Siber Araştırmalar #9

Mert Coskuner

2 min readOct 16, 2021

Makaleler

NIST Special Publication (SP) 800-204C (Draft), Implementation of DevSecOps for a…

Cloud-native applications have evolved into a standardized architecture consisting of multiple loosely coupled…

csrc.nist.gov

Building an end-to-end Kubernetes-based DevSecOps software factory on AWS | Amazon Web Services

DevSecOps software factory implementation can significantly vary depending on the application, infrastructure…

aws.amazon.com

Security features of Bottlerocket, an open source Linux-based operating system | Amazon Web…

Bottlerocket is an open source Linux-based operating system from Amazon that was purpose built for running containers…

aws.amazon.com

Encryption with Transit Data Keys

The Transit Secrets Engine provides the ability to generate a high-entropy data key to support cryptographic operations…

medium.com

Scaling Kubernetes Tenant Management with Hierarchical Namespaces Controller

Three years ago, we took the decision to break our monolithic API into microservices, and move from the physical…

engineering.mercari.com

Falco Hands-on Labs

Learning how to use new tools is not always easy, especially with Security and Cloud. We know that Falco is not an…

falco.org

Azure Privilege Escalation via Service Principal Abuse

Intro and Prior Work

posts.specterops.io

Defining Cobalt Strike Components So You Can BEA-CONfident in Your Analysis

are the Cobalt Strike component that payloads, such as BEACON, use to connect to a team server. Cobalt Strike supports…

www.mandiant.com

Analyzing and Detecting a VMTools Persistence Technique

Introduction It is always fun to reexplore previously discovered techniques or pick back on old research that was put…

bohops.com

The Code Reveals All: Why Secure Code Review Should be an Integral Part of DevSecOps

As security has become a growing focus within the DevOps community - resulting in the new and expanding field of…

labs.bishopfox.com

Getting started in macOS security

Many people used to ask me where to start learning about macOS security or exploitation, what are the trainings or…

theevilbit.github.io

Araçlar

GitHub - vmware-tanzu/cartographer

Cartographer is a Kubernetes native Choreographer. It allows users to configure K8s resources into re-usable Supply…

github.com

GitHub - hashicorp/damon: A terminal UI (TUI) for HashiCorp Nomad

Damon is a terminal user interface (TUI) for Nomad. It provides functionality to observe and interact with Nomad…

github.com

GitHub - unicorn-engine/unicorn: Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc…

Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework based on QEMU. Unicorn offers some…

github.com

NIST SP 800-53 Revision 5 benchmark | Azure Compliance mod | Steampipe Hub

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST…

hub.steampipe.io

kdigger: a Context Discovery Tool for Kubernetes

This article is an introduction to Kubernetes security through the presentation of a new context discovery tool. It was…

blog.quarkslab.com

Okuduğunuz için teşekkürler!

Eğer bu okuma listesini yararlı bulduysanız ve aynı şekilde yararlı bulacağını düşündüğünüz arkadaşlarınız varsa, siz de listeyi paylaşarak listenin yayılmasına yardımcı olabilirsiniz.

Eğer bülten hakkında sorularınız, yorumlarınız ya da geri bildirimleriniz varsa, yorum olarak bırakabilir ya da /in/mcoskuner üzerinden bana ulaşabilirsiniz.

Siber Araştırmalar #9

Makaleler

NIST Special Publication (SP) 800-204C (Draft), Implementation of DevSecOps for a…

Cloud-native applications have evolved into a standardized architecture consisting of multiple loosely coupled…

Building an end-to-end Kubernetes-based DevSecOps software factory on AWS | Amazon Web Services

DevSecOps software factory implementation can significantly vary depending on the application, infrastructure…

Security features of Bottlerocket, an open source Linux-based operating system | Amazon Web…

Bottlerocket is an open source Linux-based operating system from Amazon that was purpose built for running containers…

Encryption with Transit Data Keys

The Transit Secrets Engine provides the ability to generate a high-entropy data key to support cryptographic operations…

Scaling Kubernetes Tenant Management with Hierarchical Namespaces Controller

Three years ago, we took the decision to break our monolithic API into microservices, and move from the physical…

Falco Hands-on Labs

Learning how to use new tools is not always easy, especially with Security and Cloud. We know that Falco is not an…

Azure Privilege Escalation via Service Principal Abuse

Intro and Prior Work

Defining Cobalt Strike Components So You Can BEA-CONfident in Your Analysis

are the Cobalt Strike component that payloads, such as BEACON, use to connect to a team server. Cobalt Strike supports…

Analyzing and Detecting a VMTools Persistence Technique

Introduction It is always fun to reexplore previously discovered techniques or pick back on old research that was put…

The Code Reveals All: Why Secure Code Review Should be an Integral Part of DevSecOps

As security has become a growing focus within the DevOps community - resulting in the new and expanding field of…

Getting started in macOS security

Many people used to ask me where to start learning about macOS security or exploitation, what are the trainings or…

Araçlar

GitHub - vmware-tanzu/cartographer

Cartographer is a Kubernetes native Choreographer. It allows users to configure K8s resources into re-usable Supply…

GitHub - hashicorp/damon: A terminal UI (TUI) for HashiCorp Nomad

Damon is a terminal user interface (TUI) for Nomad. It provides functionality to observe and interact with Nomad…

GitHub - unicorn-engine/unicorn: Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc…

Unicorn is a lightweight, multi-platform, multi-architecture CPU emulator framework based on QEMU. Unicorn offers some…

NIST SP 800-53 Revision 5 benchmark | Azure Compliance mod | Steampipe Hub

Run individual configuration, compliance and security controls or full compliance benchmarks for CIS, HIPAA HITRUST…

kdigger: a Context Discovery Tool for Kubernetes

This article is an introduction to Kubernetes security through the presentation of a new context discovery tool. It was…

Okuduğunuz için teşekkürler!

Written by Mert Coskuner