Skip to main content

Security Automation Is More Than Saving Clicks

· 2 min read

When a security analyst investigates an unknown IP address or domain, one of the first steps is usually to check it against a threat intelligence provider. You can automate that lookup with a button. The analyst clicks it, the IOC is sent to the provider, and the result appears in the interface.

That's useful.

But is it automation?

Edit Helmfiles with Python

· 4 min read

Editing helmfiles with ruamel.yaml in Python

Managing helmfiles in python can be tricky due to the presence of Go templates in them, which are not compatible with the standard YAML parsers. This guide demonstrates how to ignore the curly braces in helmfiles and edit them using the ruamel.yaml python library.

XSS Attacks: Hands-On

· 6 min read

Cross-Site Scripting (XSS) is one of the most prevalent web application vulnerabilities, affecting millions of websites worldwide. It allows attackers to inject malicious scripts into web pages, potentially compromising user data, stealing sensitive information, or redirecting users to phishing websites.

Star Wars through Cyber Kill Chain

· 5 min read

Welcome to Cyer4nt! This is the second post in a series about interview-related questions for Cyber Security Engineers. Today, I'm sharing a fun task I did during an interview with a well-known (and amazing) media organization. The task presents an entertaining approach: analyzing Star Wars: Episode IV A New Hope movie through the lens of the Kill Chain Model. May the Cyber Force be with you!

Sudo explained

· 4 min read

Preface

At some point of my career, I wanted to land a job as a Junior SOC Engineer. To my surprise, I found myself struggling with technical interviews, even when asked relatively straightforward questions.

For instance, one question was, "What is sudo and how does it work?"