SECURITY+ BLOG INDEX

 Blog Index

Click on the name or phrase to take you to that post. We will add new links to existing posts on an ongoing basis.

802.1x

AAA

ABAC, DAC, MAC, RBAC

Access control vestibule

Acquisition
Active/Active Load Balancing

Active KillDisk
Adaptive Identity
Adware

Amplification Attack

Ansible
API (Application Programming Interface)
APT (Advanced Persistent Threat)

ARP Poisoning / Spoofing

ASLR (Address Space Layout Randomization)

Asymmetric Encryption

Authentication Factors

Backups Explained, Differential, Incremental, Full

Banner Grabbing

BCP (Business Continuity Plan)
BEC (Business Email Compromise)

Blockchain

Blue Team

Bluetooth Attacks

Bollards
Brand Impersonation

Broadcast Domain
Buffer Overflow
Bug Bounty

Capacity Planning
CASB (Cloud Access Security Broker)

CDN (Content Delivery Network)

Certificates

Certutil Video

Chain of Custody
Change Management

CIS Benchmarks
Clean Desk Policy

Cloud Deployment Models (Public, Private, Community, Hybrid)

Cloud Responsibility Matrix

CMDB (Configuration Management Database)

Code Signing
Containers

Content Categorization

Credential Replay

CRL / OCSP

CSRF (Cross-Site Request Forgery)

CVE / CVSS

CVSS Metrics

Cyber Kill Chain

CYOD (Choose Your Own Devcie)

Dark Web

DATA GOVERNANCE ROLES

Data Controller

Data Custodian
Data Owner
Data Processor

***********************************

DATA PROTECTION

Data at Rest
Data in Transit
Data in Use

***********************************

Data Retention
Data Sovereignty

Diamond Model of Intrusion Analysis

Diffie Hellman

dig

Digital Signature

Directory Traversal Attack
DKIM

DLL Injection
DMARC

DNSENUM

DNS Filtering

DNS Hijacking

DNS Records

DNSSEC

DrDoS

DTLS
EAP-FAST
EAP-TLS
EAP-TTLS

Edge Computing

E-Discovery
EDR
Elasticity

Email Attacks

ESP (Encapsulating Security Payload)
Expansionary Risk Appetite
Fail Closed

Fail Open

False Positive / False Negative

FIDO (Fast Identity Online)

FIM (File Integrity Monitoring)

FIPS (Federal Information Processing Standards)

Flow Collector
Fuzzing

Gamification

GDPR (General Data Protection Regulation)

GDPR

Right to be Forgotten

***************************************

Geofencing

Geographic Dispersion
Geographic Restrictions
Geolocation

Golden Ticket Attack
GPS Tagging

GRC (Governance, Risk, and Compliance)
Guard Rails

Hashing Algorithms: MD5, SHA, RIPEMD, HMAC

Homomorphic Encryption
Honeyfile
Honeypot / Honeynet
Honeytoken

HOTP

HSTS

HTTP Status Codes

IaaS (Infrastructure as a Service)

IaC (Infrastructure as Code)

IAM (Identity and Access Management)

IKE Phase 1
IMAP

Impossible Travel

inSSIDer

IPSec
IPSec Transport Mode
ISACs

ISO

ITIL

Jailbreaking, Rooting, Sideloading

Journaling

JSON (JavaScript Object Notation)

Juice Jacking

Jump Box / Jump Server

K-Rated Fencing

Kerberoasting

Kerberos

Kerberos, Radius, SAML

Key Escrow

Key Rotation
Key Stretching
KPI (Key Performance Indicator)

KRACK Attack

KRIs (Key Risk Indicators)

K-Rated Fencing

Lateral Movement

LDAP Injection

Legal hold

Linux Permissions
Load Balancing

LSASS and LSASS Dumping

MAC Flooding

Malicious Update

Malware Types Part 2

Malware Types Part 3

Managed PDU

Mandatory Vacation

Media Sanitization Methods

Metadata

Metasploit
Microservices
Mimikatz

Mission Essential Functions

MITRE ATT&CK

MOA (Memorandum of Agreement)

MSSP (Managed Security Service Provider)

