2nd Sight Lab @2ndSightLab

Cloud Security #training | Cloud #pentesting #assessments #audits | #Cloud #Security Blog | CEO @teriradichel #cloudsecurity #cybersecurity 2ndSightLab.com Seattle, WA Joined December 2017

Tweets

366
Followers

386
Following

1
Likes

22

2nd Sight Lab @2ndSightLab

5 months ago

Threat Modeling a Batch Job System - AWS Security Community Day ~~ Slides with friend links ~ see notes slideshare.net/slideshow/thre…

0 0 1 64 1

Download Image

How do you verify the software on the new network appliance you got is running the most up to date, valid software? Supply chain security: Updating and verifying firmware offline ~~ Updating UDM Pro Firmware offline prior to connecting to the Internet medium.com/cloud-security…

0 0 0 65 0

2nd Sight Lab @2ndSightLab

11 months ago

I’ve been reviewing the SRP spec because I ran across it on a pentest. The specification is very unclear and the implementation from certain vendors does not appear to match. ~~ Secure Remote Password (SRP) ~~ Considering the value and avoiding pitfalls medium.com/cloud-security…

0 0 0 58 0

2nd Sight Lab @2ndSightLab

11 months ago

Using an AWS Managed Prefix List for IP addresses that change ~~ Change all your rules in one place when your IP address changes medium.com/cloud-security…

0 0 0 40 0

2nd Sight Lab @2ndSightLab

11 months ago

AWS SSM Session Manager — is it really “more secure”? ~~ Let’s evaluate the attack surface compared to an SSH connection medium.com/cloud-security…

0 0 0 34 0

2nd Sight Lab @2ndSightLab

11 months ago

AWS GuardDuty Adds New Suspicious Shell Creation and Privilege Escalation Findings ~~ New finding types targeted at top security threats on AWS medium.com/cloud-security…

0 0 0 16 0

2nd Sight Lab @2ndSightLab

a year ago

What Would Have Helped Prevent the Delta Debacle: Building and testing scalable systems that withstand an outage medium.com/cloud-security…

0 0 0 40 0

Teri Radichel #cybersecurity #pentesting @TeriRadichel

a year ago

Create pfSense Aliases To Block API Calls And Data Leaks to Unwanted AWS Regions ~~ What are all those STS calls to Australia, Europe, Asia, and South Africa? ~~ You can do similar with any other cloud provider. #cybersecurity #network #security #aws medium.com/cloud-security…

0 1 1 881 1

Teri Radichel #cybersecurity #pentesting @TeriRadichel

a year ago

Restoring a pfSense from Netgate After a Factory Reset ~~ Also added Interface Groups and Rules to simplify management ~~ Summarizes a lot of the other posts in one place with limited screenshots. Will test more with UDM Pro in upcoming posts. medium.com/cloud-security…

0 1 1 815 2

2nd Sight Lab @2ndSightLab

a year ago

Penetration Test Proposal ~~ What to expect from a penetration test or security assessment proposal from 2nd Sight Lab ~~ #pentest #security #cybersecurity medium.com/cloud-security…

0 0 0 46 0

Teri Radichel #cybersecurity #pentesting @TeriRadichel

2 years ago

Why CISOs Need Indemnification ~~ What is it and why it matters in light of new SEC rules ~~ I talked to a lawyer who formerly worked for the SEC medium.com/cloud-security…

0 2 4 629 2

2nd Sight Lab @2ndSightLab

2 years ago

Subnets And Routes For a Public NAT ACM.471 Setting up proper routing to leverage a NAT to reach the Internet on AWS; Avoid traffic dropped due to transitive routing medium.com/cloud-security…

0 0 0 51 0

2nd Sight Lab @2ndSightLab

2 years ago

Sending Traffic From pfSense to a Site to Site VPN to a VGW to a NAT in AWS ACM.470 Another thing Q told me I could do but not allowed medium.com/cloud-security…

0 0 0 55 0

2nd Sight Lab @2ndSightLab

2 years ago

Test Sending Traffic From a Load Balancer To A NAT Gateway ACM.469 Spoiler Alert: Q told me I could do this but I can’t :( but this might help someone trying to set up a network load balancer medium.com/cloud-security…

0 0 0 28 0

2nd Sight Lab @2ndSightLab

2 years ago

Creating an AWS Site to Site VPN for pfSense with a Virtual Private Gateway ACM.468 Configuring specific encryption options to prevent downgrade attacks #cybersecurity #aws #pfsense medium.com/cloud-security…

0 0 0 91 0

2nd Sight Lab @2ndSightLab

2 years ago

Creating an AWS Site to Site VPN for pfSense with a Virtual Private Gateway ACM.468 Configuring specific encryption options to prevent downgrade attacks medium.com/cloud-security…

0 0 0 66 0

2nd Sight Lab @2ndSightLab

2 years ago

Calculating the Cost of An AWS Architecture plus a Region Security Warning ACM.467 Looking at the cost of an AWS private network that sends data from a Site to Site VPN to a Transit Gateway to a NAT medium.com/cloud-security…

0 0 0 34 0

2nd Sight Lab @2ndSightLab

2 years ago

AWS Credentials and Roles for the pfSense VPN Wizard ACM.466 Also, why I’m not going to use this wizard medium.com/cloud-security…

0 0 0 37 0

2nd Sight Lab @2ndSightLab

2 years ago

Configuring the VPC and VPC Flow Logs for an AWS Site to Site pfSense VPN ACM.465 Creating a VPC to connect our pfSense to via a VPN and configuring logging to inspect the related network traffic medium.com/cloud-security…

0 0 0 45 0

2nd Sight Lab @2ndSightLab

2 years ago

If you have ever been baffled by VPNs, routing, NATs, Internet Gateways, Virtual Private Gateways, Transit Gateways or ASNs or associated cost, this series should help. I’m sure I spent more time and money writing it that will ever get off Medium. Enjoy! medium.com/cloud-security…