Category: Blog

Exploiting Windows Hello for Business – Mike Jankowski-Lorek talks with Michael Grafnetter

Here it is – the very special interview from #BHEU 2019, led by our best journalist on board, Mike Jankowski-Lorek. 🎤  We had the opportunity to talk to Michael Grafnetter right after his keynote session and find out more about his Windows Hello for Business.  Are you curious how this password-less authentication tool works?   Watch the video and […]

#CQLabs – Windows Defender Exploit Guard under the hood by Artur Wojtkowski

Antivirus software usually uses malware signatures, behavioral detection or heuristic detection to block malware. All these methods may be insufficient in case of APT (Advanced Persistent Threat) attacks prepared specifically for the victim or attacks exploiting 0day vulnerabilities in software, that were never seen before. Exploit Guard: Exploit Protection and Exploit Guard: Attack Surface Reduction […]

#CQLabs – Extracting Roamed Private Keys from Active Directory by Michael Grafnetter

Previously on CQLabs This article is a continuation of a previous one, called #CQLabs 5 – DSInternals PowerShell Module. Introduction One of the lesser known features of Active Directory (AD) is called Credential Roaming. When enabled, it synchronizes DPAPI Master Keys, user certificates (including the corresponding private keys) and even saved passwords between computers. We […]

9 Security Tips for Working Remotely

We have gathered some essential facts about remote working security, as it may have some challenges to overcome. Check out our new poster and discover tips that will help you to keep your home office (or wherever you work from) safe. Download the poster below!   1. There are always some IT knights in the […]

1 day to Windows Forensics Mastery – Cybersecurity Online Course

If you have any questions please drop us a message via our contact form.

Hacking Summer Camp: How to Steal Kerberos Tickets?

Welcome to the second episode of our Hacking Summer Camp! We hope you enjoyed Resetting the Admin’s Password Illegally and are now ready and steady for another adventure. Get ready for a decent portion of useful tools and tips.   Episode 2: How to Steal Kerberos Tickets?   Hi Security Enthusiasts! Today is the time […]

[RSA Conference 2020 APJ] Paula’s session on Forensic Techniques against Hackers

Paula Januszkiewicz held an intense session today (July 17th) at the RSA Conference 2020 the Asia Pacific and Japan. What an excellent event!  This year’s edition was unique, as for the first time the event took place completely online. That was a challenge for everyone, however – we treat it as a new learning opportunity!  But one thing is for sure, the whole world is going online, and the pandemic has just helped […]

[RSA Conference 2020 APJ] Mike’s session on Common Mistakes Which Lead to Huge Compromises of Identity

Mike Jankowski-Lorek held an intense session today (July 17th) at the RSA Conference 2020 Asia Pacific and Japan. What an excellent event!  This year’s edition was unique, as for the first time the event took place completely online. That was a challenge for everyone, however – we treat it as a new learning opportunity!  But one thing is for sure, the whole […]

Hacking Summer Camp: Network Sniffing Techniques

  Here comes the next episode of our Hacking Summer Camp! Do you still remember How to Steal Kerberos Tickets? Now we have prepared another bunch of hacking tips&tricks for you, that you might find useful.   Episode 3: Network Sniffing Techniques How you ever wondered what is causing THAT traffic on your network interface […]

Hacking Summer Camp: Memory Analysis Guide, Part 1

  Hopefully, you’ve had a big cup of coffee today, because episode 4 of our Hacking Summer Camp is out and this one will be REALLY intense! If you’d like to warm up, we recommend you to take a look at the previous episode on Network Sniffing Techniques. Ready? Let’s start!   Episode 4: Memory Analysis Guide Part One, Memory […]