Netsparker now Invicti  field Notes

The new features automatic configuration of URL rewrite rules and Scan Policy Optimizer will automate more of the pre-scan process for you, making the scanning of hundreds and thousands of websites an easier task. We are also introducing the new proof of exploitation, which will definitely ease the post...

Legacy Netsparker Notes

Files is in a bundled .zip file for storage convenience only. Legacy Netsparker Policy Options.docxNetsparker Options.docx Legacy Netsparker Policies.xlsLegacy Netsparker Logging.xls

BURP – PRO Notes

Files is in a bundled .zip file for storage convenience only. Burp Pro Notes.docx

Rapid7 Appliance Deployment Checklist

Files is in a bundled .zip file for storage convenience only. Rapid7 Appliance Deployment Checklist.doc

Rapid7 Insight Product Field Notes

InsightIDR User Behavior Analytics & SIEM   InsightVM Vulnerability Management   InsightAppSec Dynamic Application Security Testing   InsightConnect Orchestration & Automation   InsightOps Log Management   DivvyCloud by Rapid7 Continuous Security and Compliance for Cloud The core of the Rapid7 Insight cloud:  InsightVM gives you live vulnerability management and endpoint...

Rapid7 Appliance Datasheet

Files is in a bundled .zip file for storage convenience only. Appliance Data Sheet.docx

Rapid7 Pro’s – Con’s

Executive Summary Nexpose is Rapid’s 7 vulnerability solution for scanning network and devices similar to Tenable Nessus / Security Center. The service utilizes two types of components, NSC (Security Console) and NSE (Scan Engines). Scan engine do the scanning and send back summary info to the console which houses...

Rapid7 Overview

Files is in a bundled .zip file for storage convenience only. Rapid7 Overview.pdf

Nexpose 1000 Series Appliance Data Sheet

Files is in a bundled .zip file for storage convenience only. Nexpose 1000 Series Appliance Data Sheet.doc

The Process that Rapid7 goes through when Scanning Hosts

Rapid7 scanning methodology mainly focuses on the different steps that an attacker might follow in order to perform an attack. It tries to use exactly the same discovering and information gathering techniques that will be used by an attacker. The scanning engine is composed of different modules that handle...

Sample Visio – How o365 Alerting Works

Document download How o365 Alerting Works.vsdx

Sample Visio – o365 Anomaly Detection Architecture

Document download o365 Anomaly Detection Architecture.vsdx

Usable Visio – BigFix – QRadar: Integration Overview

Document download QRadar BigFix Integration.vsdx

Sample Visio – Governance, ITSM, Financial Stewardship Management Model

Document download Governance, ITSM, Financial Stewardship Management Model.vsd

Windows 20xx Configuration Files

Required files On Intel based machines: On RISC based machines:   BOOT.INI BOOT.INI is stored in the root directory of the computers primary boot partition and contains the menu of operating systems that may be booted. Has two sections: Options are: To modify this file, you must change its...

MS Edge Configuration

MS word document download Internet Explorer DNS Devolution.doc

IE Operational Details and Technology Flows

MS word document download IE Operational Details and Technology Flows.doc

Internet Explorer specific Registry settings

MS word document download Internet Explorer specific Registry settings.doc

Directx, Java and Activex runtime errors and diagnostics

MS Word Document download Directx Java and Activex runtime errors and diagnostics.doc

Bluecoat SGS Notes

Sample SGS Common Filter ExpressionsFilter Expression Packets Capturedip host 10.25.36.47 Captures packets from a specific host with IP address 10.25.36.47.not ip host 10.25.36.47 Captures packets from all IP addresses except 10.25.36.47.ip host 10.25.36.47 and ip host 10.25.36.48 Captures packets from two IP addresses: 10.25.36.47 and 10.25.36.48.ether host 00:e0:81:01:f8:fc Captures...

Sample Visio – Identify and Access Management Conceptual Model

Document download IAM Conceptual Model.vsd

Latency – And Slow Performance Network Considerations

The following table can be used to determine the minimum TCP Receive Window size needed for given (1) downlink speed latency: Winsock – networking API designed to facilitate communication among TCPIP apps and protocol stacks NetBIOS Interface – most windows OS’s use IPC Inter-process Communications to allow for the...

Sample Bluecoat Proxy XML Input file

Select Policy Policy files Copy cpl / xml files to disk Brown to the disk and Open xml Edit the output .xml file Find </vpm-cat> <cr> Copy paste new xml source Save file Open proxy Install new .xml from copied source Open VPM Launch Open Web authentication layer Bypass-auth-dest...

Bluecoat Webfilter Categories

DNS Verification Cheat Sheet

After you have setup your DNS Server, it’s very important to check that the entries which are populated to the Internet are correct. You can use the following checklist using nslookup. Start nslookup for the desired DNS Server nslookup> server 193.247.121.196Default Server: rabbit.akadia.chAddress: 193.247.121.196 Check – Start of Authority...

Bluecoat – High Level Design Questionnaire

By answering the following question, Content will be able to create a high level design If not, need to gather throughput and usage requirements New NAT / VIP? PAC File Changes? Bluecoat Rule updates?

Bluecoat Proxy – Policy Sync example

Sample Visio – Spam – Assassin Distributed Email Content Checker

Spam – Assassin Distributed Email Content Checker.vsd Files is in a bundled .zip file for storage convenience only

Sample Visio – Spam – Assassin Distributed Email Content Checker

Files is in a bundled .zip file for storage convenience only. Spam – Assassin Distributed Email Content Checker.vsd

Sample – Minimum Firewall Standards

Document download Minimum Firewall Standards.doc

Bluecoat – Information Gathering / Preinstall Questionaire

The first thing that needs to be accomplished is to gather all pertinent information regarding the install. Here are some items that need to be looked at: Note: Do not have the site install BCAAA on a server you do not have remote access to unless absolutely necessary. This...