Carlton Brewster, CISSP
Washington, Distrito de Columbia, Estados Unidos
249 seguidores
239 contactos
Acerca de
With over 25 years of experience in Cybersecurity and Software Development, I operate at…
Servicios
Artículos de Carlton
-
Raccoon Credential Stealer Yara Rule
Raccoon Credential Stealer Yara Rule
Recently completed the development of my inaugural YARA rule, focusing on the detection of information and credential…
Contribuciones
-
What challenges should you anticipate during SQL database migration?
SQL database migration can pose several challenges, such as data integrity issues, schema disparities between databases, potential downtime during migration, and ensuring compatibility with applications that rely on the database structure. Thorough planning, testing, and backup strategies are crucial to address these challenges effectively.
-
How do you use git hooks to enforce code quality and security standards?
Git hooks can be used to enforce code quality and security standards by running incremental or pre-commit checks. This could include running linting tools to check for code style consistency, running unit tests or other automated tests (such as selenium tests), or running security analysis tools to check for coding errors and potential vulnerabilities. Additionally, code reviews could be automated using pre-commit or commit-msg hooks. In addition to running automated checks, developers can also be required to sign-off on changes using a pre-commit hook, ensuring all changes are being reviewed and verified before being pushed to production."
-
How do you keep your HTML code maintainable and scalable for mobile web projects?
1. Use meaningful HTML element names that are easily readable and correspond to their content. 2. Separate structure from presentation by using CSS and JavaScript for styling and scripting. 3. Use responsive design practices to ensure that elements display correctly on different devices and screen sizes. 4. Optionally use frameworks like Bootstrap or Foundation to aid in creating more responsive projects. 5. Use media queries to adjust the size, position and display of elements depending on the device. 6. Use progressive enhancement by building for the lowest common denominator first and then adding additional features for more capable devices and browsers. — GPT
Actividad
-
Here is my contribution for the day: ollama run llama3.2 "summarize: `apt changelog firmware-sof-signed `"
Here is my contribution for the day: ollama run llama3.2 "summarize: `apt changelog firmware-sof-signed `"
Compartido por Carlton Brewster, CISSP
-
From Chatbots to Cyberattacks: LLMs Begin Hacking Websites Autonomously
From Chatbots to Cyberattacks: LLMs Begin Hacking Websites Autonomously
Compartido por Carlton Brewster, CISSP
-
I am recruiting PhD students this cycle! If you're interested in: - AI agents and security - both AI agents for cybersecurity and security of AI…
I am recruiting PhD students this cycle! If you're interested in: - AI agents and security - both AI agents for cybersecurity and security of AI…
Recomendado por Carlton Brewster, CISSP
Experiencia
-
Ezri Benami LLC
-
-
-
-
-
-
-
-
Educación
-
American University
-
Actividades y grupos:Philosophy Club President
Focus on being the best computer and software scientist. Used my fascination of automation to grow my knowledge and practice information system and artificial intelligent.
-
Licencias y certificaciones
-
Cybersecurity Operations Fundamentals Specialization
Cisco Learning and Certifications
-
Cybersecurity Operations Fundamentals Specialization
Cisco Learning and Certifications
-
-
Experiencia de voluntariado
-
Volunteer
Feed the Hungry
- 1 año
Lucha contra la pobreza
Helped appreciate my education and opportunities at my door.
Más actividad de Carlton
-
My Resume as a podcast: https://lnkd.in/eNKd_yYN
My Resume as a podcast: https://lnkd.in/eNKd_yYN
Publicado por Carlton Brewster, CISSP
-
Ep 151: Chris Rock Is there such thing as a black hat incident responder? https://buff.ly/3YuiVWX
Ep 151: Chris Rock Is there such thing as a black hat incident responder? https://buff.ly/3YuiVWX
Recomendado por Carlton Brewster, CISSP
-
🚨 SHARE SOMEONE NEED IT 🚨 🟥🟦🟪 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝟐𝟒𝐱𝟕 1- Cybersecurity for Students https://lnkd.in/g4YmXP9J 2- SOC…
🚨 SHARE SOMEONE NEED IT 🚨 🟥🟦🟪 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝟐𝟒𝐱𝟕 1- Cybersecurity for Students https://lnkd.in/g4YmXP9J 2- SOC…
Recomendado por Carlton Brewster, CISSP
-
Mike Holcomb fits perfectly with what we were able to learn from you.
