Automating Cybersecurity Metrics: A series of blog posts on cybersecurity metrics and security automation ~~~~~~~~~~~~~~~~~~~~~~~~ by Teri Radichel #cybersecurity #cloudsecurity #metrics #automation medium.com/cloud-security/au…
2
Chronicling my venture into AI here. 🤖 Sept 25 was key post. Started exploring production ready code. Immediately saw pitfalls. Wrote framework and better context. A month later… accomplished a lot. No time to write. Follow @TeriRadichel for updates. medium.com/cloud-security/ar…
1
126
Threat Modeling a Batch Job System - AWS Security Community Day ~~ Slides with friend links ~ see notes slideshare.net/slideshow/thr…
2
117
How do you verify the software on the new network appliance you got is running the most up to date, valid software? Supply chain security: Updating and verifying firmware offline ~~ Updating UDM Pro Firmware offline prior to connecting to the Internet medium.com/cloud-security/su…
1
95
I’ve been reviewing the SRP spec because I ran across it on a pentest. The specification is very unclear and the implementation from certain vendors does not appear to match. ~~ Secure Remote Password (SRP) ~~ Considering the value and avoiding pitfalls medium.com/cloud-security/se…
78
AWS GuardDuty Adds New Suspicious Shell Creation and Privilege Escalation Findings ~~ New finding types targeted at top security threats on AWS medium.com/cloud-security/aw…
26
RT @TeriRadichel: Restoring a pfSense from Netgate After a Factory Reset ~~ Also added Interface Groups and Rules to simplify management ~~…
1
Penetration Test Proposal ~~ What to expect from a penetration test or security assessment proposal from 2nd Sight Lab ~~ #pentest #security #cybersecurity medium.com/cloud-security/pe…
51
Why CISOs Need Indemnification ~~ What is it and why it matters in light of new SEC rules ~~ I talked to a lawyer who formerly worked for the SEC medium.com/cloud-security/wh…
2
4
631
Subnets And Routes For a Public NAT ACM.471 Setting up proper routing to leverage a NAT to reach the Internet on AWS; Avoid traffic dropped due to transitive routing medium.com/cloud-security/su…
53
Sending Traffic From pfSense to a Site to Site VPN to a VGW to a NAT in AWS ACM.470 Another thing Q told me I could do but not allowed medium.com/cloud-security/se…
57
Test Sending Traffic From a Load Balancer To A NAT Gateway ACM.469 Spoiler Alert: Q told me I could do this but I can’t :( but this might help someone trying to set up a network load balancer medium.com/cloud-security/te…
30
Creating an AWS Site to Site VPN for pfSense with a Virtual Private Gateway ACM.468 Configuring specific encryption options to prevent downgrade attacks medium.com/cloud-security/cr…
68
Calculating the Cost of An AWS Architecture plus a Region Security Warning ACM.467 Looking at the cost of an AWS private network that sends data from a Site to Site VPN to a Transit Gateway to a NAT medium.com/cloud-security/ca…
36
Configuring the VPC and VPC Flow Logs for an AWS Site to Site pfSense VPN ACM.465 Creating a VPC to connect our pfSense to via a VPN and configuring logging to inspect the related network traffic medium.com/cloud-security/co…
46