OPTIV/SOURCE ZERO

This post identifies systemic endpoint detection and response issues and examines how attackers can bypass any EDR product.

Toolsets have evolved for high-fidelity forensics and investigations – here we map them to the MITRE ATT&CK framework for Enterprise Cloud.

Our team describes how single-factor authentication attack surfaces can be exposed in the AirWatch MDM suite and what steps to take to mitigate risks.

A security vulnerability has been found in the Black Duck Hub REST API Python project (“blackduck” in the PyPI repository). Read more.

How to copy updated WinAutomation databases for RPA with Azure custom script extensions – part five of a series.

Part four in the series: setting up RPA with WinAutomation.

How to use Power Automate flows and Azure runbooks to tear down Azure resources and reply to emails – Dan Kiraly explains in part 7 of the series.

How to assign a specific public IP address using Azure Automation runbook. Part three in a series.

How to upload WinAutomation screenshots to Azure Container Storage using Invoke-AzVMRunCommand – part six in a series.

How to provision a test environment for robotic process automation with Azure automation runbooks: part two in a series.

Can user workflow verification be tested in an automated fashion using Microsoft Power Automate Flows, UI Flows and Automation Runbooks?

Hackers can use the username structure and deployed technologies in an online document’s metadata to successfully breach the perimeter.