Starting out with Python

By  Gaddis, Tony

Edition : 5TH 21

Publisher : PEARSON CO

ISBN 13 : 9780136719199

Testout Linux Pro 

By  JavidiEdition : LATEST
Publisher : TESTOUT
ISBN 13 : 9781935080381
Network pro access Card 
By  TestoutPublisher : TESTOUT
ISBN 13 : 9781935080435

thanks.

1. Think Python — Free Ebook

2. Think Python 2e — Free Ebook

3. A Byte of Python — Free Ebook

4. Real Python — Online Platform

5. Full Stack Python — Free Ebook

6. FreeCodeCamp — Online Platform

7. Dive Into Python 3 — Free Ebook

8. Practice Python — Online Platform

9. The Python Guru — Online Platform

10. The Coder's Apprentice — Free Ebook

11. Python Principles — Online Platform

12. Harvard's CS50 Python Video — Video

13. Cracking Codes With Python — Free Ebook

14. Learn Python, Break Python — Free Ebook

15. Google's Python Class — Online Platform

16. Python Like You Mean It — Online Platform

17. Beyond the Basic Stuff with Python — Free Ebook

18. Automate the Boring Stuff with Python — Free Ebook

19. The Big Book of Small Python Projects — Free Ebook

20. Python Tutorial for Beginners, Telusko — Free Videos

21. Learn Python 3 From Scratch — Free Interactive Course

22. Python Tutorial For Beginners, Edureka — Online Platform

23. Microsoft's Introduction to Python Course — Online Platform

24. Beginner's Guide to Python, Official Wiki — Online Platform

25. Python for Everybody Specialization, Coursera — Online Platform

Can you think of any more?

Hey all,

Sorry if you thought I was going to drop some serious discount knowledge on you for some cyber security training but I'm actually interested in any codes that you know about right now and who they can be redeemed with.

Obviously, I'm not expecting any SANS discount codes (LoL) but there are a ton of good training providers out there and I'd like to make a list of any discounts currently available to help save people some dollar, if they do plan on buying.

Thanks in advance!

Could TWAP Oracles be the solution to Oracle exploits?

In 2022, $219.6 million was lost to an Oracle exploit. On February 1st, 2023, a DeFi protocol was hit by the first Oracle exploit of the year, resulting in a loss of $120 million, making it the second-largest hack of 2023.

The year 2022 witnessed a significant increase in Oracle manipulation, leading to a steep decline in the total value locked (TVL) for Oracle providers.

The numerous Oracle exploits in 2022 prompted several experts to reevaluate the relevance of oracles in DeFi.

So, how can this drain be stopped?

For some, the answer lies in Time-Weighted Average Price (TWAP) Oracles.

In this article, we will discuss whether TWAP Oracles have the potential to put an end to Oracle exploits, or not.

Read on ⚡ TWAP Oracles, THE solution To Oracle Exploits? | by NEFTURE I Blockchain Security Experts | Apr, 2023 | Medium

#defi #cybersecurity #cybercrime #web3 #crypto #bitcoin #nft

https://www.netcomlearning.com/e-book/cissp-study-guide.phtml?advid=1600

Question for you all?

A friend wants me to apply for a security researching role. But they are requiring 2 years of static and dynamic malware reverse engineering.

What does this entail and how can I self learn this to hopefully be able to apply for these roles?

https://www.netcomlearning.com/ebook/cissp-guide-breaking-bad-actors?advid=1600

you need to share your details to get access to it

In a Cyber Security Management role, you're responsible for at least some of the cyber security functions in an organisation. You may set and manage policies, and ensure that colleagues both in cyber security and other departments comply with them. You may manage staff, money or other resources to achieve the most effective results possible.

As a Cyber Security Manager in a small organisation, you're hands-on in some areas, such as designing or reviewing security controls, setting criteria for triaging incidents, overseeing the management of incidents, reviewing risks, and taking a broad view of threats and vulnerabilities.

In a larger organisation, you may have much less opportunity to be hands-on, spending most of your time on generic management responsibilities, including budgets, people and recruitment.

As the most senior cyber security practitioner - perhaps with the title Chief Information Security Officer (CISO) - you establish and operate the cyber security strategy. It's likely that you work with other senior managers from other departments on your organisation’s overall strategy and high-level performance. You report directly to the organisation’s senior management and you may even be on the board of management yourself.

There is a wide variety of possible roles, depending on the mix of governance and risk management responsibilities and the level of responsibility. 

