Automating Cybersecurity Metrics: A series of blog posts on cybersecurity metrics and security automation ~~~~~~~~~~~~~~~~~~~~~~~~ by Teri Radichel #cybersecurity #cloudsecurity #metrics #automation medium.com/cloud-security/au…

Chronicling my venture into AI here. 🤖 Sept 25 was key post. Started exploring production ready code. Immediately saw pitfalls. Wrote framework and better context. A month later… accomplished a lot. No time to write. Follow @TeriRadichel for updates. medium.com/cloud-security/ar…

Threat Modeling a Batch Job System - AWS Security Community Day ~~ Slides with friend links ~ see notes slideshare.net/slideshow/thr…

How do you verify the software on the new network appliance you got is running the most up to date, valid software? Supply chain security: Updating and verifying firmware offline ~~ Updating UDM Pro Firmware offline prior to connecting to the Internet medium.com/cloud-security/su…

I’ve been reviewing the SRP spec because I ran across it on a pentest. The specification is very unclear and the implementation from certain vendors does not appear to match. ~~ Secure Remote Password (SRP) ~~ Considering the value and avoiding pitfalls medium.com/cloud-security/se…

Using an AWS Managed Prefix List for IP addresses that change ~~ Change all your rules in one place when your IP address changes medium.com/cloud-security/us…

AWS SSM Session Manager — is it really “more secure”? ~~ Let’s evaluate the attack surface compared to an SSH connection medium.com/cloud-security/ss…

AWS GuardDuty Adds New Suspicious Shell Creation and Privilege Escalation Findings ~~ New finding types targeted at top security threats on AWS medium.com/cloud-security/aw…

What Would Have Helped Prevent the Delta Debacle: Building and testing scalable systems that withstand an outage medium.com/cloud-security/wh…

Penetration Test Proposal ~~ What to expect from a penetration test or security assessment proposal from 2nd Sight Lab ~~ #pentest #security #cybersecurity medium.com/cloud-security/pe…

Subnets And Routes For a Public NAT ACM.471 Setting up proper routing to leverage a NAT to reach the Internet on AWS; Avoid traffic dropped due to transitive routing medium.com/cloud-security/su…

Sending Traffic From pfSense to a Site to Site VPN to a VGW to a NAT in AWS ACM.470 Another thing Q told me I could do but not allowed medium.com/cloud-security/se…

Test Sending Traffic From a Load Balancer To A NAT Gateway ACM.469 Spoiler Alert: Q told me I could do this but I can’t :( but this might help someone trying to set up a network load balancer medium.com/cloud-security/te…

Creating an AWS Site to Site VPN for pfSense with a Virtual Private Gateway ACM.468 Configuring specific encryption options to prevent downgrade attacks #cybersecurity #aws #pfsense medium.com/cloud-security/cr…

Creating an AWS Site to Site VPN for pfSense with a Virtual Private Gateway ACM.468 Configuring specific encryption options to prevent downgrade attacks medium.com/cloud-security/cr…

Calculating the Cost of An AWS Architecture plus a Region Security Warning ACM.467 Looking at the cost of an AWS private network that sends data from a Site to Site VPN to a Transit Gateway to a NAT medium.com/cloud-security/ca…

AWS Credentials and Roles for the pfSense VPN Wizard ACM.466 Also, why I’m not going to use this wizard medium.com/cloud-security/aw…

Configuring the VPC and VPC Flow Logs for an AWS Site to Site pfSense VPN ACM.465 Creating a VPC to connect our pfSense to via a VPN and configuring logging to inspect the related network traffic medium.com/cloud-security/co…