14. CyberSecurity - CipherSuites

15. Vulnerability Management - Stale 'Last Detected' dates

16. Vulnerability Management - No. of times detected

17. Vulnerability Management - Network-based vs Agent-based Internal Vulnerability Scanning

18. Vulnerability Management - Kenna and RiskIQ

19. CyberSecurity - Why do we need NMAP scripts when we have NMAP switches ?

20. Vulnerability Management - How scans work in the background

21. CyberSecurity - Few differences which kept me bothering !!

22. Vulnerability Management - Is CVE a Vulnerability Database ?

23. Vulnerability Management - What is a Superseded Patch ?

24. Vulnerability Management - Compensating controls for unpatched servers

25. Vulnerability Management - Parameters to consider while selecting Vulnerability Management Solution

26. Vulnerability Management - Remediation vs Mitigation

27. Vulnerability Management - Searching with CVE ID

28. Vulnerability Management - Is vulnerability really fixed ? 

29. Vulnerability Management - Nessus Plugin Types and Categories 

30. CyberSecurity - Metasploit Payload Types 

31. CyberSecurity - Privilege Escalation

32. Vulnerability Management - Date Types

33. Vulnerability Management - Policy Compliance (Evaluation Date, Last Updated Date, Policy Last Evaluated Date) (Qualys)

34. Vulnerability Management - KPIs and KRIs

35. Vulnerability Management - Vulnerability Detection Pipeline

36. Vulnerability Management - Sudden Surge

37. Vulnerability Scanning vs Vulnerability Management vs Vulnerability Assessment vs Penetration Testing

38. Vulnerability Management - Agent Based Scan

39. Vulnerability Management - Tussle with Application team

40. Vulnerability Management - General best practices for searching a vulnerability

41. Vulnerability Management - Firewall Detection

42. Vulnerability Management - Nessus Knowledgebase

43. Threat Intelligence vs Threat Hunting vs Threat Modeling

44. Vulnerability Management - Skipping scheduled daily agent scans

45. Vulnerability Management - Detection based on application's self-reported version number

46. Vulnerability Management - Scan with low privileged service account

47. Vulnerability Management - Tenable.sc First Discovered Date Fluctuating

48. Vulnerability Management - To be or not to be (A false positive)

49. Vulnerability Management - Analyze before upgrading versions

50. Vulnerability Management - Paranoid Mode

51. Vulnerability Management - BAU (Business As Usual) and Ad hoc tasks

52. Cybersecurity - Architect vs Engineer vs Analyst

53. Vulnerability Management - Scanning using Nessus Essentials

54. Vulnerability Management - Duplicate entries in vulnerability database

55. Vulnerability Management - On a lighter note !!

56. Vulnerability Management - Secure privileged account use

57. Vulnerability Management - SSL vs TLS

58. Vulnerability Management - SCAP and DISA STIG

59. Vulnerability Management - Interview Questions

60. Vulnerability Management - Correlation using CPE

61. Vulnerability Management - Basics for beginners

62. Vulnerability Management - Why do we need standard data formats ?

63. Vulnerability Management - Vulnerability Dashboard using Power BI

64. Vulnerability Management - Scanning approach to Load Balancers

65. Vulnerability Management - Suppress Vulnerabilities

66. CyberSecurity - Technical Documentation

67. Vulnerability Management - Nessus on a Windows Server OS versus a Windows Desktop OS

68. Vulnerability Management - Determining Scan Frequency

69. Vulnerability Management - VBA Use Cases

70. Vulnerability Management - Applied Microsoft patches not getting detected

71. Vulnerability Management - Vulnerabilities vs Vulnerable Instance (Rapid7)

72. Vulnerability Management - Orphan Vulnerabilities

73. Vulnerability Management - Mass target vulnerability remediation

74. Vulnerability Management - (Rapid7) Leftover data from deleted sites and assets

75. Vulnerability Management - (Rapid7) SQL Queries

76. Data Analytics - Excel Vs PowerBI

77. Vulnerability Management - Huge dataset

78. Vulnerability Management - On a lighter note 😅

79. Vulnerability Management - Scream Test

80. Access Management - IAM (IM & AM), IGA and PAM

81. Excel VBA - Timing Complexity

82. Vulnerability Management - Patch based approach

83. Vulnerability Management - End of Support 

84. Vulnerability Management - Notes from inaugural study of EPSS Data and Performance as published by Cyentia/FIRST

85. Vulnerability Management - Non-security Update

86. Vulnerability Management - Getting accustomed to a new VM project

87. Vulnerability Management - ChatGPT Prompts

88. Vulnerability Management - Non-running Kernel

89. Vulnerability Management - Common vulnerabilities on wireless access points (WAPs)

90. Vulnerability Management - Difference between "Broken Access Control" and "Identity and Authentication Failure" in OWASP Top 10

91. Cybersecurity - Difference between Compliance, Standard, and Framework

92. Vulnerability Management - Systems which cannot be scanned by regular scanners

93. Vulnerability Management - Security controls related to Cookies

94. CyberSecurity - Microsoft Outlook controls to prevent malicious attachments from running

95. Vulnerability Management - Categorization of vulnerabilities in OS and Non-OS for reporting purpose in Rapid7 InsightVM

96. Vulnerability Management - BAF, DRDoS, Amplification Attack

97. Vulnerability Management - Asset Identifiers

98. CyberSecurity - Workload in CWPP

99. CyberSecurity - Zero Trust vs Principle of Least Privilege (PoLP)

100. Vulnerability Management - Languages used to develop vulnerability signatures

101. Vulnerability Management - Dedicated solutions for scanning certificate related vulnerabilities

102. Vulnerability Management - Deprecated vs End of Support

103. Excel VBA - Map a list of IP addresses with a list of subnets/IP ranges

104. Vulnerability Management - Audit types for ISO management systems

105. Cybersecurity - Control Functions

106. Cybersecurity - Why use TLS at layer 5 if we have IPSec at layer 3?

107. Vulnerability Management - Importance of Banner Grabbing

108. Vulnerability Management - Code Reuse

109. Vulnerability Management - Scenarios where WMI is useful w/o AD

110. Vulnerability Management - Buffer Overflow vs. Heap Spraying

111. Cybersecurity - What if there are multiple CVSS base scores for a vulnerability?

112. Vulnerability Management - Load Balancer vs. API Gateway

113. Vulnerability Management - Understanding vulnerability posture

114. Just a thought 🤔

115. Vulnerability Management - Simple Network Management Protocol (SNMP) Best Practices

116. Vulnerability Management - CVSS score versus Qualys assigned score

117. Vulnerability Management - High Level Qualys Deployment Plan

118. Vulnerability Management - False Positive Analysis

119. Vulnerability Management - Understanding vulnerability posture

120. Vulnerability Management - Rapid7 InsightVM typical architecture

121. Excel VBA - Trick for large macros

122. Vulnerability Management - Remote Registry Service

123. Vulnerability Management - Blind Spot

124. Vulnerability Management - Core responsibilities of IVM team

125. Excel VBA - Timing Complexity (Part - 2)