MTBF
MTTF
Nation State

Netcat

NetFlow

Netstat

NFC

NFV (Network Function Virtualization)
NGFW (Next Generation Firewall)
Nikto

NIST Special Publication 800-61 Revision 2 

NIST SP 800-207

Nmap

nslookup

OAuth
OCSP (Online Certificate Status Protocol)

OCSP Stapling

Octal Permissions (Linux)

OOB (Out-of-Band)
OpenID Connect

Order of Volatility
OSINT (Open Source Intelligence)
OWASP

OWASP Dependency-Check

OWASP Dependency-Track

PaaS (Platform as a Service)

Package Monitoring
PAM (Privilege Access Management)

Pass-the-Hash Attack

Password Attacks - Offline

Password Attacks Online

Password Reuse

Passwordless Authentication

Password Policy

Password Spraying Attack

PBKDF2

PCI DSS

PDU (Power Distribution Unit)

PEAP

Percent Encoding

Persistence - Load Balancing

PFS (Perfect Forward Secrecy)

PGP (Pretty Good Privacy)

Pharming
Phishing Campaign

Pivoting

Playbook

PLCs (Programmable Logic Controllers)
Policy Administrator (Zero Trust)
Policy Engine (Zero Trust)
POP3 (Post Office Protocol 3)

Port Numbers

Pressure sensors
Pretexting

Purple Team

Quantitative Assessment

Quishing

Race Condition
Rapid Elasticity

Recon-ng

Red Team

Regionally Diverse Backups

RESTful API
Reverse Engineering

RFID Cloning

Right-to-Audit
Right to be Forgotten
Risk Register

Risk Transfer

RPO (Recovery Point Objective)

RTO (Recovery Time Objective)
RTOS (Real-Time Operating System)
SaaS (Software as a Service)

SAE (Simultaneous Authentication of Equals)
Salting Passwords
SAN (Storage Area Network)
SASE

SBOM (Software Bill of Materials)

SCA (Software Composition Analysis)

SCAP (Security Content Automation Protocol)

SCEP

SDN
SD-WAN
Secure Enclave

Secure Erase

Security Controls
Security Control Categories
SED (Self-Encrypting Drive)
SELinux
Sensitive Data
Serverless
Session Hijacking
SFTP vs SCP
Shadow IT

Shibboleth
Shodan
Side Channel Attack
SIEM
Single Pane of Glass

SIP (Session Initiation Protocol)
SMB (Server Message Block)
S/MIME
Smishing
SMTP (Simple Mail Transfer Protocol)
SNMP
SOAR (Security Orchestration, Automation, and Response)
SOC 2 Type 1 and 2

SOX (Sarbanes-Oxley Act)
SPF (Sender Policy Framework)

Split Tunneling

SQL Injection

SSL Stripping / SSL/TLS Downgrade

SSRF (Server-Side Request Forgery)
Steganography

STIGs
STIX
Strings
Supply Chain Security

SWG (Secure Web Gateway)

SY0-701 Acronym Flashcards

SY0-701 Acronyms Video

Symmetric Encryption

Syslog
TAXII
Tcpdump

Tcpreplay
TFTP
theHarvester

THREAT ACTORS

Competitor
Hacktivist
Insider
Nation-State / APT
Organized Crime / Criminal Syndicate
Unskilled / Script Kiddie

********************************

Threat Hunting

Threat Scope Reduction
Threat Vector

Time-based Tokens

TLS Proxy

TOCTOU
Tokenization

TOTP
TPM (Trusted Platform Module)
UEBA

USB Data Blocker

UTM (Unified Threat Management)
Vishing

VLAN Hopping
VM Escape
VM Sprawl
Vulnerable Software
WAF (Web Application Firewall)
Watering Hole Attack
WEP

White Team

Whois Command

Wireless Authentication Methods

Wireless Heat Map
Workforce Multiplier
Worm
WPA
XDR

XMAS Tree Scan
XXE attack

XSS (Cross-Site Scripting Attack)

Yellow Team

YUM

Zero Standing Privileges

Zero Trust Policy Administrator
Zero Trust Policy Engine
ZTA (Zero Trust Architecture)