FREE - 150+ tools and resource from SANS.

https://www.sans.org/media/free/free-faculty-tools.pdf

FREE COVID-19 Threatlist from DOMAINTOOLS

- We know bad guys are creating fake COVID-19 related domains to lure us. To battle this , DomainTools is providing a free, curated list (updated everyday) of high-risk COVID-19-related domains to support the community during the Coronavirus crisis.

https://www.domaintools.com/resources/blog/free-covid-19-threat-list-domain-risk-assessments-for-coronavirus-threats

Free Anti Virus and smart phone protection Software from Sophos

https://www.sophos.com/en-us/products/free-tools.aspx?cmp=30726

Most airports, hotels and coffee shops offer free WiFi. How do you know which ones are NOT safe? - Use this Free software/tool to detect Unsafe WiFi. (Note - The URL is free to use but, the app is owned by Symantec and it needs your corporate email address for activation ).

Use the following URL:

https://maps.skycure.com/

Cloud vendor evaluation - The certifications you are looking for are what your vendor achieved, not their vendor. If the vendor states they have a certification and sends you AWS’ certification, that is a BIG RED FLAG. In fact, run!.

Free copy of "Vendor Security Assessment" Questionaire here:
https://www.vendorsecurityalliance.org/questionnaire2018.html


Here is a little trick I use when trying to verify the trust of a vendor without any certifications. I first ask what security/compliance framework they follow. Let’s say they answered PCI then I go down to where I asked them how often they scan for vulnerabilities. If they state annually, then they obviously are not following the PCI framework.

Remember, your job is to assess the risk and relay that back to the business. If the business still wants to move forward with a high-risk vendor then the business owner didn’t understand the risk and you should move the discussion around compensating controls. Once you start down that path, the business owner usually instructs their team to look for other cloud vendors

https://www.alienvault.com/blogs/security-essentials/you-are-doing-cloud-vendor-assessments-wrong

FREE - Want to know if the website you are visiting is vulnerable , then you should get this Chrome extension

Vulners Web Scanner lets you Scan websites while you surf internet!

Get it here
https://chrome.google.com/webstore/detail/vulners-web-scanner/dgdelbjijbkahooafjfnonijppnffhmd

I did not know this - Windows "Disk Cleanup" now includes option to remove outdated Windows Update

IMPORTANT:
Search for "disk cleaner" and make sure you choose "run as administrator"


Something new to learn everyday.

Some use "cccleaner" but this one is part of the OS and gets an nice upgrade



Details on How to do it:
http://blogs.technet.com/b/askpfeplat/archive/2013/10/07/breaking-news-reduce-the-size-of-the-winsxs-directory-and-free-up-disk-space-with-a-new-update-for-windows-7-sp1-clients.aspx

FREE - Source Code Audit Tool - GRAUDIT v1.9

From the Article:

Graudit is a simple script and signature sets that allows you to find potential security flaws in source code using the GNU utility grep. It’s comparable to other static analysis applications and source code auditing tool sets like RATS, SWAAT and flaw-finder while keeping the technical requirements to a minimum and being very flexible.



Check the following link for more information:
http://www.darknet.org.uk/2015/05/graudit-v1-9-download-grep-source-code-auditing-tool/

Malware Bytes adds exploit-Blocking technology (included in Free Version!)

The free version of Anti-Exploit will protect against exploits in browsers, their add-ons, and Java, while the $24.95 premium version will also work in Microsoft Office, PDF readers, media players, and software selected by the owner.

(From the article)

Anti-Exploit is "not about the product. It's about the problem," Kleczynski said during an interview at Malwarebyte's office in San Jose, Calif. "Sometimes it catches the exploit so early we can't show the alert" that it has stopped an attack.

If it works as advertised, Malwarebytes Anti-Exploit would be remarkable for preventing zero-day vulnerabilities -- previously unknown, unpatched software flaws -- from being exploited to steal data or gain control of your computer. Exploits that launch malicious code on your computer, known as remote code execution, combined with zero-day flaws have been successful in targeting massive multinational corporations, financial institutions, and critical infrastructure, as well as private individuals.

The link below has more information:-

http://www.cnet.com/news/malwarebytes-finally-unveils-freeware-exploit-killer/#ftag=CAD590a51e

Linix Distro - For anonymous browsing , email and other activity.

