Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Threat Hunting for Domains as an IOC

Introduction When threats are detected on a network, domains can serve as good indicators that the network is compromised. In many cases, this compromise cou
Read More
Article

Threat Hunting and HTML Response Size

Introduction Imagine that you are sitting at your workstation at work and you notice that your environment is experiencing a higher than usual HTML response
Read More
Article

Threat Hunting for Unusual Logon Activity

What is one of the first things that you think of when thinking of potential threat activity on your network? Most would probably say that there has been som
Read More
Article

Threat Hunting for Swells in Database Read Volume

Introduction When attackers have breached your network, one of the most common things they will be doing is looking into your systems that have sensitive dat
Read More
Article

Threat Hunting for Unusual DNS Requests

Searching for Unusual DNS Requests is a standard method for threat hunting. The presence of Unusual DNS Requests can often tip off Information Security profe
Read More
Article

Threat Hunting for Anomalies in Privileged Account Activity

Introduction A tell-tale sign of your network being hacked is that a privileged account, such as a system administrator account, has been compromised. Attack
Read More
Article

Leaders’ Meetings: A Privileged Target for Hackers

Leaders' meetings are privileged targets for nation-state attackers that launch massive offensives to gather intelligence from the ongoing events. Let's anal
Read More
Article

JIS-CTF: VulnUpload Walkthrough

In this article, we will solve another Capture the Flag (CTF) challenge. This time, we'll be using an exercise which was posted on the VulnHub website by Moh
Read More
Article

How to Advance In Your Career as a Penetration Tester

Penetration testing is essential for maintaining security in modern enterprises, with some organizations hiring staff specifically for this purpose as part o
Read More
Article

What Is It Like to Be a Penetration Tester for an In-House Team?

Being a penetration tester is an exciting and lucrative career, but is it the right one for you? You may be reading this article because you: Are interested
Read More
Article

How to get started as a mobile penetration tester

If you’re reading this, you’re probably interested in learning how to get started with penetration-testing mobile devices but aren’t sure how to start. In th
Read More
Article

How to make your own penetration testing lab

If you want to go into penetration testing, a home lab is a must. In this article, we’ll discuss why a home lab can be useful, the pros and cons of virtualiz
Read More
Article

When is Wireless Penetration Testing Appropriate?

Introduction Wireless communications are an invisible, ubiquitous service that allows data to flow in and out of businesses and homes via mobile devices and
Read More
Article

How to Comply with GDPR Privacy Regulation in 6 Steps

Introduction In recent years, data breaches involving personally-identifiable information (PII) scaled to unprecedented numbers. The Equifax case alone affec
Read More
Article

What Employers Need to Know About Workplace Monitoring and Employee Privacy

Introduction Businesses are heavily reliant on technology to complete their day-to-day operations, and employees need to use computers, laptops, tablets and
Read More
Article

How to Protect User Data with the Privacy by Design Framework

The Privacy by Design framework (PbD) was first introduced by Dr Ann Cavoukian, Information and Privacy Commissioner of Ontario, in the 1990s. PbD “… advance
Read More
Article

8 Data Protection Tips for Handling Personal Information

Introduction The digitization of everything that is personal is truly a phenomenon. Our digital footprints cover the Internet like a trail of breadcrumbs and
Read More
Article

DESlock+ Encryption

Many laws and regulations require that to operate in compliance with federal and state standards, organizations have to encrypt computers that house sensitiv
Read More
Article

Top 5 Technologies for Mitigating Insider Threats

Introduction The insider threat has been considered one of the most formidable threats within organizations in the recent years. Rogue and disgruntled emplo
Read More
Article

The Top 20 Penetration Testing Tools, Part 2

Introduction In this article, we continue with the theme of examining the top 20 penetration testing tools that are available today. In our last installment,
Read More
Article

Application of Open Source Scripting Tools for Automated Field Device Configuration

  Automated Configuration Managers have been some of the most popular automation tools of late. They automate the configuration and updating of netwo
Read More
Article

An Introduction to the Xposed Framework for Android Penetration Testing

Introduction When it comes to the Pen Testing of Android-based applications, the main focus and attention of the Pen Tester is to live in the mindset of the
Read More
Article

5 Methods for Data Privacy Enhancement

Introduction If orange is the new black, then privacy is the new security — or at least security’s indispensable accessory. We can thank the Facebook/Cambrid
Read More
Article

3 Reasons the Smart City Needs Data Privacy

Introduction By 2050, it’s expected that 66% of the world’s population will live in urban areas. By 2030, there will be 43 “mega-cities” with populations of
Read More