Mike Holcomb fits perfectly with what we were able to learn from you.
Recomendado por Carlton Brewster, CISSP
-
𝗪𝗵𝗲𝗿𝗲 𝗢𝗦𝗜𝗡𝗧 𝗠𝗲𝗲𝘁𝘀 𝗦𝗜𝗚𝗜𝗡𝗧 – 𝗛𝗲𝗿𝗲'𝘀 𝗵𝗼𝘄 𝘁𝗼 𝗴𝗲𝗼𝗹𝗼𝗰𝗮𝘁𝗲 𝘁𝗵𝗲 𝗽𝗿𝗲𝗰𝗶𝘀𝗲 𝗹𝗼𝗰𝗮𝘁𝗶𝗼𝗻 𝗼𝗳 𝘁𝗵𝗲 𝗣𝗢𝗜…
𝗪𝗵𝗲𝗿𝗲 𝗢𝗦𝗜𝗡𝗧 𝗠𝗲𝗲𝘁𝘀 𝗦𝗜𝗚𝗜𝗡𝗧 – 𝗛𝗲𝗿𝗲'𝘀 𝗵𝗼𝘄 𝘁𝗼 𝗴𝗲𝗼𝗹𝗼𝗰𝗮𝘁𝗲 𝘁𝗵𝗲 𝗽𝗿𝗲𝗰𝗶𝘀𝗲 𝗹𝗼𝗰𝗮𝘁𝗶𝗼𝗻 𝗼𝗳 𝘁𝗵𝗲 𝗣𝗢𝗜…
Recomendado por Carlton Brewster, CISSP
-
SolarLab from HackTheBox has some nice password sprays and ReportLab and OpenFire exploitation. There's a couple unintended paths where I'll show…
SolarLab from HackTheBox has some nice password sprays and ReportLab and OpenFire exploitation. There's a couple unintended paths where I'll show…
Recomendado por Carlton Brewster, CISSP
Perfiles similares
Ver más publicaciones
-
APCO International
[New Webinar] Reclassification Update: OMB Requests Input for SOC Revision. 7/17 at 2 pm ET. Today OMB announced the beginning of a multi-year process to revise the Standard Occupational Classification. Through this process, OMB will consider whether to change the classification of public safety telecommunicators from the administrative/clerical category to the category for Protective Service Occupations. Join us on July 17 for a webinar to explain APCO’s strategy for providing input to OMB, how this effort relates to the 9-1-1 SAVES Act and what you can do to help ensure that OMB finally corrects this outdated classification. https://lnkd.in/ekhmW5am
-
Indian Cyber Security Solutions (GreenFellow IT Security Solutions Pvt Ltd)
Master SOC Interview Skills with Role-Playing! 🚀 Want to excel in your SOC Analyst interviews? Learn how to effectively practice incident response and threat hunting through role-playing exercises. Our comprehensive guide, "SOC Interview Role-Playing: Practicing Incident Response and Threat Hunting," provides step-by-step insights to help you stand out. Visit our website : https://lnkd.in/dAhSFBTq Share this valuable resource with your network and let’s elevate our cybersecurity skills together. We’d love to hear your thoughts and experiences—drop a comment below! #CyberSecurity #SOCAnalyst #IncidentResponse #ThreatHunting #CareerGrowth #IndianCyberSecuritySolutions #InterviewPreparation
2 comentarios -
NopalCyber
If you haven't downloaded our ebook, "Offense + Defense = Complete Cybersecurity," get your complimentary copy here. You'll learn what's missing from your current cybersecurity strategy, and how any security team can fill the gaps fast. What's next for your cybersecurity? Our ebook has the answer. https://hubs.ly/Q02QfM9n0 #cybersecurity #ebook #offensivesecurity
-
HiveForce Labs
A Critical GeoTools RCE Flaw exploited in geoserver attacks allows attackers to execute arbitrary code via improperly validated XPath expressions, risking severe security impacts on thousands of applications. CISA is urging immediate patching due to active exploitation. Attack and patch details here: https://lnkd.in/ekysa5Tj
-
Loginsoft
#DOYOUKNOWCVE CISA added CVE-2024-29824 to the Known Exploited Vulnerabilities (KEV) catalog! CVE-2024-29824: Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability. It allows attackers to manipulate database queries, potentially leading to unauthorized access or data modification. Stay vigilant and Patch immediately! Learn more from the LOVI platform: https://lnkd.in/dShfN_D6 #CVE #CISA #Ivanti #SQLInjection #Activelyexploited #POC #LOVI
-
SkyTerra Technologies, LLC
