Tools

Digital Evidence Collection

It’s almost Friday and I still haven’t come up with a winner for my weekly Dan’s New Leaf post.  So I’m going to cheat again.  It’s easy for me to write about services that I think are going to really do well with our clients.   (Especially when...

Social Media: Business Benefits and Security, Governance and Assurance Perspectives

ISACA has published a white paper covering the impacts of social media; what is considered “social media”; risks, security, and privacy concerns; and other various issues concerning the business use of social media. Initiated as a consumer-oriented technology, so...

Social Media Tools

The following tools are very helpful in trying to build a social media presence. First, a tool suggested to my by my friend, client, and associate Marwan Hanania. It’s an on-line application called twollow. Twollow finds tweets with key words you choose. You then us...

Infotex Webinar – Data Flow Diagramming

If you’ve performed your Cybersecurity Assessment you’re probably wondering, “what is this data flow diagramming thing, why have my auditors never asked me for it, and how do I do one for my bank?” Join us as we run down the answers to those three imp...

Internet Tools

DNSTools Simple site for forward and reverse DNS queries including ARIN IP lookups and basic connectivity tests. http://dnstools.com/ MXToolbox Lots of online tools for testing SMTP and DNS servers to make sure the are configured and functioning properly. http://mxtoolbox.co...

Content Management

In fact, we are using these applications for our portal and marketing site: WordPress The most common of all blogging software, WordPress scales from simplicity for novice users to dense with community driven plugins for more advanced users.  It is also open-source which mak...

Cracker Software

The following are cracker applications that we use in our testing: L0phtCrack This is a commercial tool that provides dictionary, brute force, and hybrid attacks against both Windows and Unix password hash files.  It also has the ability to capture the Windows password hash ...

Network Scanning Tools

There are a lot of open source and propriety network scanning tools available. This is a list of what we believe to be the best.  Of course, making that declaration is in itself a frightening proposition.   Who is the “we” that believes them to be the best.  Wha...

Awareness Tools

Of course, if you’ve been to our workshops or otherwise have access to our policy set, you already are armed with a multitude of tools to help educate, motivate, and activate awareness in your organization. Please comment this blog post to give us your feedback (commen...

Windows File System Auditing

Dumpsec is a free software tool to help audit windows file systems to determine user and group permissions on a given folder tree. It can also audit permissions for printers and shares as well as provide other report formatted information on applied group policies and user ...