PC Drama

OSCP - Offensive Security

Certified Professional certification focusing on hands-on penetration testing skills.

https://www.offensive-security.com/pwk-oscp/

Authority: Offensive Security

Reference: -

PTES Technical Guidelines

Penetration Testing Execution Standard defining phases and methodologies.

http://www.pentest-standard.org/

Authority: PTES

Reference: -

OWASP Testing Guide

Comprehensive guide for testing web application security vulnerabilities.

https://owasp.org/www-project-web-security-testing-guide/

Authority: OWASP

Reference: WSTG v4.2

Metasploit Framework

Open-source penetration testing platform for developing and executing exploits.

https://www.metasploit.com/

Authority: Rapid7

Reference: -

Burp Suite

Integrated platform for web application security testing and vulnerability scanning.

https://portswigger.net/burp

Authority: PortSwigger

Reference: -

Microsoft Defender for Endpoint

Enterprise endpoint security platform documentation for threat prevention and detection.

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/

Authority: Microsoft

Reference: -

NIST SP 800-171

Protecting Controlled Unclassified Information in nonfederal systems, including endpoint requirements.

https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final

Authority: NIST

Reference: SP 800-171 Rev. 2

OSSEC

Open-source host-based intrusion detection system for endpoint monitoring and security.

https://www.ossec.net/

Authority: -

Reference: -

AWS Well-Architected Framework

Best practices for building secure, high-performing, resilient cloud infrastructure on AWS.

https://aws.amazon.com/architecture/well-architected/

Authority: AWS

Reference: -

CSA Cloud Controls Matrix

Cybersecurity control framework specifically designed for cloud computing environments.

https://cloudsecurityalliance.org/research/cloud-controls-matrix/

Authority: CSA

Reference: CCM v4

ISO/IEC 27017

Information security controls for cloud services based on ISO/IEC 27002.

https://www.iso.org/standard/43757.html

Authority: ISO

Reference: ISO/IEC 27017:2015

ScoutSuite

Multi-cloud security auditing tool for AWS, Azure, and Google Cloud Platform.

https://github.com/nccgroup/ScoutSuite

Authority: NCC Group

Reference: -

CISA Zero Trust Maturity Model

Model for implementing zero trust principles across enterprise environments.

https://www.cisa.gov/zero-trust-maturity-model

Authority: CISA

Reference: -

NIST SP 800-207

Zero Trust Architecture framework and implementation guidance.

https://csrc.nist.gov/publications/detail/sp/800-207/final

Authority: NIST

Reference: SP 800-207

RFC 4301 - Security Architecture for IP

IP Security (IPsec) architecture providing authentication and encryption for network traffic.

https://datatracker.ietf.org/doc/html/rfc4301

Authority: IETF

Reference: RFC 4301

NIST Cybersecurity Framework

Framework for improving critical infrastructure cybersecurity with focus on network security controls.

https://www.nist.gov/cyberframework

Authority: NIST

Reference: CSF 2.0

CIS Controls

Prioritized set of actions for cyber defense with network security safeguards.

https://www.cisecurity.org/controls

Authority: CIS

Reference: CIS Controls v8

pfSense

Open-source firewall and router software providing comprehensive network security features.

https://www.pfsense.org/

Authority: Netgate

Reference: -

Snort

Open-source intrusion detection and prevention system for real-time network traffic analysis.

https://www.snort.org/

Authority: Cisco

Reference: -

SSID Security - Secure your Wifi

Identify risks Is the WiFi public or private? What is the worst that could happen? Slow speeds due to bandwidth, data leaks. If privacy is not a concern, then how about bandwidth? With great bandwidth comes great responsibility. Setup monitoring to establish a baseline. Measure bandwidth and set a baseline so that you know when abnormal traffic is happening. Abnormal, high error rate, etc.

https://youtu.be/_zCNz319vCg?si=GBBUDzNdYOXlnwQS

Authority: -

Reference: -

RFC 6749 - OAuth 2.0

OAuth 2.0 authorization framework for secure delegated access.

