Lockpicking: Wafer Lock, AMA – Part 2
Wafer locks are simple at heart, they try as best they can to protect the assets of their owners. With a little careful skill, they can be cajoled into handing […]
Adversarial Simulation
Flying Under The Radar – An Introductory Guide To Bypassing Microsoft Defender For Identity Detections
Bypassing Microsoft Defender For Identity Detections On a few recent internal penetration tests, I found common tools and techniques for Active Directory attacks being detected by Microsoft Defender for Identity […]
Lockpicking: Legal Whims & Tumbling Pins – Part 1
Lockpicking is a practical skill that serves various purposes: from helping someone who’s locked themselves out of their house, to a challenging and engaging sport pursued by enthusiasts all around […]
Managing Cybersecurity Threats In Health Industry
Health Industry Threats Health industry threats are still on the rise. Healthcare organizations remain a target for threat actors pursuing monetary gain or fulfilling some nation-state’s agenda. As patient care […]
Credential Dumping Protections: Part 2 – Bypass LSA Protection
Welcome to Part 2 of the Windows Credential Dumping Protection series! If you are completely unfamiliar with Credential Dumping or LSA Protection, please check out Part 1! What Is LSA […]
Credential Dumping Protections: Part 1 – LSA Protection
What Is Credential Dumping? In a Windows environment, users authenticate to their machines (either locally or remotely) with their username and password. Behind the scenes, Windows hands off all authentication […]
Hashcat Quick Guide Techniques & Tips
Password Cracking has its own large methodology when it comes to targeted methods of cracking passwords. You can consider English and other language models, passphrases, 1337sp34k translations, case MoDiFCaTiOn, distributed […]
How I Got Free Propane (Lock Picking) & YOU Can Too!
Lock Picking Guide To Propane Cage Locks Howdy folks! This blog post will be a quick explanation of how lock picking can improve your everyday life. I will give a […]
Phishing Email For Success – Part 4
Welcome to part 4, my Phishing friends. Thanks for returning to our Phishing For Success series! As you probably know by now, I’m a Senior Threat Emulation Specialist here at […]
Rogue Devices As Vector For Kinetic Attacks
UPDATE: This blog post was written prior to the USB explosive incident in Ecuador. Some edits have been made to note these events. DISCLAIMER* The following blog post describes a […]