SECURITY+ BLOG INDEX

 Blog Index

Click on the name or phrase to take you to that post. We will add new links to existing posts on an ongoing basis.

802.11a to 802.11be (Wi-Fi Standards)
802.1x

AAA

ABAC, DAC, MAC, RBAC

AbuseIPDB
Access control vestibule

Acquisition
Acquisition in Digital Forensics
Active/Active Load Balancing

Active KillDisk
Adaptive Identity
ADB (Android Debug Bridge)

Adversary Emulation
Adware

AI Model Governance
Aircrack-ng
Alternate Data Streams
Amplification Attack

Ansible
API (Application Programming Interface)
APT (Advanced Packing Tool)
APT (Advanced Persistent Threat)

Arachni
ARP Poisoning / Spoofing

(AS) Autonomous System
ASLR (Address Space Layout Randomization)

Asymmetric Encryption

Atomic Red Team
Attack Surface

Attestation
Attestation of Compliance
Authentication Factors

Backups Explained, Differential, Incremental, Full

Banner Grabbing

BCP (Business Continuity Plan)

Beaconing
BEC (Business Email Compromise)

BGP Security
Blockchain

BloodHound
Blue Team

Bluetooth Attacks

Bluetooth Pairing Attacks
Bollards
Branch Protection
Brand Impersonation

Broadcast Domain
Buffer Overflow
Bug Bounty

Burp Suite

BYOD (Bring Your Own Device)
Caching proxy 

Capacity Planning
CASB (Cloud Access Security Broker)

CCE (Common Configuration Enumeration)
CDN (Content Delivery Network)

CDP (Cisco Discovery Protocol)
Censys.io
Certificates

Certutil Video

CFAA (Computer Fraud and Abuse Act)
Chain of Custody
Change Management

Choosing a Penetration Testing Provider
CIA Triad
CIS Benchmarks
Clean Desk Policy

Cloud Deployment Models (Public, Private, Community, Hybrid)

Cloud Responsibility Matrix

CMDB (Configuration Management Database)

COBIT
Code Signing
Command and Control (C2) Architectures
Containers

Content Categorization

CPE (Common Platform Enumeration)
Credential Replay

Credential Stuffing
CRL / OCSP

Cross-Site Scripting (XSS)
Cryptographic Vulnerabilities
CSRF (Cross-Site Request Forgery)

CVE / CVSS

CVSS Metrics

Cyber Kill Chain

Cyber Kill Chain
CYOD (Choose Your Own Device)

Dark Web
DAST (Dynamic Application Security Testing)

DATA GOVERNANCE ROLES

Data Controller

Data Custodian
Data Owner
Data Processor

***********************************

DATA PROTECTION

Data at Rest
Data in Transit
Data in Use

***********************************

Data Enrichment
Data Masking
Data Retention
Data Scientist
Data Sovereignty

DDR RAM
Deauthentication attack 

DHCP Reservation
Diamond Model of Intrusion Analysis

Differential Backup
Diffie Hellman

DiffServ
dig

dig
Digital Signature

DirBuster
Directory Brute Force
Directory Traversal Attack

Disassociation attack 
DKIM

DLL Injection
DMARC

DNSENUM

DMVPN
DNS Filtering

DNS Hijacking

DNS Records

DNSSEC

DoH (DNS over HTTPS)
DoT (DNS over TLS)
DrDoS

DRDoS
DREAD
DTLS
Dual Stack
Due Diligence vs Due Care
EAP-FAST
EAP-TLS
EAP-TTLS

Edge Computing

E-Discovery
EDR
Elasticity

Email Attacks

EPSS (Exploit Prediction Scoring System)
ESP (Encapsulating Security Payload)
Evil Twin and Rogue AP Attacks
Evil Twin Attacks on WPA2-Enterprise
ExFat
Expansionary Risk Appetite
Fail Closed

Fail Open

False Negative

False Positive

FAT32
Federation
FIDO (Fast Identity Online)

FIM (File Integrity Monitoring)

FIPS (Federal Information Processing Standards)

Flow Collector
FOCA
Fuzzing

Gamification

GDPR (General Data Protection Regulation)

