Security Awareness & Training Resource Center

Boost the effectiveness of your security awareness program or earn your next certification with free tools from our resource center. Check back frequently — new resources are added every week!

Featured content

Download — HRM (Forrester) Ebook, guide & report

Deconstructing Human-Element Breaches | Infosec HRM

Human risk management isn’t just rebranded SA&T — it’s a profound change of mindset, strategy, process and technology that approaches human-related breaches in a new way. 

Read More about Download — HRM (Forrester)

Our resources

Article

Mobile forensics: Investigation process model

From the newly-published Mastering Mobile Forensics by Soufiane Tahiri.  Smartphone forensic is relatively new and quickly emerging field of interest with
Read More
Article

Brexit's Effects on Cyber Security

What is the Brexit? The term is short for "British exit" and refers to the exit from the EU of the UK Government following the referendum result of June 23,
Read More
Article

Exploiting format strings: Getting the shell

In this article, we will have a look at how to exploit format String vulnerabilities to get a shell.   In this article, we will briefly have a l
Read More
Article

Process Hallowing

In this article, we will learn what process hallowing is, how is it done, and how we can detect it while performing memory analysis. Process Hallowing It is
Read More
Article

Pen Testing and Hacking Conferences – A Front Line Experience

Penetration testers, often referred to as ethical hackers, are tasked to find and fix the vulnerabilities in networks, systems, and web-based applications. T
Read More
Article

Lab: identifying the use of covert channels

Lab # - Identifying the use of Covert Channels Most networks use network access control permissions to permit / deny the traffic. Tunneling is used to byp
Read More
Article

Assessing the Vulnerability of the UK to a Cyber-attack: A Multidisciplinary Analysis of Cyber Security.

This paper will demonstrate the vulnerabilities which are present in cyberspace and the vast number of threats to the United Kingdom from both a theoretical
Read More
Article

Evolution in the world of cyber crime

It is not surprising to consider the fact that whenever a person holds some valuable information, there are always some criminals looking to steal that infor
Read More
Article

Lab: GPG

In this lab, we will get an introduction to the GnuPG, the GNU Privacy Guard, an open source implementation of PGP. One problem with public key encryption is
Read More
Article

App Transport Security

One of the most common misconfiguration issues that I find during testing iOS apps is the bypass of the App Transport Security feature introduced by Apple in
Read More
Article

The Threatening Evolution of Exploit Kits

Exploit Kits, even more sophisticated and profitable Exploit kits are rapidly evolving, threat actors improve them on a daily basis by adding the code for th
Read More
Article

Ransomware and Its Impact On Small Businesses

Ransomware is a kind of malware that limits or totally prevents users from gaining access to their computer system either by locking some files or the comput
Read More
Article

BYOD Security Training for Physicians: The Whys, Whats, Hows and Whens

Introduction Despite concerns over the use of personal devices in the healthcare industry, “bring your own device” (BYOD) is becoming “business as usual.” Nu
Read More
Article

Understanding Critical Windows Artifacts and Their Relevance During An Investigation: Artifacts

We discussed NTFS timestamps in Part 1 of this series. In this article, we will look at some of the artifacts which can point out  a program execution on a W
Read More
Article

The 5 Most Visible Cyber Attacks on Hospitals

Security concerns are growing exponentially in healthcare, as hospitals become the most financially lucrative targets for cyber-attackers. In 2015, one in th
Read More
Article

How to Educate Healthcare Employees to Stop Ransomware

Ransomware, the holding hostage of computers or data in exchange for money, is dramatically on the rise all across the world. Any business in any industry is
Read More
Article

Metasploit Certification Study Plan

The ever changing recruitment process of the organizations always challenges candidates; recognized education is not enough in this competitive market, the r
Read More
Article

Understanding Critical Windows Artifacts and Their Relevance During Investigation: NTFS Timestamps

In this article, we will learn about critical Windows artifacts, what they mean, where they are located in the system, what can be inferred from them and how
Read More
Article

Is Penetration Testing a Degree?

Penetration testing has become a mandatory aspect of keeping IT systems secure around the world today. With hacking now an ever-present threat to the securit
Read More
Article

Ransomware Case Studies: Hollywood Presbyterian & The Ottawa Hospital

Ransomware, the holding hostage of computers or data in exchange for money, continues to be a major threat to hospitals and other medical facilities. In orde
Read More
Article

Penetration Testing: Intelligence Gathering

Introduction: Intelligence Gathering & Its Relationship to the Penetration Testing Process Penetration testing simulates real cyber-attacks, either direc
Read More
Article

How to Ensure HIPAA HITECH Compliance

By now, most people have at least some passing familiarity with HIPAA – the federal rules and regulations that apply to the security and handling of personal
Read More
Article

Penetration Testing - Jobs, Certifications, Tools, and More

As technologies have increasingly advanced over the past few years, more complex cyber attacks have also emerged. Thus, data security has become the need of
Read More
Article

On the Road to Pen Testing - Why Infosec Training and Certification?

Are you already a penetration tester or preparing to become one? If so, then you might already know how important it is to acquire the right certification fo
Read More