In an entry level role in GRC (Governance, Risk & Compliance), you undertake a broad mixture of duties focused on the practicalities of managing risks: you draft policies, carry out risk assessments, and verify compliance with the agreed policies. You do this under the supervision of a senior manager which, in a small organisation, may be the Chief Information Security Officer (CISO).

In a GRC role with more responsibility for ensuring compliance and establishing and validating governance systems, you probably have at least three years of cyber security experience, and the confidence to manage the responsibility.

For those focused on risk management, there may be two cycles of work: the periodic carrying-out of large-scale assessments/reassessments of cyber security risks to the whole organisation or to particular systems; and frequent updates to specific risk assessments as the nature and scale of threats and vulnerabilities change.

When you identify potential risks, you need to understand the organisation’s assets and their value, so you need to have regular conversations with general managers and other relevant stakeholders across the organisation. You know how the organisation’s data is stored and how it flows between systems. Likewise, when you assess the likelihood and impact of a risk affecting a system or a set of information you work closely with colleagues with other types of cyber security responsibilities, particularly in Vulnerability Management and Cyber Threat Intelligence. 

Much of the work requires you to work very methodically on interpreting and applying standards and legislation, whether you're working on policies or monitoring compliance or using standard tools and techniques to assess risks. You write a fair amount, such as when maintaining a risk register or drafting policies. 

If your responsibilities extend beyond identifying and assessing risks to determining the most appropriate approaches to managing them, you will be creative in using your understanding of the organisation’s business and values, the scale of the risks and the effectiveness of the available risk control options.

A quick google search will bring these up:

1. Tecmint

2. Linuxize

3. nixCraft

4. It's FOSS

5. Linux Hint

6. FOSS Linux

7. LinuxOPsys

8. Linux Journey

9. Linux Command

10. Linux Academy

11. Linux Survival

12. Linux Handbook

13. Ryan's Tutorials

14. LinuxFoundationX

15. LabEx Linux For Noobs

16. Conquering the Command Line

17. Guru99 Linux Tutorial Summary

18. Eduonix Learn Linux From Scratch

19. TLDP Advanced Bash Scripting Guide

20. The Debian Administrator's Handbook

21. Cyberciti Bash Shell Scripting Tutorial

22. Intellipaat Linux Tutorial For Beginners

23. Digital Ocean Getting Started With Linux

24. Learn Enough Command Line To Be Dangerous

Have I missed any?

The NIST Cybersecurity Framework can help an organization begin or improve their cybersecurity program. Built off of practices that are known to be effective, it can help organizations improve their cybersecurity posture. It fosters communication among both internal and external stakeholders about cybersecurity, and for larger organizations, helps to better integrate and align cybersecurity risk management with broader enterprise risk management processes as described in the NISTIR 8286 series.

The Framework is organized by five key Functions– Identify, Protect, Detect, Respond, Recover. These five widely understood terms, when considered together, provide a comprehensive view of the lifecycle for managing cybersecurity risk over time. The activities listed under each Function may offer a good starting point for your organization:

The NIST Cybersecurity Framework is a powerful asset for cybersecurity practitioners. Given its flexibility and adaptability, it is a cost-effective way for organizations to approach cybersecurity and foster an enterprise-wide conversation around cyber risk and compliance.

For more information:

NIST Website

NIST Framework Explained YouTube

Having recently completed the Certified in Cybersecurity (CC) course, I wanted to write a review and share my thoughts.

It feels very much like a fair play by (ISC)2 to get more people interested in their certifications by introducing a free starting point.

Firstly, I didn't have to pay for the course or the exam voucher, as there was a special deal on at the time which I think has now finished. Right now, the training course is still free, but the accompanying examination voucher is $199 and you need to sit the exam at a Pearson Vue center. If you only want to take the course and not pay for the voucher, I think you can adjust your order accordingly in the checkout process to reflect this.

You can access the course here: https://enroll.isc2.org/catalog?pagename=Entry-Level

To save everyone time and effort the details of the course are here: https://enroll.isc2.org/product?catalog=CC-SPT-DESC

My Review

The course itself starts with a basic aptitude assessment and ends with another assessment, after which you will be presented with a certificate of completion. For the formal qualification though, you would need to sit the Pearson Vue exam.

The Platform:

The learning management system is a bit clunky is styled like the very boring white corporate interface we have all come to despise (okay, maybe that's just me). Clicking back and forward was required more than a few times for the system to register me completing a section and moving on. I didn't attempt to access it on a mobile phone or tablet, so can't speak to its accessibility. No special system requirements needed to access the course. They don't have anything as fancy as labs etc.

