Resources

Blog

PCI SSC Eliminates “In Place With Remediation” – What’s Changed?

The PCI SSC has eliminated the “In Place With Remediation” reporting option – how does...

Blog

Threat Emulation Training: Where to Start

Understanding threat emulation and purple teaming is paramount to bolstering your controls – these are...

Blog

Using the ATT&CK Evaluations to Fill Defensive Gaps

Author: Alex Martirosyan,

MITRE ATT&CK Evaluations are a powerful tool when it comes to assessing current configurations, defensive...

Blog

What Are Active Directory Certificate Services (AD CS), and How Can Attackers Exploit It?

Misconfigured Active Directory Certificate Services (AD CS) can open up attack paths – here’s how...

Blog

A Penetration Tester’s Best Friend – Multicast DNS (mDNS), Link-local Multicast Name Resolution (LLMNR), and NetBIOS-Name Services (NetBIOS-NS)

Multicast DNS, NetBIOS, and LLMNR are a penetration tester’s best friend – here’s why.

Blog

Using Coerced Authentication Attempts to Compromise a Domain

PetitPotam is becoming an increasingly common tool in attack paths – here’s how they work,...

Blog

Budgeting for a Recession

Author: Cecilia M. Frerotte,

In the wake of rising interest rates, businesses must consider potential slowdowns. Here’s how you...

Blog

Revenue Forecasting: 5 Key Factors to Consider When Evaluating Your Pipeline

Author: Cecilia M. Frerotte,

With a pipeline of customer leads under your belt, it’s time to evaluate your revenue...