Gabriel's Blog

In today’s interconnected world, compliance is critical for protecting sensitive information and ensuring organizations meet regulatory requirements. Based on my experience as a Certified Information Systems Security Professional (CISSP), here's what you need to know about compliance knowledge: 1. Understanding Compliance Compliance refers to adhering to laws,

Cybersecurity is a continuous battle to stay ahead of potential attackers. To maintain robust defenses, enterprises must understand how attackers operate and test their environments against real-world techniques. Enter Atomic Red Team, a powerful and lightweight framework developed by Red Canary to simulate adversary techniques in your network. What is

Risk assessment is a cornerstone of effective decision-making in business, healthcare, cybersecurity, project management, and many other fields. It helps organizations identify potential threats and weigh them against potential opportunities to make sound strategic choices. Broadly, risk assessments can be classified into two types: qualitative and quantitative. Each approach has

SpiderFoot is a powerful open-source intelligence (OSINT) tool designed for automated reconnaissance. It gathers data about your targets, whether it's a domain, an IP address, an email, or even a person's name, by leveraging multiple online resources. Here's a step-by-step guide to using SpiderFoot

Wi-Fi security has come a long way, but even today, WPA2 networks are susceptible to brute force and dictionary attacks under the right conditions. With affordable cloud computing platforms like TensorDock, accessing the computational power of GPUs for such purposes has never been easier. In this guide, we’ll walk

In today’s dynamic cybersecurity landscape, staying ahead of emerging threats is critical for maintaining organizational security. OpenCTI, an open-source Cyber Threat Intelligence (CTI) platform, offers a robust framework for tracking and analyzing cybersecurity news, enriching threat intelligence, and seamlessly integrating with Security Operations Center (SOC) workflows. In this post,

As a Security Operations Center (SOC) analyst, responding to potential phishing emails is a critical part of protecting your organization. Employees often report suspicious emails, and it’s your responsibility to investigate and determine whether they pose a genuine threat. Here's a structured approach to dissecting these emails

Phishing simulations are a critical component of an organization's cybersecurity strategy, helping to train employees on identifying and avoiding malicious emails. With tools like GoPhish and Oracle Email Delivery, setting up a realistic and effective phishing campaign has never been easier—and the best part is that both

Before diving into advanced security solutions like EDR (Endpoint Detection and Response) or XDR (Extended Detection and Response), consider a simpler, yet powerful strategy: reducing the overall attack surface of your endpoints. One often-overlooked solution is Microsoft Defender’s built-in Attack Surface Reduction (ASR) rules. And the best part? These

In the world of penetration testing and red teaming, reconnaissance is the foundation of every successful operation. Understanding the target's landscape is critical, and FOCA (Fingerprinting Organizations with Collected Archives) stands out as a robust tool designed to streamline and elevate the recon process. Developed by ElevenPaths, FOCA

The dark web has long been a topic of fascination and intrigue. Shrouded in mystery, this part of the internet is accessible only via specific software, such as the Tor browser, and is home to anonymous communication, marketplaces, forums, and more. For those interested in exploring this realm, understanding how

Reverse engineering might sound like something out of a spy novel, but it’s a cornerstone of cybersecurity, software analysis, and even intellectual curiosity. If you've ever wondered how to dissect software to understand its inner workings, Ghidra is the perfect tool to get started. This powerful, free,