TAILS - This Linux distro is built for Anonymity. All connections to the internet go trough TOR and no traces left on your computer.


Check It out:

https://tails.boum.org/

Free Software - to Address top 4 critical controls and Prevent 85% of cyber-attacks

It is called "Qualys Top 4"

Try it because:

1. Free
2. Nothing to Install on your systems

According to the article:- 

Qualys Top 4 is a free tool that builds on the popular QualysGuard Cloud Platform, and enables customers to scan their environments to determine whether or not Windows PCs have effectively implemented the top four security controls:  

1. Application Whitelisting—only allowing approved software to run
2. Application Patching—keeping applications, plug-ins and other software up to date
3. OS Patching—keeping operating systems current with the latest fixes
4. Minimizing Administrative Privileges—preventing malicious software from making silent changes

The link below has more information:-

http://www.csoonline.com/article/2137149/network-security/avoid-85-percent-of-cyber-attacks-with-free-tool-from-qualys.html

Tools / Utilities - Free Security Tools - Top 125 Network Security Tools

This one is dynamic and the rating shows their popularity.

This is a good bookmark for all security folks



LINK:

http://sectools.org/

Tools / Utilities - AV/Anti-Malware Malwarebytes 2.0 Released (Free/Paid)

 

I have always been a fan of this product. This product was able to find malware that a few expensive commercial versions could not.


Ver 2.0 has a new look and claimed to have better protection.

Still free or pay $19.00 for lifetime license.


NOTE:
The free version does not have real-time protection.



You can download it from the vendor site

https://www.malwarebytes.org/

Free Software - Microsoft OneNote

I have always loved it and you don't have to pay for it anymore so, thought of sharing the good news.


You can get it from here:

http://www.onenote.com/

Free Tool: CrowdResponse - For Incident Response amd Malware research

SNIPPETS from the Article:-

CrowdResponse is a modular Windows console application designed to aid in the gathering of host information for incident response engagements.

This initial version provides three useful built-in modules

1. @dirlist - This is the directory-listing module. This sounds quite simple, but it is actually extremely powerful.
2. @pslist - This is the active running process listing module.
3. @yara - YARA will be familiar to many as an incredibly useful tool aimed at helping malware researchers identify and classify malware. It can act on files on disk or in-memory process images and runs a set of pattern matching rules against the target of investigation.

The links below has more information:

http://www.crowdstrike.com/blog/new-community-tool-crowdresponse/index.html

Free Software - RKILL - Helps when Malware infection blocks or disables other security tools

About RKILL from the product site:-

RKill is a program developed at BleepingComputer.com that was originally designed for the use in our virus removal guides. It was created so that we could have an easy to use tool that kills known processes and remove Windows Registry entries that stop a user from using their normal security applications. Simple as that. Nothing fancy. Just kill known malware processes and clean up some Registry keys so that your security programs can do their job.

So in summary, RKill just kills 32-bit and 64-bit malware processes and scans the registry for entries that would not allow you to run various legitimate programs. When scanning the Registry, Rkill will search for malicious Image File Execution Objects, DisallowRuns entries, executable hijacks, and policies that restrict your use of various Windows utilities. When changing Windows Registry entries it will create a backup of these entries and save them in the rkill folder on your desktop. Each registry backup will contain a time stamp so that the backups are not overwritten on subsequent runs of Rkill. For a list of changes in Rkill, please see the change log at the bottom of this post.

Since RKill only terminates processes and does not remove the offending files, when it is finished you should not reboot your computer. If you do, these malware processes that are set to start automatically, will just start up again. Instead, after running RKill you should scan your computer using your malware removal tool of choice. If there is a problem after running RKill, just reboot your computer and you will be back to where you started before running the program. Some great free tools that you can use to scan your computer after running RKill include MalwareBytes' Anti-Malware, SuperAntiSpyware, and Dr.Web CureIt.


The download link is given below:

http://www.bleepingcomputer.com/download/rkill/

From Tripwire - A free, cloud-based vulnerability management service for up to 100 Internet Protocol (IP) addresses on internal networks .

If you are a SMB, this might be good for you.


The link below has all details:
http://www.tripwire.com/state-of-security/top-security-stories/securescan-free-cloud-based-vulnerability-management-service/