wehost podcast

Understand how an antivirus worksHow long can you waitWho is your TargetWhat Kind of Capabilities do they haveBased on File signaturesBased on PatternsBased on DLL usedBased on DLL installedBased onIPHostnameBased on file typesNew Attack Vector of using WSL for conducting attacks

Insane = (insider threat * same threat)^you not having any knowledge of what is happeningSteps of attackInitial AccessExecutionPersistencePrivilege escalationClean upWhat could the insider do (Possible Risk of Happening)Attempt to Disable or modify cloud firewallsManipulate cloud workloadsDeploy assets in unused cloud regionManipulate cloud accounts or authentication types.Accessing cloud accounts without authorisationDiscovering creds in fileAbusing cloud metadata API for Privilege escalationData Collection Insider will collect sensitive data and assets this mostly focuses on Cloud storage, secrets and API keysExfiltration of data: Threat actors look to exfiltrate data from the environment which may involve encryption of data, setting up another network that may not be monitored/loggedImpact: The end goal of the attack may vary but may always include either of the 2getting critical dataAccess to unauthorized or even authorized assets that may be used to cause damage to the organization

Common Types of Insider Threats

Well-intentioned usersDisgruntled usersUnnoticed usersTypes of Insider Threats can be broken down into 4 CategoriesRoles and PrivilegesHere is an examplesolutionWhat do you need to logAPI request made to the cloudRequest made through the browserTrack assets metrics and use behavioural analytic on logsCorrelate data of accounts based on its useRecent Incident

what do the top 1% do in cybersecurity? Are you doing it? This podcast/video is mainly not focused on security Contradictory to what would is normally supposed to be a space on security this is the complete opposite.

Side Note

The security events that can be stopped by humans is not 10% but around 5%.

Hey guys, so this is. It's been a while since I've done a podcast, and I currently have exams going on. I'm working on a system right now, which hides data within an image or not exactly within the image, the image is the data

I'm working with something called steganography it's hiding data. That's really what it is. So, what I, what currently exists, is where you can, you can hide data within an image but for a person who can, who is smart, and who knows how data is hidden within an image within a PDF and all he can figure it out. So, how that works is when a file is made, there's a file header and there's something called the end of the file.

Okay, now this normally works in Linux. In Windows, it doesn't work that well. But I'll tell you what I did also. So, anything between the starting of the file and ending with a file you can put, okay. You put that particular file will be that it will be identified by that file so supposing, there's a PDF. Okay now you're starting with your PDF and you're ending on the PDF anything between these two things is your PDF content. Now, anything you put below that or above that should theoretically, not being understood like it should not be able to identify the object or whatever it is, or whatever the file is of you can put the image you can put text below the PDF and it will still identify it as a PDF. Now, I did, an episode a few months or a few in last year, wherein a file could be a PDF it could be an image and it could be a Word document as well. So the point is you hide data between it. Now coming to what I tried to do so. My plan was, how do I make a product/code / whatever like a piece of code or piece of software where you can hide data within an image. Yet, the data is not an image. So, basically what I'm doing is I'm taking the data of the image so an image at the end is all hex values. Okay, hex values, so it's four bytes. So, what I'll do is, in that image, theoretically, okay, everything on match, all the possible codes in offer hex value could be in that image now if so what I do is say suppose in the start of a file is Hello.

in the text hello we take 'H' which has a hex value of "A" (in theory for understanding purpose)

and the same value "A" is also there somewhere in the image

I map the value "A" from the image to that of the text file

So, theoretically, that means I can take any text file, or I can take any image file and convert it to anything I want. Yet, there will be nothing in the image file by itself, so even if I give it to any guy you know any person who knows steganography, he won't be able to understand, like, what is hidden there because there is nothing hidden under there it is pure we're only seeing the data and mapping it out. Now, this is an internal project I'm just trying out I do not know whether you know get through more work but worst case scenario launch of the new best-case scenario I made a new software. So, this is something I'm trying out. I'll put it on GitHub, as soon as it's ready or. Let's see. But yeah.

OSI MODEL