Boris Mann’s Post

It's hard to believe that with the 'nmap' command, one can perform a lot of different functionalities for port scanning

xTerminal v1.8.6 is released with improved ls command and new command added for display, set and remove attributes from a folder or file.

Just completed the Port Scan Activity challenge on #LetsDefend. Used Wireshark to identify the IP address that is scanning the environment and what it discovered through the scanning. A good challenge to sharpen my Wireshark skills.

CrowdStrike's flagship Falcon EDR takes really interesting and different approach to detection, the kernel module of the sensor employs an interpreter to parse special files called Channel files, the recent BSOD incident brought attention to channel files (remember C-00000291*.sys ? 😉 ). Here is an image of channel file processing in action - Falcon kernel module has 10k+ functions and it is 4+mb in size

In TCP, flags serve multiple purposes including indicating connection states, providing diagnostic insights for troubleshooting, and controlling specific aspects of a connection. These flags, also known as control bits, each represent a single bit of information. Commonly employed flags include SYN, URG, ACK, PSH, FIN, and RST.

Summary of Day 5 : Today I learn about Network Scanning and Nmap in a more detailed way. I learned about Scans and its response time also anlyze packet using wiresharks. 1.TCP CONNECT SCAN 2.ACK SCAN 3.UDP SCAN 4.SYN SCAN / STEALTH SCAN

Control Pack's agents bypass AV's and EDR's, log keystrokes, take screenshots, download files, and execute other payloads. Learn more: https://lnkd.in/eAZ6itu5

Micro Control Class 1 configurations are simpler than ever, with the new 5032-CFGB16 UDFBs. Enable faster ArmorBlock 5000 I/O 16-point configurable block to Micro800 2080-Lx0E controller connections with the ability to control and monitor the I/O using a single UDFB. Download now. https://lnkd.in/g4qARE4V

Micro Control Class 1 configurations are simpler than ever, with the new 5032-CFGB16 UDFBs. Enable faster ArmorBlock 5000 I/O 16-point configurable block to Micro800 2080-Lx0E controller connections with the ability to control and monitor the I/O using a single UDFB. Download now. https://lnkd.in/gD4qT6-X

Maxxess eFusion and eAXxess 6.0.2 or later | Partitioning 🤝 1️⃣ Operator Partitioning Overview Understand the importance of operator partitioning in access control. See how eFusion and eAXxess 6.0.2 or later enhance your control strategies. 2️⃣ Configure Operator Partitioning Learn step-by-step how to configure operator partitioning. Dive into settings to customize access control based on operational needs. 3️⃣ Sample Scenario Immerse in a real-world scenario, seeing how operator partitioning enhances control and flexibility. Ready to elevate your access control strategy? 👉 https://lnkd.in/gy-nTgZz #AccessControl #OperatorPartitioning #eFusion #eAXxess #TechTraining #ControlStrategies #MaxxessSystems