Skip to content
Artist's Notebook
Tree Traversal
Initializing search
Home
Tags
Cloud Security
DevSecOps
Information Technology
My Work
Security Automation
Software Development
Artist's Notebook
Home
Tags
Cloud Security
Cloud Security
Cloud Architecture & Security Design
CloudSLAW
CloudSLAW
Labs
Labs
Create and Secure Your First Admin User
Turn on CloudTrail
Timmy's First CloudFormation
Follow the Money!
Create Your First AWS IAM Role
Write a Simple IAM Policy
Enable AWS Organizations
Give Your Account a Security Blanket with SCPs
Assume the Role! (Centralized Logging, Part 1)
Secure that Bucket! (Centralized Logging Part 2), Resource Policies
Enabling the Org Trail (Centralized Logging Part 3)
Bring in the Fed(eration) SSO
Another Me SSO with IAM Identity Center, Part 2
AWS LEGO Organizing the Org
OUs, SCPs, and a Root User Account Recovery
NotWhat?!? Lock Out Regions with a Double Negative SCP
On the Meaning of Life(cycles), Versions, and Ransomware
Buttoning up the Org
Enabled Delegated Administrator for Identity Center and CloudTrail
Creating Security Team Permissions in IAM Identity Center
Enable GuardDuty the Right Way
The Best Way to Start with AWS Security Hub
Use EventBridge for Security Hub Alerts
PBAC and ABAC Write an Intermediate AWS IAM Policy
Skills Challenge IAM Identity Center
Microsoft Security
Microsoft Security
Entra ID
Entra ID
Overview
Configuring Identity and Access in Microsoft Azure
Managing Security Operations in Microsoft Azure
Microsoft Defender Suite
Microsoft Sentinel
Securing Data and Applications in Microsoft Azure
Compute
Compute
Logic Apps
Logic Apps
Preventing IDOR Vulnerabilities
Tools
Tools
Wiz
DevSecOps
DevSecOps
Try Hack Me
Try Hack Me
Secure Software Developmet
Secure Software Developmet
Introduction to DevSecOps
Secure Software Development Lifecycle (S-SDLC)
Software Development Lifecycle (SDLC)
Security of the Pipeline
Security of the Pipeline
Source Code Security
IaC
IaC
Overview
Terraform
Terraform
Overview
Writing DRY Code with Modules and `for_each`
HCP Terraform
Mutable VS Immutable
State Management
Terraform Workflow
Source Control
Source Control
Git
Git
Overview
Git Config Notes
Information Technology
Information Technology
Troubleshooting Steps
Cloud
Cloud
Azure
Azure
App Services
Application Gateway
Compute
Container Instances
Content Delivery Network (CDN)
Enabling Platform Protection in Microsoft Azure
Express Route
Firewalls
Functions
Kubernetes Service
Scale Sets
Virtual Desktop
Virtual Machines
Virtual Network
VPN Gateway
Computer Networking
Computer Networking
Hub & Spoke
IP Addressing
IP Routing
Load Balancer
OSI Model
Proxy Servers
Subnetting
Cybersecurity
Cybersecurity
Blue Team
Blue Team
Threat Detection
Threat Detection
Learn Attackers Behaviors
Understand What Telemetry and Logs Are
Try Hack Me
Try Hack Me
Security Engineer
Security Engineer
Introduction to Security Engineering
Introduction to Security Engineering
Security Engineer Intro
Network & System Security
Network & System Security
Security Network Architecture
Threats & Risks
Threats & Risks
Risk Management
Threat Modeling
SOAR (Security Orchestration, Automation & Response)
Red Team
Red Team
Try Hack Me
Try Hack Me
Junior Penetration Tester
Junior Penetration Tester
Burp Suite
Burp Suite
Burp Suite Intruder
Burp Suite Other Modules
Burp Suite Repeater
Burp Suite The Basics
Introduction to Web Hacking
Introduction to Web Hacking
Authentication Bypass
Command Injection
Content Discovery
File Inclusion
Insecure Direct Object Reference (IDOR)
Intro to Cross-site Scripting
Intro to SSRF
SQL Injection
Subdomain Enumeration
Network Security
Network Security
Active Reconnaissance
Net Sec Challenge
Nmap Advanced Port Scans
Nmap Basic Port Scans
Nmap Live Host Discovery
Nmap Post Port Scans
Passive Reconnaissance
Protocols and Servers
Protocols and Servers 2
Web Application Pentesting
Web Application Pentesting
Authentication
Authentication
Enumeration & Brute Force
JWT Security
Multi - Factor Authentication
OAuth Vulnerabilities
Session Management
Injection Attacks
Injection Attacks
Advanced SQL Injection
NoSQL Injection
ORM Injection
Server-side Template Injection
XXE Injection
Try Hack Me
Try Hack Me
CyberSecurity 101
CyberSecurity 101
Search Skills
Generative AI
Identity & Access Management
Identity & Access Management
Overview
Authentication vs Authorization
Identity vs Account vs Principal
Claims. Tokens. Sessions
Federation. Trust relationships
Open Standards
Open Standards
OAuth 2.0
OpenID Connect
SAML 2.0
SCIM
JWK and Key Rotation
Directory Services
Directory Services
LDAP
Kerberos
Directory forests, domains, replication
Group membership, role models, ACLs, discretionary vs role-based systems
My Work
My Work
Personal Projects
Personal Projects
CodeCrafter's Build your own Git
Azure Appsec Pipeline
Security Automation
Security Automation
Python
Python
Overview
The Four-Step Problem-Solving Process
Questions I Ask Myself
Applying Python
Data Types
Dictionaries & Sets
Error Handling & Debugging
File Management
Functions
If/Else Statements
Lists & Tuples
Loops
Modules, Libraries, & Packages
Operators
Variables
Software Development
Software Development
Software Design Principles
Software Design Principles
Overview
Dry Don't Repeat Yourself
Single Responsibility
KISS (Keep It Simple, Stupid)
YAGNI (You Aren’t Gonna Need It)
Questions I Ask Myself
Tree Traversal
¶
Back to top