Guide to Cyber Threat
Modeling

t.iss.one/Library_Sec

#Research
"JavaScript Instrumentation for Search-Based Software Testing: A Study with RESTful APIs", 2021.

]-> The first open-source AI-driven tool for automatically generating system-level test cases for web/enterprise applications:
https://github.com/EMResearch/EvoMaster

t.iss.one/Library_Sec

#hardening
"Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities", 2021.
]-> https://www.bsi.bund.de/EN/Topics/Cyber-Security/Recommendations/SiSyPHuS_Win10/AP11/SiSyPHuS_AP11_node.html

t.iss.one/Library_Sec

#Mitre
Getting Started With MITRE ATT&CK

t.iss.one/Library_Sec

#Analytics
"To click or not to click", 2021.
// What we Learned from Phishing 80K People...

t.iss.one/Library_Sec

#Cheatsheet #XSS
XSS Injection Cheatsheet

📄 t.iss.one/Library_Sec

#Whitepaper
#Threat_Research
"UPnProxy:
Blackhat Proxies via NAT Injections", 2022.
]-> https://www.akamai.com/blog/security/upnproxy-eternal-silence
t.iss.one/Library_Sec

#Research
"DRAWNAPART:
A Device Identification Technique based on Remote GPU Fingerprinting", NDSS, 2022.

t.iss.one/Library_Sec

#Security
Application Security Introduction - OVERVIEW

t.iss.one/Library_Sec

#Research
"Adversarial Attacks Against Deep Generative Models on Data: A Survey", Dec. 2021.

t.iss.one/Library_Sec

Through the Lens of Threat and Vulnerability Management

📚 t.iss.one/Library_Sec

#Analytics
#Threat_Research
"Red Canary’s 2021 Threat Detection Report".

t.iss.one/Library_Sec

#Malware_analysis
INTRODUCTION TO MALWARE ANALYSIS

t.iss.one/Library_Sec

#Forensics #Pegasus
FORENSIC METHODOLOGY
REPORT

t.iss.one/Library_Sec

#CCDCoE #NATO

NATO CCDCOE TRAINING CATALOGUE, 2022

t.iss.one/Library_Sec

#pentesting #AD
PenTest in Windows Server and Active Directory

t.iss.one/Library_Sec

#Whitepaper #privilege
"Group policy client service
Insecure file operations causing escalation of privilege".

t.iss.one/Library_Sec

#Offensive_security
Cross-site scripting (XSS) cheat sheet, 2022.
]-> https://portswigger.net/web-security/cross-site-scripting/cheat-sheet#file-upload-attacks

t.iss.one/Library_Sec

The Endpoint Security Checklist

📚 t.iss.one/Library_Sec

#RedTeam

Hunting Red Team Activities
with Forensic Artifacts

t.iss.one/Library_Sec

#Whitepaper #privilege
"Lock screen/Bitlocker bypass/elevation of privilege in Bitlocker".

t.iss.one/Library_Sec