Network Defense, Part 4: Cloud Security
This section built on my AWS Cloud Practitioner notes, but looked at the cloud purely from the security side: what can go wrong, who is responsible for what, and how to protect data and application...
Hafiz's Security Journal
Network Defense, Part 3: Firewalls and Zone-Based Policy Firewalls
Firewalls came up in Endpoint Security, so the first part of this section was a quick refresher. The new part was the zone-based policy firewall (ZPF): how it works and how to actually configure on...
Network Defense, Part 2: Access Control, AAA and ACLs
The second half of today was about access control: deciding who can get into what, keeping a record of what they did, and then enforcing it on the network with access control lists (ACLs). I touche...
Network Defense, Part 1: Assets, Defense in Depth, Hardening and Resilience
Today I started Cisco’s Network Defense course, the next one in the Junior Cybersecurity Analyst path. Endpoint Security was mostly about attacks. This course is about the defender’s side: knowing ...
Endpoint Security, Part 12: Cybersecurity Principles, Practices and Processes
The last section of the Endpoint Security course went back to the basics: the principles behind everything I’ve studied so far. I saw the McCumber Cube in Introduction to Cybersecurity, but this ti...
Endpoint Security, Part 11: Defending Systems and Devices
After Windows and Linux, the course moved on to actually protecting them. This section pulled together a lot of things I’ve seen in earlier posts (antivirus, firewalls, IPS) but this time from the ...
Endpoint Security, Part 10: Linux for the SOC
The second section today was Linux. I use Linux in my home lab and for some automation work, but mostly for running things, not for thinking about how to protect them. This section filled in a lot ...
Endpoint Security, Part 9: The Windows Operating System
Today is the last day of the Endpoint Security course, and there’s a lot left, so I’m writing four shorter posts instead of two long ones. This first one is about Windows. I’ve used Windows my who...
Endpoint Security, Part 8: Defending the Network
After a week of learning how attacks work, the second half of today was finally about defense. This is the post I’ll come back to most, because these tools (firewalls, IDS/IPS, ACLs, syslog, NetFlo...
Endpoint Security, Part 7: Attacks on ARP, DNS, DHCP, Web and Email
Today I studied attacks on the services every network depends on. Some work quietly behind the scenes (ARP, DNS, DHCP) and some are what users touch directly (web, email and databases). I wrote abo...