GDPR

Right to be Forgotten

***************************************

GDPR
Geofencing

Geographic Dispersion
Geographic Restrictions
Geolocation

Golden Ticket Attack
Gophish
GPS Tagging

GRC (Governance, Risk, and Compliance)
GRE
Guard Rails

Hardware Security Modules, vTPM, and Secure Boot

Hashcat
Hashing Algorithms: MD5, SHA, RIPEMD, HMAC

Hiren's BootCD PE
Homomorphic Encryption
Honeyfile
Honeypot / Honeynet

Honeypots and Honeynets
Honeytoken

HOTP

hping3
HSTS

HTML Scraping
HTTP Request Smuggling

HTTP Security Headers
HTTP Status Codes

Hydra
IaaS (Infrastructure as a Service)

IaC (Infrastructure as Code)

IAM (Identity and Access Management)

IKE Phase 1
IMAP

Impacket
Impossible Travel

Impossible Travel
inSSIDer

IPSec
IPSec Transport Mode
IPv4 Address Class Ranges
ISACs

ISACs
ISO

ISO 27001 Practice Questions
ISO/IEC 27001

ITIL

Jailbreaking, Rooting, Sideloading

Journaling

JSON (JavaScript Object Notation)

Juice Jacking

Jump Box / Jump Server

K-Rated Fencing

Kerberoasting

Kerberos

Kerberos, Radius, SAML

Key Escrow

Key Rotation
Key Stretching
Kiosk Escape
Kismet
KPI (Key Performance Indicator)

KRACK Attack

KRIs (Key Risk Indicators)

K-Rated Fencing

LAMP (Linux, Apache, MySQL, PHP)
Lateral Movement

LDAP Injection

Legal hold

LFI (Local File Inclusion)
Link aggregation 

Linux Permissions
Load Balancing

Lock Picking
LSASS and LSASS Dumping

MAC Flooding

Malicious Update

Maltego
Malware Types Part 1
Malware Types Part 2

Malware Types Part 3

MAN (Metropolitan Area Network)
Managed PDU

Mandatory Vacation

Masscan
Media Sanitization Methods

Metadata

Metasploit
Metered Utilization
Microservices
Mimikatz

Mission Essential Functions

MITRE ATT&CK

MOA (Memorandum of Agreement)

MSSP (Managed Security Service Provider)

MTBF

MTD (Maximum Tolerable Downtime)
MTTD (Mean Time to Detect)
MTTF
MTTR (Mean Time to Remediate)
MTTR (Mean Time to Respond)
Multi-Cloud Security
NAT (Network Address Translation)
Nation State

Netcat

NetFlow

Netstat

NFC

NFV (Network Function Virtualization)
NGFW (Next Generation Firewall)
Nikto

NIST Special Publication 800-61 Revision 2 

NIST SP 800-207

Nmap

Nmap Port States

Non-transparent proxy 

nslookup

NTFS
NTLM
NTP Amplification Attacks
NTP Slew Method
OAuth

Obfuscated Links
Obfuscation
OCSP (Online Certificate Status Protocol)

OCSP Stapling

Octal Permissions (Linux)

OCTAVE
OOB (Out-of-Band)
OpenID Connect

OpenStego
Order of Volatility
OSINT (Open Source Intelligence)
OSSTMM
OWASP

OWASP Dependency-Check

OWASP Dependency-Track

PaaS (Platform as a Service)

Package Monitoring
PAM (Privilege Access Management)

Pass-the-Hash Attack

Password Attacks
Password Attacks - Offline

Password Attacks Online

Password Hashing and Offline Cracking
Password Reuse

Passwordless Authentication

Password Policy

Password Spraying Attack

PBKDF2

PCI DSS

PDU (Power Distribution Unit)

PEAP

Percent Encoding

Persistence - Load Balancing

PFS (Perfect Forward Secrecy)

PGP (Pretty Good Privacy)

Pharming
Phishing Campaign

Physical and Environmental Attacks
Pivoting

PKI (Public Key Infrastructure)
Playbook

Playbooks

PLCs (Programmable Logic Controllers)
Policy Administrator (Zero Trust)
Policy Engine (Zero Trust)
POP3 (Post Office Protocol 3)

Port Knocking and Single Packet Authorization

Port Numbers

Port Scanning

Pressure sensors
Pressure, Motion and Contact Sensors
Pretexting

Pretexting
Protocol and Packet Analyzers
PTES (Penetration Testing Execution Standard)
PTP (Precision Time Protocol)
Purple Team

Python
QoS - Three Primary Planes
Quantitative Assessment

Quantitative Risk Assessment
Quishing

Quishing
Race Condition

Ransomware
Rapid Elasticity

RCE (Remote Code Execution)