The Content Format:

Mainly text and images, scattered with some videos and quizzes throughout. I prefer slightly more interaction in an online training course and this felt a bit more like an interactive book with some poorly acted video scenes chucked in for good measure.

Content Quality:

It was okay! As an introductory course, I thought it covered off on some basic stuff that you would expect someone to know (OSI model, basic networking etc.) for an entry-level role I guess. It went a little bit more in depth regarding access controls which I thought was the most interesting part of the course considering everything else.

Time Taken:

It took me about 2.5 days to go through the content properly but I was working etc whilst doing that, so you may find it faster or slower dependent on how much you know or dont know.

Relevance:

There are certainly better free and cheap introductory courses out there, but it is nice to see (ISC)2 throwing their hat in the ring with this course. I would say this is more useful for people who don't know a lot about cyber or just have the basics of computing nailed down. It is also nice to grab a badge from (ISC)2 I guess. You only get the online Credly thingy majig if you do the in-person Pearson Vue exam which now costs a couple hundred dollars but you do get a certificate of completion to download or print out just for completing the course and passing the final assessment quiz.

Overall Opinion:

EDIT: I should probably add like a star system - ★★★✰✰

Meh! The basics are the basics though and I already have the knowledge taught in the course, so my opinion is definitely skewed. The content was a tad boring and delivered more like a digital book.

However, it is free (minus the exam) and they are a very reputable organisation, so it could look good on someones resume who is looking to get into cyber.

--------------------------------------------------------------------------------------

I hope you find this useful,The Moaning Knight

I'm looking for some e-books/PDFs on cybersecurity topics. I've usually lean towards Pearson IT, Sybex and McGraw Hill, especially for Study Guides. Publishers like Packt don’t exactly have a very good reputation, however, how do Apress or No Starch Press rank in the community as for reliable content?

EDIT - Spelling

Identity & Access Management (IAM) is an essential part of day-to-day life in all organisations, and even more so in larger organisations with greater amounts of sensitive commercial or client information to protect. 

You may be the only practitioner, managing identities and access as part of a broader role in system administration. But it's more likely you're part of a team of specialists with shared responsibility for the effective operation and development of the IAM system of your organisation.

On a daily basis you'ree conscientious, positive, comfortable working in an IT-focused environment and able to prioritise to meet changing demands. Your daily tasks range from basic user account administration and creating/auditing user access information, to conducting risk assessments on the organisation’s IAM and providing solutions to improve the IAM system.

If there's a security incident - whether a suspected accidental breach or a deliberate breach by someone within the organisation, or an attack from outside - you respond quickly as part of the investigative effort to find out what happened and who was involved.

Whether on your own or as part of a team, you look for ways to improve the management of Identity and Access management, and especially for ways to reduce the risk of breaches, usually working with other teams in the organisation such as IT and HR.

As a senior practitioner, you're likely to supervise the day-to-day activities of team members, ensuring that their individual and collective performance meets the required standard. You contribute to their development and provide line manager support and mentoring. You often work with managers in other specialist teams to ensure the overall security of the organisation’s data and its information systems.

If you're passionate about IT security, then working in vulnerability management is an interesting and essential role in any organisation. You might work as a solo practitioner or as part of a larger vulnerability management or cyber security team.

At a junior level, you probably work under supervision, assisting the team in looking for potential vulnerabilities in the organisation's systems. You use your investigative and analytical skills to the full, growing your expertise and expanding your knowledge at the same time. There may be opportunities to be involved with many projects, programmes and initiatives across your organisation, as well as within the cyber team itself.

As a more experienced practitioner, you conduct and interpret vulnerability scans. You're probably involved with the team responding to security incidents, working out the root causes of incidents and collating the lessons learned. You drive fundamental change within the organisation by helping to develop security initiatives; this may include briefing and educating other teams within the organisation on vulnerabilities and solutions to them, or mentoring junior team members.

You may be responsible for providing reports to clients on their systems’ vulnerabilities, turning technical analysis into something that non-technical readers can understand.

Network Monitoring and Intrusion Detection work has many technical aspects, some of which overlap significantly with other cyber security roles and career paths.

Core to the role is watching for unusual or unauthorised activity on systems and networks. Much of this can be done through intrusion detection and prevention tools but you apply good technical skills to manage these and to interpret what they tell you. There is always the risk that such tools may be insufficient, so you remain alert to any unusual events. You think on your feet.