📣 CMMC Program Final Rule Published 📣 The final program rule for the Cybersecurity Maturity Model Certification (CMMC) Program was published in the Federal Register recently. The key takeaways include: -There are 110 identifiable and applicable security requirements specified in the new NIST SP 800-171. -Firms in the DoD supply chain are now required to provide adequate security on all contractor information systems. For example, defense contractors must confirm that any Cloud Service Providers (CSPs) used by the contractor to handle CUI meet Federal Risk and Authorization Management Program (FedRAMP) Moderate Baseline or the equivalent requirements. It also requires defense contractors to flow down all the requirements to their subcontractors who process, store, or transmit CUI. -NIST SP 800-171 has 3 levels of certification. Level 1, which is self-certified. Level 2 now has 2 separate classifications for certification including a self-certification option and a C3PAO option. For you Star Wars buffs, that is not a typo. It stands for CMMC 3rd Party Assessment Organizations. These are similar to ISO or SOC2 compliance audit agencies. The final level, Level 3 will require DoD certification. -Understanding your contractual requirements based on your defense partnership will mandate the level of certification required, and your obligations to the security, management and accountability your organization will require. Full Ruling here: https://hubs.ly/Q02Wk45N0 With risks and requirements changing quickly, it's hard to know how to ensure your compliance. SkyTerra is here to help, book a meeting with our team to learn if these new rules affect your compliance: https://hubs.ly/Q02Wk2qj0
-
The Cyber Security Hub™
Curious about OSCP+ and recertification? Join OffSec on November 13 at 12:00 pm ET for an interactive webinar with OffSec's Paul Griffin and Packetlabs' Denis Kucinic as they discuss: ✅ Why OSCP+ matters ✅ How it can help your career ✅ What hiring managers look for in certifications 📅 Save your spot here ->> https://lnkd.in/eSsVwqTe
4 comentarios -
NICE
📣 Four Items Open For Public Comment 1. Work Roles > Digital Evidence Analysis > Insider Threat Analysis > Operational Technology (OT) Cybersecurity Engineering (Comments on the Work Roles are due by November 14, 2024) 2. Competency Area > Cyber Resiliency (Comments on the Competency Area are due by November 14, 2024) Learn more: https://lnkd.in/emyxC4jR #Cybersecurity #CybersecurityEducation #CybersecurityWorkforce #CybersecurityTraining #WorkRole #CybersecurityWorkRoles
1 comentario -
vulns.space
🚨 SECURITY ALERT: CVE-2024-9061 🚨 📝 CVE DETAILS: - 🆔 Vulnerability: CVE-2024-9061 - 📅 Publication Date: 2024-10-16 08:15:07 UTC - 🛡️ MITRE Tactics and Techniques: Tactics: - Tactic Name: Access Control: Limit system access to authorized users processes or devices. MITRE ATTCK ID: TA0004 - Tactic Name: Software and Data Integrity: Verify and maintain the integrity of software and data. MITRE ATTCK ID: TA0006 - Tactic Name: Security Assessment: Perform security assessments to identify vulnerabilities and weaknesses. MITRE ATTCK ID: TA0009 Techniques: - Technique Name: User Account Control: Configure operating systems and applications to enforce strong user account control policies. MITRE ATTCK ID: T1052 - Technique Name: Least Privilege: Adhere to the principle of least privilege granting users and processes only the necessary permissions to perform their tasks. MITRE ATTCK ID: T1057 - Technique Name: Input Validation: Implement input validation mechanisms to sanitize and validate user input preventing the execution of malicious code or commands. MITRE ATTCK ID: T1098 - Technique Name: Software Bill of Materials: Maintain a comprehensive inventory of software components