https://datatracker.ietf.org/doc/html/rfc6749

Authority: IETF

Reference: RFC 6749

RFC 7519 - JSON Web Token

Compact, URL-safe means of representing claims for secure information transfer.

https://datatracker.ietf.org/doc/html/rfc7519

Authority: IETF

Reference: RFC 7519

NIST SP 800-63

Digital Identity Guidelines for identity proofing and authentication.

https://pages.nist.gov/800-63-3/

Authority: NIST

Reference: SP 800-63-3

Keycloak

Open-source identity and access management solution with SSO and federation.

https://www.keycloak.org/

Authority: Red Hat

Reference: -

RFC 8446 - TLS 1.3

Transport Layer Security protocol for encrypted communications.

https://datatracker.ietf.org/doc/html/rfc8446

Authority: IETF

Reference: RFC 8446

FIPS 140-3

Security requirements for cryptographic modules used in encryption systems.

https://csrc.nist.gov/publications/detail/fips/140/3/final

Authority: NIST

Reference: FIPS 140-3

OpenSSL

Robust, full-featured toolkit for TLS and SSL protocols and general cryptography.

https://www.openssl.org/

Authority: -

Reference: -

NIST SP 800-92

Guide to Computer Security Log Management for SIEM implementation.

https://csrc.nist.gov/publications/detail/sp/800-92/final

Authority: NIST

Reference: SP 800-92

Elastic Security

Open-source SIEM solution built on Elasticsearch for threat detection and response.

https://www.elastic.co/security

Authority: Elastic

Reference: -

Wazuh

Free, open-source security monitoring platform for threat detection and compliance.

https://wazuh.com/

Authority: -

Reference: -

OWASP Top 10

Standard awareness document for developers and web application security.

https://owasp.org/www-project-top-ten/

Authority: OWASP

Reference: OWASP Top 10 2021

OWASP ASVS

Application Security Verification Standard for testing web application security controls.

https://owasp.org/www-project-application-security-verification-standard/

Authority: OWASP

Reference: ASVS 4.0

ModSecurity

Open-source web application firewall (WAF) engine for protecting against attacks.

https://github.com/SpiderLabs/ModSecurity

Authority: Trustwave SpiderLabs

Reference: -

OWASP ZAP

Free security scanner for finding vulnerabilities in web applications.

https://www.zaproxy.org/

Authority: OWASP

Reference: -

Technical support at Trade Shows

A trade show, convention, or event requires more than a basic rental. At the core of an event, a team of technicians will carry the load. Events require experience, planning, preparation, and support from a skilled team with strategic solutions. When technical issues arise, it's better to troubleshoot equipment during the planning phase. An underprepared business without support could venture into a landslide of technical difficulties during a conference.

https://youtu.be/L5QBVXCOHN8?si=R1Y-1HiKNRgNevhJ

Authority: -

Reference: -

Penetration Testing

Endpoint Security

Cloud Security

Zero Trust

Network Security

Identity & Access Management

Encryption

SIEM

Web Application Security

Upstream Tech Solutions

OSCP - Offensive Security

PTES Technical Guidelines

OWASP Testing Guide

Metasploit Framework

Burp Suite

Microsoft Defender for Endpoint

NIST SP 800-171

OSSEC

AWS Well-Architected Framework

CSA Cloud Controls Matrix

ISO/IEC 27017

ScoutSuite

CISA Zero Trust Maturity Model

NIST SP 800-207

RFC 4301 - Security Architecture for IP

NIST Cybersecurity Framework

CIS Controls

pfSense

Snort

SSID Security - Secure your Wifi

RFC 6749 - OAuth 2.0

RFC 7519 - JSON Web Token

NIST SP 800-63

Keycloak

RFC 8446 - TLS 1.3

FIPS 140-3

OpenSSL

NIST SP 800-92

Elastic Security

Wazuh

OWASP Top 10

OWASP ASVS

ModSecurity

OWASP ZAP

Technical support at Trade Shows