April 22

Webinar Takeaway: Uncovering Secrets and Simplifying Your Life with CyberChef

Code, Security

0 comments

My key takeaways

Secrets everywhere, even on a parachute landing a mars rover
CyberChef is a GCHQ project, so be aware using it with client data
There is even a receipe for OCR in CyberChef
There is even a receipe for Creating QR-codes in CyberChef
you can use it to extract all URLs eg from a web page source code

Env

Provided by BHIS
Presenter: Brian B King

additional links

Webinar takeaway – Making MITRE ATT&CK Actionable

My key takeaways ATT&CK is a framework, not a how to or step by step instruction How do we protect ourselves from techniques like Powershell used for attacks? deep technical knowledge <- hard to get for all 836 techniques mentioned in ATT&CK Identify technique coverage Build (SIEM) detections <- also hard to build PYATTCK and

Event takeaways: BSidesMeSh21 – day 2

My key takeaways 11 min from publishing credentials (accidently) to github till pwn 2019: ~200k credentials in Github ; 2021: +20% runtime secrets go to application secrets managers AWS Secrets Manager GCP Secrets Manager Hashicorp Vault Azure Vault InfoSec’s dirty little secret: We can’t know all the options, but we still need to help secure

Jean-Christoph von Oertzen

Blog

Infosec glossary

Webinar Takeaway: Uncovering Secrets and Simplifying Your Life with CyberChef

My key takeaways

Env

additional links

You may also like

Webinar takeaway – Making MITRE ATT&CK Actionable

Event takeaways: BSidesMeSh21 – day 2