Image Up-to-date information and research on red and blue team security capabilities, objective tools analysis, new research and step-by-step solutions. The Source Zero platform is a community of Optiv’s skilled individuals doing research and sharing their expertise. The Source Zero Tools are resources that provide actionable support and demonstrations around research initiatives. Search Terms Type - Any -BlogToolVideo Team - Any -RedBluePurple/No Team Sort By LatestOldest Apply Filters Clear Filters Image Aligning Defender ATP Alerts to MITRE ATT&CK - Video Demonstration June 30, 2020 How to prioritize efforts based on alert information from Microsoft Defender ATP, Logic Apps, and Log Analytics. See Details Blog Image Brute Force Account Testing Using Burp Intruder June 19, 2020 Burp Suite’s Intruder tool can be used to automate testing for weak/default passwords. See Details Blog Image Digging Your Talons In – New Take On Password Guessing June 19, 2020 Talon automates a password guessing technique targeting Kerberos and LDAP within the Windows Active Directory environment. See Details Blog Image Infrastructure as Code: Terraform, AWS EKS, Gitlab & Prisma Cloud June 11, 2020 A how to guide using Gitlab, Hashicorp Terraform Cloud, AWS EKS and Palo Alto Networks Prisma Cloud to build and secure a Kubernetes cluster. See Details Blog Image Visual Lock Picking Workstation June 11, 2020 The Visual Lock Picking Workstation displays the inner workings of a lock while teaching lock picking. See Details Blog Image Azure API Management Tracing Helper June 11, 2020 This paper explores the Burp Suite extension for Azure API Management to automatically identify gateway misconfigurations and to display the tracing.... See Details Blog Image Microsoft Defender ATP Telemetry: Workbook Visualizations (Part 3) June 11, 2020 Part 3 of series: Prioritizing Microsoft Defender ATP endpoint alert telemetry with MITRE ATT&CK. See Details Blog Image Microsoft Defender ATP Telemetry: Azure Log Analytics Workspace (Part 2) June 11, 2020 This post demonstrates how to pull DATP data into Azure Log Analytics workspaces using a Logic App. See Details Blog Image Microsoft Defender ATP Telemetry: Viewing MITRE ATT&CK Context (Part 1) June 11, 2020 This post helps prioritize efforts based on alert information you're already receiving from Microsoft #Defender #ATP. See Details Blog Pagination First page « First Previous page ‹ Previous Page 1 Page 2 Page 3 Current page 4 Introducing Source Zero Our new technical cybersecurity thought leadership resource, Source Zero, focuses on red and blue team security capabilities, objective tools analysis, and more.