Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Analyzing a simple screen locker

A screen locker is a malware in which the primary purpose is to lock the victim's screen by displaying a fearful message designed to invoke a high level of f
Read More
Article

Security+: Mobile Security Concepts and Technology (SY0-401) [DECOMMISSIONED ARTICLE]

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

5 Ways to Boost Engagement in Your Security Awareness Program

Gamification is everywhere, and with good reason. It’s proven to increase training engagement, something many businesses struggle to capture. A report from G
Read More
Article

Python for Security Professionals – Part 2

Introduction This is the second article on "Python for Security Professionals, " and the first article can be found at /python-security-professionals-part-1/
Read More
Article

Python for security professionals – Part 1

The Python language has many advantages when it comes to scripting. The power of python can be felt when you start working with and try new things with it. I
Read More
Article

Evidence acquisition in mobile forensics

Acquisition Acquisition is the process of cloning or copying digital data evidence from mobile devices. The process of acquiring digital media and obtain
Read More
Article

Depth 1 - CTF Walkthrough

Depth 1 is a relatively new machine that surfaced on VulnHub on October 27th, 2017. It is created by Dan Lawson. It can be downloaded from https://www.vulnhu
Read More
Article

Security+: Basic forensic procedures (SY0-401) [DECOMMISSIONED ARTICLE]

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

Best practices for web browser security

Web browsers are a commonly used software application to access web resources and pages using the Internet. A browser can also be used to access information
Read More
Article

Insider threats within the cloud

Contrary to common perception, time and time again reports show that the most significant security threats to an organization are the so-called Insider Threa
Read More
Article

Top 5 Smartest Malware Programs

1. Introduction The growing threat of malware is one of the biggest Cyber Security threats of today. Malware is a term that encompasses a plethora of covert,
Read More
Article

Exploiting X11 unauthenticated access

In this article, we are going to see how to exploit the x11Server Unauthenticated Access vulnerability which is associated with the CVE-1999-0526. How bad i
Read More
Article

Does Your Company Need DDoS Testing? - Let’s Find Out

DDoS testing: top five questions answered Find answers to the top five questions about DDoS testing to understand its essence, value and collateral legal iss
Read More
Article

Pentester Academy Command Injection ISO: Basilic 1.5.14 exploitation

The Pentester Academy has just recently launched a Command Injection ISO virtual image of Ubuntu. This image has 10 real-world applications which have a vuln
Read More
Article

Security+: Secure network administration principles (SY0-401) [DECOMMISSIONED ARTICLE]

NOTE: This article reflects an older version of the Security+ Exam – please see the current Security+ Certification page for the most up-to-date information.
Read More
Article

Phishing Attacks in the Consulting Industry

Introduction The consulting industry, a network of professionals that work in an advisory capacity for businesses or individuals, is a tempting target for ph
Read More
Article

EnCase Product Suite Overview

Introduction This guide is designed for several audiences. First and foremost, it is designed for anyone seeking the preliminary knowledge of EnCase and guid
Read More
Article

CompTIA Advanced Security Practitioner (CASP) Exam Overview

Introduction Cyberspace and its underlying infrastructure are vulnerable to various risks which stem from both physical and cyber threats. Cyber criminals e
Read More
Article

NDG Pt. 3: The Impact of new data security standards and opt-out model on the IG Toolkit

Previous articles in this series: Pt. 1: Data security standards and opt-out models in health and social care[pkadzone zone="main_top"] Pt. 2: Government Vie
Read More
Article

DEFENDER: WordPress Plugin Evaluation

Introduction In this article, we will look at the DEFENDER WordPress plugin. This plugin is touted to provide layered security for WordPress sites/blogs. Thi
Read More
Article

Cyber Security-as-a-Service: A Solution for Defending Against Network Attacks

As on-line crime continues to surge in 2017, companies are increasing their cyber-security investments to protect their data and assets. In addition to techn
Read More
Article

Is AI really the Future of Cyber Security

As we progressively get more dependent on technological innovation in our daily lives, we open ourselves up to cyber-attacks. Each device that we use today i
Read More
Article

SAP Security for Beginners Part 15 - SAP Code Security

The next topic to deal with after Segregation of Duties is SAP Code Security. It is a relatively new area of SAP Cybersecurity comparing to SoD, for example.
Read More
Article

The future of information security

In this article, we look at the current trends in the field of information security and present speculations as to what the future of the field would be. It
Read More