and dependencies to facilitate vulnerability management and patching. MITRE ATTCK ID: T1580 - Technique Name: Vulnerability Scanning: Regularly scan systems and applications for known vulnerabilities using automated tools. MITRE ATTCK ID: T1590 - Technique Name: Security Testing: Conduct regular security testing including penetration testing and code reviews to identify and remediate vulnerabilities. MITRE ATTCK ID: T1601 - 🌐 References: https://lnkd.in/e8JqPnGH https://lnkd.in/ectxQE6i #CVE #CyberSecurity #InfoSec #Vulnerability #TechNews #AI #Automation
-
ThreatNG Security
Cybersecurity is a constant battle. Learn how to proactively defend your organization against evolving threats using the MITRE ATT&CK framework. This presentation will discuss how ThreatNG aligns with MITRE ATT&CK to help you strengthen your defenses and mitigate risk. Discover how to: - Gain visibility into your external attack surface 🔍 - Identify and address vulnerabilities before they're exploited 🔒 - Detect and respond to threats at every stage of the attack lifecycle 🚨 - Safeguard your critical assets and sensitive data 💼 Want to learn more? Visit the following page to download our free mapping document: https://lnkd.in/ebxGC9PK #ASM #AttackSurface #AttackSurfaceManagement #Cybersecurity #CybersecurityAwareness #DigitalRiskProtection #DRP #EASM #ExposureManagement #ExternalAttackSurfaceManagement #CTEM #ExternalAttackSurface #Security #Securityawareness #SecurityRatings #TPRM #VulnerabilityAssessment #MITREATTCK #ThreatIntelligence #CyberDefense #DataProtection #RiskManagement #CyberResilience #VulnerabilityManagement #CloudSecurity #Privacy
-
vulns.space
🚨 SECURITY ALERT: CVE-2024-44208 🚨 📝 CVE DETAILS: - 🆔 Vulnerability: CVE-2024-44208 - 📅 Publication Date: 2024-10-28 21:15:06 UTC - 🛡️ MITRE Tactics and Techniques: Tactics: - Tactic Name: Active Directory Access Control. Brief description of the tactic: Restricting access to Active Directory objects. MITRE ATTCK ID: TA0003 - Tactic Name: Privilege Escalation. Brief description of the tactic: Gaining higher-level permissions. MITRE ATTCK ID: TA0004 - Tactic Name: Defense Evasion. Brief description of the tactic: Techniques for evading security tools and processes. MITRE ATTCK ID: TA0005 - Tactic Name: Execution. Brief description of the tactic: Running malicious code. MITRE ATTCK ID: TA0002 - Tactic Name: Initial Access. Brief description of the tactic: Gaining initial foothold in a system or network. MITRE ATTCK ID: TA0001 - Tactic Name: Data Recovery. Brief description of the tactic: Restoring data from backups or other sources. MITRE ATTCK ID: TA0010 Techniques: - Technique Name: Exploitation for Privilege Escalation. Brief description of the technique: Exploiting vulnerabilities to gain higher privileges. MITRE ATTCK ID: T1068 - Technique Name: External Remote Services. Brief description of the technique: Leveraging external remote services for access. MITRE ATTCK ID: T1133 - Technique Name: Valid Accounts. Brief description of the technique: Using valid accounts for access. MITRE ATTCK ID: T1078 - Technique Name: Multi-Factor Authentication Interception. Brief description of the technique: Intercepting MFA tokens or requests. MITRE ATTCK ID: T1566 - Technique Name: Network Intrusion Prevention. Brief description of the technique: Detecting and blocking malicious network activity. MITRE ATTCK ID: T0615 - Technique Name: Security Information and Event Management. Brief description of the technique: Collecting analyzing and correlating security logs. MITRE ATTCK ID: T0603 - Technique