Tag: Cyber Kill Chain

A proxy acts as an intermediary between a client and a server, it’s very often used for filtering, caching, and logging web requests. Types Forward Proxy - Used by clients to access the internet, it hides the client’s IP address. E.g. Filtering employee internet traffic. Reverse Proxy...

LDAP (Lightweight Directory Access Protocol) is a protocol used to access and manage directory services over a network. It is commonly used to authenticate users, query user information, and manage resources in a hierarchical directory structure, such as AD. LDAP enables centralized management of...

Understanding these concepts is crucial for accurate threat detection and response as it helps to evaluate and improve the accuracy of security measures, ensuring they are reliable and effective at detecting and mitigating threats without causing unnecessary alerts or missing real threats. True Positive (TP) This...