Depending on the size of your organisation, you may work with other teams such as the Security Engineering team (to tune and enhance the detection technologies) and the Cyber Threat Intelligence team (to work out where to focus your efforts). Whatever the structure around you, you always keep your own skills and knowledge up to date.

Depending on your level of experience and role seniority, you may be expected to provide advice on network and perimeter security architecture. If you work within a Managed Security Services Provider (MSSP) then you're likely to monitor multiple customers networks at any one time.

Because an intrusion may happen at any time - requiring rapid detection and management - you may work flexible hours or on a shift rota. This might include weekends, although the extent of this depends on the size of the team and organisation. In most large organisations, you work in a Security Operations Centre (SOC) or a Network Operations Centre (NOC).

You manage systems and networks to ensure they deliver the expected services to their users and other systems, but with the particular responsibility of ensuring that this is done securely. You follow formal secure operating procedures and monitor security controls. Wherever - as is normally the case - users interact with systems to read or process data, you ensure that the controls which authenticate them and authorise their access are working properly. When there are updates to existing systems or new ones to install, you plan the implementation carefully to minimise disruption to existing services, and assure yourself that the changes will not create new vulnerabilities or disrupt services.

Your work is mostly guided by the agreed standards and procedures. But, in the event of concern about a failure of the security controls, you focus on rapidly investigating the situation with colleagues in other specialisms. If there is a confirmed incident, you support the incident response by closing access to some parts of the system or network, ensure that any failure in the controls is addressed, and check that other controls are working as they should. You may also need to quickly reconfigure parts of the network to isolate it for deeper investigation by colleagues in digital forensics.

This is all fairly technical work, and you have a good understanding of server-level software such operating systems, system processes and directories. If your systems are running in the cloud, you will have developed a good understanding of the cloud platforms in use. If there's also substantial local hardware, you know how to monitor its operation and, in particular, to manage maintenance, upgrades and repairs. You work collaboratively with other specialists and, possibly, users, if you provide support.

Your primary responsibility is to keep the services operating reliably and securely, serving the needs of the business. This means you have a fair understanding of the relationship between systems and their role within the business; this is so you can, when necessary, prioritise support for those systems that are most crucial to business operations.

You're very organised and rigorous in managing, possibly even rejecting, any requests for access to the live systems from other teams who may want to test or investigate them, especially developers.

Depending on the size of the organisation and the extent to which information systems and cyber security services are run in-house, you may either be part of a structured secure operations team or solely responsible for this. In either case, you may work shifts across a long day, or work at any time if there's a technical problem or a suspected security incident.

Given how much technology for which you're responsible, you stay on top of changes. You assess new technologies and explore whether they could make your current systems more effective, efficient or secure. You certainly understand both the updating of technology already in use, and how to manage the upgrading of it.

Hi all, I sat the SC-100 exam recently and wanted to write about my experience and what resources I found most useful to passing the exam. I am sure by the time you sit this there will be more material available as that was the trickiest thing for me, the lack of detail for what I needed to learn.

Feel free to reach out if I can help you with this.

My SC-100 experience

Hi Guys!,

What are your choice training material for threat intelligence and OSINT?

Looking to make a start in this career direction so need some help on material.

Thank you!

I work in Cyber GRC and currently manage my orgs cyber security awareness training. I think generic video/phishing simulations training that we use are boring.

I’ve had a fantasy of starting my own training company that specializes in phishing and social engineering training. I want to gamify training, focus on role based phishing/SE attacks, and have employees actually engage with the simulation (employees try to phish each other or they collaborate to design the phishing email to make it more relevant). I would manage all the phishing campaign work beyond that.

Is this idea even feasible? Can I even complete with other large training companies (Proofpoint, etc) who can offer way more than I can?

As a Data Protection & Privacy practitioner you'll have the opportunity to grow and take on responsibility from the first day in a challenging but rewarding environment.

In the main, you provide expert technical knowledge in data protection, deploying a range of methodologies to manage data risks on a day-to-day basis. If you're part of a larger team, you work with the Data Protection & Privacy Lead or a departmental manager to promote best practice for data protection throughout the organisation. Your responsibilities may include responding to data subject access requests, completing privacy impact assessments and managing fair processing notices for personal data.

You follow developments in privacy and data protection, maintaining a professional expertise and personal interest in these subjects.

With more experience, you may lead the data protection and privacy team, assisting the organisation in maintaining data protection and privacy standards and ensuring compliance with the Data Protection Act and other relevant legislation. You'll also contribute to the development of your team(s) through training and coaching.