Name: Endpoint Detection and Response. Brief description of the technique: Monitoring endpoint activity and detecting malicious behavior. MITRE ATTCK ID: T0622 - Technique Name: Patch Management. Brief description of the technique: Applying patches to remediate vulnerabilities. MITRE ATTCK ID: T0610 - Technique Name: Data Backup. Brief description of the technique: Creating backups of data to enable recovery. MITRE ATTCK ID: T0625 - Technique Name: Sandbox. Brief description of the technique: Isolating code execution to prevent harm. MITRE ATTCK ID: T0617 - 🌐 References: https://lnkd.in/g2KjzaGe #CVE #CyberSecurity #InfoSec #Vulnerability #TechNews #AI #Automation
-
Indian Cyber Security Solutions (GreenFellow IT Security Solutions Pvt Ltd)
Master the Incident Response Process as a SOC Analyst! Want to excel in incident response and protect your organization from cyber threats? Check out our comprehensive guide on "Incident Response Process: A SOC Analyst's Guide." This step-by-step document is perfect for technical students and professionals looking to advance their skills in cybersecurity. Visit our website : https://lnkd.in/eFVaVDHW Share this valuable resource with your network and let’s help each other grow in our cybersecurity expertise. We’d love to hear your thoughts and experiences—drop a comment below! #CyberSecurity #SOCAnalyst #IncidentResponse #CareerGrowth #IndianCyberSecuritySolutions #ProfessionalDevelopment
3 comentarios -
Query
😖 SOC Analyst #1: Tell me again, why don’t we store all of the observability and network logging data in the data lake? 😇 SOC Analyst #2: Well, that would be a lot of data to keep indefinitely! 🤦 SOC Analyst #1: Uh, yeah, duh. The IT Ops team has it though, it’s inside of Amazon OpenSearch Service. 😨 SOC Analyst #2: Don’t you need to know Lucene to get at the data? 🤓 SOC Analyst #3: Actually, I am pretty sure it is a domain specific language… 😆 SOC Manager: You’re both right, it can use either, or a graphical interface. 😠 SOC Analyst #1: Okay, that’s well and good, but we got off the SIEM and moved to the data lake and I feel we’re still missing stuff. I thought cheap storage was the reason to get off of the old SIEM?! 🤓 SOC Manager: Well, those things tend to equal out, we also have to be careful with our compute charges. 🤑 SOC Analyst #3: They always get you! 😮💨 SOC Analyst #1: Alright, fine, I’m here to do SecOps not to do FinOps…even if IT does give us access, I don’t miss having to search across a bunch of different indices and learn another query language. Ain’t no one got time for that! Any chance https://query.ai can help us dodge that bullet again? 😤 SOC Analyst #2: Hold on. [TYPES FURIOUSLY] Yes! They are working on an Amazon OpenSearch Service integration right now! No Lucene, no DSL, no one-index-at-a-time – just like they do it for our lake and our other tools! 😀 SOC Manager: Yes…says they will handle all of the query translation, and normalize the data in OCSF like everything else, so we can reuse a lot of our playbooks and automation content. 😍 SOC Analyst #1: LFG! I love OpenSearch Service and Query together. Nothing is beyond our reach! 😎 SOC Analyst #2: Based. Read more: https://hubs.ly/Q02Z3msP0 #opensearch #opensearchservice #loganalytics #elk #siem #federatedsearch #observability #aws
3 comentarios -
vulns.space
