Cyber Security

Firewall Tools:

• Palo Alto Networks NGFW

• Fortinet FortiGate

• Cisco ASA/Firepower

IPS Tools: Intrusion prevention system

• Palo Alto Networks Threat Prevention

• Cisco Firepower IPS

• Check Point IPS

IDS Tools: Intrusion detection system

• Snort

• Suricata

• Trend Micro IDS

SAST Tools:

• SonarQube

• Fortify Static Code Analyzer (by OpenText)

• GitHub Advanced Security (CodeQL): 

• Reshift: Focus on JavaScript & TypeScript, CI-first SAST for modern web apps

DAST Tools:

• Burp Suite Pro: Most used, strong for manual + semi-auto DAST, ⭐ 1–3

• Acunetix: Highly automated, user-friendly, fast scanning, good for devs, ⭐ 1–3

• Netsparker (by Invicti): Same vendor as Acunetix, better for enterprise use

• OWASP ZAP: Open-source, strong community, good for small teams, Top 5

• AppScan (HCL): Strong in regulated sectors, enterprise-level, Top 5

• Qualys WAS: Scales well, part of Qualys suite

Simulation Sites:

• TryHackMe

• HackTheBox

• OverTheWrite

EDR:

What is EDR?

EDR stands for endpoint detection and response, tools that manage enterprise assets, detect every abnormal behavior, and can enforce actions and policies to have a secure environment, so it's not only about anti-virus, it's fully managed services for the environment.

Key Benefits:

1. Endpoints data collection

2. Data analysis

3. Automated response

4. Threat investigation

5. Integration with security infrastructure

EDR governance rules:

In order to have successful and smooth implementation of the EDR platform, you need to establish the following practices to mitigate risks and eliminate management overheads:

1. Install the agent on all machines before delivery to employees

2. Enable Tamper protection: Prevent setting modification

3. Restrict local admin

4. Define risk-based policies

5. Monitor powershell activities

6. Monitor Registry modifications

7. Control USB usage

8. Integrate with SEIM

9. Auto-agent update

10. Auto-Anti virus update

11. Auto-OS Update

12. Reports review

13. Define KPIs

14. Conduct Monthly EDR health and coverage

EDR Tools:

• Sophose Intercept X

• Microsoft Defender

• CrowdStrike Falcon Pro/Enterprise