Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Vulnhub machines walkthrough series - Vulnix

Today we'll be continuing with our series on Vulnhub virtual machine exercises. In this article, we will see a walkthrough of an interesting Vulnhub machine
Read More
Article

InfoSec Institute Launches Security Awareness Practitioner Certification

Boot camp certifies professionals with knowledge and skills to develop and sustain successful security awareness training programs InfoSec Institute, the le
Read More
Article

Blockchain Vulnerabilities: Imperfections of the Perfect System

The whole cryptocurrency and blockchain craze has attracted both fans and critics of the new tech, but the flip side is that it has lured cybercrooks, too. A
Read More
Article

PowerShell for Pentesters Part 3: Functions and Scripting with PowerShell

Introduction The more we advance in our articles, the more we notice the power of PowerShell, and that impression will only increase as we move forward.[pk
Read More
Article

Virtual Machine Introspection in Malware Analysis – LibVMI

In the last article in this series, we have seen what Virtual Machine Introspection is and how it works in general. Now, in this article, we'll see how we ca
Read More
Article

Toppo: 1 capture-the-flag walkthrough

In this article, we will learn to solve the "Toppo: 1" Capture-the-Flag (CTF) challenge which was posted on VulnHub by Hadi Mene. According to the informatio
Read More
Article

Technical Skills vs. Soft Skills: Which Are More Important as an InfoSec Professional?

"People, Not Technology, Are Key Elements of Cybersecurity," write Ivo Ivanovs and Sintija Deruma in an ISACA Journal issue. In fact, finding candidates with
Read More
Article

The Main Concerns with Biometric Authentication

Part of my job is to coordinate technical specifications for mobile app development projects with the customers. In the process, I often hear the same questi
Read More
Article

How to Comply with HIPAA Regulations – 10 Steps

There is a tremendous amount of data in the world of healthcare. That data includes personal healthcare information (PHI), which is regulated by the Health I
Read More
Article

How to comply with FCRA — 6 steps

The Fair Credit Reporting Act, or FCRA, is a piece of legislation passed by Congress in 1970 to promote fairness, accuracy and privacy for information that c
Read More
Article

How to comply with the GLBA Act — 10 Steps

The Gramm-Leach-Bliley Act is a U.S. federal law created to control how financial institutions deal with a consumer's non-public personal information (NPI).
Read More
Article

How to comply with the Red Flags Rule

The Red Flags Rule, or RFR, is one of the identity protection rules found in the Federal Credit Reporting Act (FCRA). More specifically, RFR deals with prote
Read More
Article

How to comply with COPPA — 7 steps

Protecting children online should be of paramount importance to all, especially in today's world. In response to this pressing issue, in 1998 Congress enacte
Read More
Article

QA, Certification, & Accreditation in Computer Forensics

Introduction The purpose of digital forensics is to answer one or more investigative or legal questions, with the purpose of using the evidence to disprove o
Read More
Article

What is the Difference Between Penetration Testing and Vulnerability Assessment?

There is a substantial amount of confusion in the IT industry with regard to the difference between Penetration Testing and Vulnerability Assessment, as the
Read More
Article

Penetration Testing for a Company Vs. Being Freelance

Introduction The Cybersecurity job market has become a hot field, seeking new, highly qualified candidates. It is a diverse field with various job types, but
Read More
Article

How to implement a data privacy strategy - 10 steps

Ensuring data privacy is one of the biggest challenges organizations face. A quick look at the statistics related to personal data leaks in 2017 is more than
Read More
Article

Security+: Technologies And Tools - DLP [DECOMMISSIONED ARTICLE]

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

Security+: Technologies And Tools - Firewall [DECOMMISSIONED ARTICLE]

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

Security+: Technologies and tools - VPN concentrators [DECOMMISSIONED ARTICLE]

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

Security+: Technologies and Tools - Switches and Routers [DECOMMISSIONED ARTICLE]

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

Threat Hunting for File Hashes as an IOC

Threat Hunting is "the process of proactively and iteratively searching through networks to detect and isolate advanced threats that evade existing security
Read More
Article

Threat Hunting for File Names as an IoC

Introduction Just like any good treasure hunt, you need a map or clues to be successful. Threat hunting is no different – Indicators of Compromise (IoC) can
Read More
Article

Threat Hunting for URLs as an IoC

Introduction Unfortunately, cyber-attacks are just a fact of life in today’s world. Anyone with a laptop or smartphone can quickly write malicious code to vi
Read More