🚨 SECURITY ALERT: CVE-2024-48963 - Snyk CLI 🚨 📝 CVE DETAILS: - 🆔 Vulnerability: CVE-2024-48963 - 📅 Publication Date: 2024-10-23 19:15:19 UTC - 🛡️ MITRE Tactics and Techniques: Tactics: - Tactic Name: Access Control. Brief description of the tactic: Limit access to assets. MITRE ATTCK ID: TA0012 - Tactic Name: Data Loss Prevention. Brief description of the tactic: Prevent exfiltration of sensitive data. MITRE ATTCK ID: TA0020 - Tactic Name: Privilege Management. Brief description of the tactic: Restrict user privileges. MITRE ATTCK ID: TA0014 - Tactic Name: Recovery. Brief description of the tactic: Restore affected systems. MITRE ATTCK ID: TA0010 - Tactic Name: Threat Intelligence. Brief description of the tactic: Gather information about threats. MITRE ATTCK ID: TA0043 - Tactic Name: Vulnerability Management. Brief description of the tactic: Identify and mitigate vulnerabilities. MITRE ATTCK ID: TA0013 Techniques: - Technique Name: Data Loss Prevention. Brief description of the technique: Inspect outgoing data for sensitive information. MITRE ATTCK ID: T1020 - Technique Name: Encryption. Brief description of the technique: Protect data at rest and in transit. MITRE ATTCK ID: T1022 - Technique Name: Exploit Protection. Brief description of the technique: Mitigate vulnerabilities by preventing exploitation. MITRE ATTCK ID: T1050 - Technique Name: Firewall. Brief description of the technique: Control network traffic. MITRE ATTCK ID: T1038 - Technique Name: Intrusion Prevention System. Brief description of the technique: Detect and block malicious network activity. MITRE ATTCK ID: T1031 - Technique Name: Multifactor Authentication. Brief description of the technique: Require multiple factors for authentication. MITRE ATTCK ID: T1098 - Technique Name: Patch Management. Brief description of the technique: Apply patches to remediate vulnerabilities. MITRE ATTCK ID: T1015 - Technique Name: Sandbox. Brief description of the technique: Execute suspicious files in an isolated environment. MITRE ATTCK ID: T1035 - Technique Name: Security Information and Event Management SIEM. Brief description of the technique: Collect and analyze security logs. MITRE ATTCK ID: T0847 - Technique Name: Software Configuration. Brief description of the technique: Securely configure software. MITRE ATTCK ID: T1049 - Technique Name: User Account Control. Brief description of the technique: Limit user privileges. MITRE ATTCK ID: T1058 - Technique Name: Virtual Private Network. Brief description of the technique: Create a secure connection over a public network. MITRE ATTCK ID: T1036 - 🌐 References: https://lnkd.in/dJEx-u4r #CVE #CyberSecurity #InfoSec #Vulnerability #TechNews #AI #Automation #SnykCLI
-
Query
🙄 SOC Analyst 1: Dude. I hate how fast we close acquisitions these days. 🤨 SOC Analyst 2: Why? What seems to be the problem? 😤 SOC Analyst 1: Well, the last three companies we bought all had Carbon Black Cloud Enterprise EDR. So, when I get these CISA alerts about indicators, I have to check three separate platforms in three different organizations for the indicators. 😎 SOC Analyst 2: Not anymore! I fixed that. 🧐 SOC Analyst 1: Oh, did we merge them all into one platform? 🧠 SOC Analyst 2: LOL…no. Query released an integration for Carbon Black, so now one Query search will cover all three platforms, plus all the other integrations we have set up — Splunk, CrowdStrike, etc. 🤯 SOC Analyst 1: YES! That is going to really reduce the time it takes me to search across all the platforms, AND we didn’t have to move all of this data into our SIEM to do it — we could leave it where it is! Wow, think of what I can do with all of this free time! 🤓 SOC Manager: Did someone say they had free time? —-------------------------------- Read more: https://hubs.li/Q02Ct4P80 #carbonblack #edr #federatedsearch
