Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

What types of attack scenarios can you simulate in a cyber range?

Introduction Just as in any other endeavor, practice makes perfect, and the same goes for preparing for cyberattacks. For organizations looking to take t
Read More
Article

Network Forensics Tools

Various tools are available for Network forensics to investigate network attacks. In this article, we will discuss tools that are available for free. First,
Read More
Article

The need for Network Forensics

Most medium to large sized organizations use some sort of security monitoring in their enterprise environments. Security monitoring includes several componen
Read More
Article

Network Forensics Concepts

This article outlines various Network Forensics Concepts that can come handy for beginners. We will begin by understanding what various network security thre
Read More
Article

Fake online shopping websites: 6 ways to identify a fraudulent shopping website

Once upon a time, the only way to get your shopping done was at a brick-and-mortar store. In terms of crime, shoppers may have been worried about muggers and
Read More
Article

Networking Fundamentals for Forensic Analysts

The need for understanding Networking  To be able to successfully conduct a network attack investigation, it is important to have the knowledge of networkin
Read More
Article

All about carding (for noobs only) [updated 2021]

Disclaimer The Article writer's intent is to spread awareness about the carding. The writer is not responsible if any damage occurs. This is for education
Read More
Article

PCAP analysis basics with Wireshark [updated 2021]

Wireshark is a very useful tool for information security professionals and is thought of by many as the de facto standard in network packet and protocol anal
Read More
Article

The top 5 pentesting tools you will ever need [updated 2021]

A penetration test or “pentest” is a human-driven assessment of an organization’s security. One or more pentesters will be engaged by an organization to iden
Read More
Article

What is a firewall: An overview

A typical corporate network makes use of a number of networking devices for preventing various attacks and maintaining the security of their network. The fir
Read More
Article

Rivest Cipher 4 (RC4)

RC4 stands for Rivest Cipher 4. RC4 is a stream cipher and was invented by Ron Rivest in 1987. Since RC4 is a stream cipher, it encrypts the stream of data b
Read More
Article

Understanding stream ciphers in cryptography

Stream ciphers fall under the symmetric encryption category. Thus, using stream ciphers the sender and the recipient of the data use the same key to encrypt
Read More
Article

CA Installation and Use in Windows 10

Certificates issued by a Certificate Authority (CA) have a wealth of uses in Windows 10, but in order to make use of those benefits, we need to first get the
Read More
Article

Security awareness behavior & culture: Ask us anything

During the Infosec Inspire Cyber Skills Summit, we sat down for an open mic Q&A conversation with leading security awareness and culture experts Jinan Bu
Read More
Article

Hack the Box (HTB) machines walkthrough series — Fuse

Today, we will be continuing with our exploration of Hack the Box (HTB) machines, as seen in previous articles. This walkthrough is of an HTB machine named F
Read More
Article

Threat modeling: Technical walkthrough and tutorial

Threat modeling tutorial: What to know before you begin Threat modeling is an exercise designed to help an organization identify potential threats and cyber
Read More
Article

Certificates overview and use in Windows 10

The CIA Triad is one of the core tenets of Information Security, consisting of the ideals of Confidentiality, Integrity and Availability. Certificates are on
Read More
Article

Top 50 information security interview questions [updated for 2021]

Want to ace your next job interview? Here are 50 cybersecurity questions you may get across five categories. Can you answer them all?
Read More
Article

Best free and open source SQL injection tools [updated 2021]

SQL injection is one of the most common attacks against web applications. This is used against websites which use SQL to query data from the database server.
Read More
Article

Hacking communities in the deep web [updated 2021]

The role of hackers has changed over the years, in the past these professionals were viewed as dangerous criminals that needed to be kept at arm's length; me
Read More
Article

Password security: Complexity vs. length [updated 2021]

When it comes to user authentication, the password is, and has been, the most used mechanism; passwords are used to access computers, mobile devices, network
Read More
Article

How to hack Android devices using the StageFright vulnerability [updated 2021]

Learn how Android devices could be exploited through a core component named "StageFright," a native media playback library that records, processes and plays multimedia files
Read More
Article

Top 8 reverse engineering tools for cyber security professionals [updated 2021]

Whether it is rebuilding a car engine or diagramming a sentence, people can learn about many things simply by taking them apart and putting them back togethe
Read More
Article

Popular computer forensics top 19 tools [updated 2021]

Computers are a vital source of forensic evidence for a growing number of crimes. While cybercrime has been growing steadily in recent years, even traditiona
Read More