Recon-ng

Red Team

Regionally Diverse Backups

Regulations, Standards and Frameworks
Responder.py
Responsive Control
RESTful API
Reverse Engineering

Reverse proxy

Reverse proxy
RFC 1918
RFID Cloning

Right to Be Forgotten
Right-to-Audit
Right to be Forgotten
Risk Register

Risk Transfer

Risk Transference
RPO (Recovery Point Objective)

RSSI
RTO (Recovery Time Objective)
RTOS (Real-Time Operating System)
Rubeus
SaaS (Software as a Service)

SAE (Simultaneous Authentication of Equals)
Salting Passwords
SAN (Storage Area Network)
SASE

SBOM
SBOM (Software Bill of Materials)

SCA (Software Composition Analysis)

SCAP (Security Content Automation Protocol)

SCEP

SDN
SD-WAN
Search Engine Exposure
Secure Enclave

Secure Enclaves and Confidential Computing
Secure Erase

Securing LLM Applications
Security Controls
Security Control Categories
Security Groups
Security Home Lab
Security+ Question Keywords
Security+ SY0-701 Practice Questions
SED (Self-Encrypting Drive)
SELinux
SELinux - setenforce
Sensitive Data
Serverless
Service Account Security
Session Hijacking
SET (Social-Engineer Toolkit)
SFTP vs SCP
Shadow IT

Shibboleth
Shodan
Side Channel Attack
Sidecar Scan
SIEM
Single Pane of Glass

SIP (Session Initiation Protocol)
SLIs, SLOs and SLAs
SLO (Service Level Objective)
SMB (Server Message Block)
S/MIME
Smishing
SMTP (Simple Mail Transfer Protocol)
SNMP
SNMP Community String
SOAR (Security Orchestration, Automation, and Response)
SOC 2 Type 1 and 2

SOC 2 Type 1 vs Type 2
SOW, MSA and MOU
SOX (Sarbanes-Oxley Act)
SPF (Sender Policy Framework)

Split Tunneling

SQL Injection

SQLMap
SSID, BSSID, ESSID and IBSS
SSL Accelerator vs SSL Decryptor
SSL Stripping / SSL/TLS Downgrade

SSRF (Server-Side Request Forgery)
Steganography

STIGs
STIX
STP / RSTP
STRIDE
Strings

Supply Chain Security
Supply Chain Security
SWG (Secure Web Gateway)

SY0-701 Acronym Flashcards

SY0-701 Acronyms Video

Symmetric Encryption

Syslog
Syslog Logging Levels
TACACS+
TAXII
Tcpdump

Tcpreplay
TFTP
theHarvester

THREAT ACTORS

Competitor
Hacktivist
Insider
Nation-State / APT
Organized Crime / Criminal Syndicate
Unskilled / Script Kiddie

********************************

Threat Hunting

Threat Modeling
Threat Scope Reduction
Threat Vector

Time-based Tokens

TLS Proxies
TLS Proxy

TOCTOU
Tokenization

TOTP
TPM (Trusted Platform Module)

Traffic Policing
Traffic Shaping
Transparent proxy
Trivy
True Negative
True Positive
TruffleHog
UEBA

URL Shorteners

URL Unshortening
USB Data Blocker

UTM (Unified Threat Management)
Vendor Diversity
Vendor Lock-In
Vishing

VLAN Hopping
VM Escape
VM Escape and Hypervisor Security
VM Sprawl

VM Sprawl
VPC (Virtual Private Cloud)
Vulnerable Software
VXLAN
WAF (Web Application Firewall)
WAN (Wide Area Network)
Watering Hole Attack
Web Application Testing Methodology
Webhooks

Web Scraping
WEP

White Team

WHOIS
Whois Command

WiGLE.net
Windows Privilege Escalation
Wireless Authentication Methods

Wireless Authentication Protocols
Wireless Heat Map
Workforce Multiplier
Worm
WPA
WPScan
XDR

XMAS Tree Scan
XML Bomb
XXE attack

XSS (Cross-Site Scripting Attack)

Yellow Team

YUM

ZAP (Zed Attack Proxy)
Zero Standing Privileges

Zero Touch Provisioning (ZTP)
Zero Trust Policy Administrator
Zero Trust Policy Engine
ZTA (Zero Trust Architecture)