Network Traffic

Data Supply Chain

User Management

  • Cyber Threat Landscape: Understand the current cybersecurity threat landscape, including emerging threats and trends. Stay informed about the latest cyber attacks and vulnerabilities.
  • Risk Assessment: Conduct a comprehensive risk assessment to identify and prioritize potential cybersecurity risks. Analyze the potential impact of these risks on your organization.
  • Security Policies and Procedures: Develop and document cybersecurity policies and procedures tailored to your organization's needs. Ensure these policies cover areas such as access control, data handling, and incident response.
  • Endpoint Security: Secure all endpoints, including computers, mobile devices, and IoT devices. Use antivirus software and endpoint detection and response solutions.
  • Security Awareness and Training: Educate employees about cybersecurity best practices. Train them to recognize phishing attempts and social engineering attacks.
Image Description

Phishing Simulator

User Managemnent

Cloud Apps

Cloud Security Posture

Regulatory Compliance

Execution: file_download

EDR

Execution: file_download

After downloading and saving the installation script, follow the steps below with respect to the OS.

  1. Linux:

    Open terminal, go to the directory where the script is downloaded and run:

                                            

    sudo bash ./<_dowloaded_script_name>.sh

      
  2. MacOS:

    Open terminal, go to the directory where the script is downloaded and run:

                                            

    sudo bash ./<_dowloaded_script_name>.sh

      
  3. Windows:

    Open PowerShell with administrative rights, go to the directory where the script is downloaded and run:

                                            

    .\<_dowloaded_script_name>.ps1

      

    Steps:

    To unblock a PS1 file in PowerShell, you can use the following command:

    1. Unblock-File -Path "C:\Path\To\Script.ps1".
    2. Replace "C:\Path\To\Script.ps1". with the actual path to the PS1 file you want to unblock.

    Alternatively, you can also unblock a file through the file properties in Windows Explorer:

    1. Right-click on the PS1 file and select Properties.
    2. In the Properties window, click on the General tab.
    3. Click on the Unblock button next to Security.
    4. Click OK to save the changes.
                                                

    Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope CurrentUse

      

Haystack

Execution: file_download

After downloading and saving the installation script, follow the steps below with respect to the OS.

  1. Linux:

    Open terminal, go to the directory where the script is downloaded and run:

                                        

    sudo bash ./<_dowloaded_script_name>.sh

      
  2. MacOS:

    Open terminal, go to the directory where the script is downloaded and run:

                                        

    sudo bash ./<_dowloaded_script_name>.sh

      
  3. Windows:

    Open PowerShell with administrative rights, go to the directory where the script is downloaded and run:

                                        

    .\<_dowloaded_script_name>.ps1

      

    Steps:

    To unblock a PS1 file in PowerShell, you can use the following command:

    1. Unblock-File -Path "C:\Path\To\Script.ps1".
    2. Replace "C:\Path\To\Script.ps1". with the actual path to the PS1 file you want to unblock.

    Alternatively, you can also unblock a file through the file properties in Windows Explorer:

    1. Right-click on the PS1 file and select Properties.
    2. In the Properties window, click on the General tab.
    3. Click on the Unblock button next to Security.
    4. Click OK to save the changes.
                                            

    Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope CurrentUse

      

Amazon S3

  1. Log into AWS Console as an admin.
  2. Navigate to the IAM console.
  3. From the side menu click on Policies.
  4. Click on Create Policy.
  5. Select Json and paste the following policy object into the policy editor and click Next:

                                                                                        
                                                                                            {
                                                                                                "Version": "2012-10-17",
                                                                                                "Statement": [
                                                                                                    {
                                                                                                        "Sid": "VisualEditor0",
                                                                                                        "Effect": "Allow",
                                                                                                        "Action": [
                                                                                                            "sns:DeleteTopic",
                                                                                                            "sns:CreateTopic",
                                                                                                            "sns:ListTopics",
                                                                                                            "sns:Unsubscribe",
                                                                                                            "sns:SetTopicAttributes",
                                                                                                            "s3:GetBucketNotification",
                                                                                                            "s3:PutBucketNotification",
                                                                                                            "sns:Publish",
                                                                                                            "s3:ListAllMyBuckets",
                                                                                                            "s3:GetObject",
                                                                                                            "s3:GetAccessGrantsInstanceForPrefix",
                                                                                                            "sns:Subscribe",
                                                                                                            "sns:ConfirmSubscription",
                                                                                                            "sts:GetCallerIdentity"
                                                                                                        ],
                                                                                                        "Resource": "*"
                                                                                                    }
                                                                                                ]
                                                                                            }
                                                                                              
  6. Name the policy and click on Create policy.
  7. From the side menu click on Users.
  8. Click on Create user.
  9. Set the username and click Next.
  10. Select Attach policies directly.
  11. Change Filter to AWS Managed - job functions and select ReadOnlyAccess.
  12. Change Filter to Customer Managed and select the policy name created in step 6.
  13. Click on Next and then Create user.
  14. Click on User and from the Summary card click on Create Access key.
  15. Click Command line interface (CLI) from the use cases and after confirmation click Next.
  16. Enter the Description tag value into the input field and click on Create Access key.
  17. Copy and make sure you safely store the Access key ID and Secret access key and click Done.