FREE - 150+ tools and resource from SANS.

https://www.sans.org/media/free/free-faculty-tools.pdf

Interesting Security Extension for Google Chrome - Google has released a new add-on for the Chrome browser that automatically and securely checks website credentials against known password breaches.

The Chrome browser extension, called Password Checkup, is available today. It securely checks credentials used to log in to websites—whether they're manually entered or stored in Chrome's password manager—against hashed credentials stored in an encrypted database of billions of compromised accounts maintained by Google.

https://arstechnica.com/information-technology/2019/02/google-releases-chrome-extension-that-alerts-to-breached-passwords/

Sign up for notification on "haveibeenpwned.com" (if you have not already done so) to receive alerts when your email account is involved in a Breach

Why? - Yesterday, I received an automatic email notification that one of my email has been compromised by "Collection #1" breach on 01/07/19.
“Collection #1 data breach” is made up of data stolen from numerous different data breaches. In all there are 1.16 billion unique combinations of email addresses and passwords in the data set, totaling 772,904,991 different unique email addresses.


https://www.grahamcluley.com/the-collection-1-data-breach-what-you-need-to-do-about-it/

It is the start of holiday season which also means, we will see an increase in SCAMS and Phishing attacks. It is time to re-educate all employees (mock phishing, awareness training). The link has an useful SANS "ouch" newsletter that you could circulate to your staff.

Get it Here:
https://www.sans.org/security-awareness-training/resources/shopping-online-securely

How to freeze your (more importantly, you children's) credit for free (in USA)

Everything you need in a single BLOG

Get it here:
https://www.techsupportalert.com/content/how-freeze-your-credit-free.htm

AWS Security Tools - Listed in a single page

Get it here

https://blyx.com/2018/07/18/my-arsenal-of-aws-security-tools/

Another FREE Security add-on for Chrome - Malwarebytes Browser extension (BETA). It prevents pop-ups, browser hijackers, and browser lockers from harassing you and interrupting your surfing. It also blocks clickbait links and fake news content, stops in-browser cryptocurrency miners, and gives other malicious content the boot. All this while relying on threat behavior patterns.

This is where Malwarebytes Browser Extension can help you:

• Protection from tech support scammers: Blocks browser hijackers, and browser lockers, which are used by scammers to drive victims to call centers that use scare tactics to sell expensive technical support (that you don’t need).
• Faster web page load times: Popular websites download a lot of unwanted content in the background. By filtering out clickbait and ads, Malwarebytes Browser Extension BETA can speed up your webpage load time, saving your sanity and bandwidth.
• Prevents visits to malicious pages: Protects you from inadvertently visiting bad websites that host malware content, steal your identity (phishing), load Bitcoin miners in the background, which slow down your computer, and a long list of other obnoxious behaviors that can make your online experience less than stellar.
• Keeps your privacy private: Blocks third-party ad trackers that follow you around the Internet and target you with the same ads over and over again.

https://blog.malwarebytes.com/malwarebytes-news/betas/2018/07/introducing-malwarebytes-browser-extension/

Protect your system from cryptojacking attacks - Try the new Chrome extension from Qualys

BrowserCheck CoinBlocker Extension uses both domain blacklists for cryptocurrency mining sites as well as heuristics features to detect unknown cryptojacking attack types


https://news.hitb.org/content/new-free-chrome-plugin-blocks-cryptojacking-browser-attacks

Free Utility to disable risky features in Windows OS, MS Office and in Adobe.

Generic Windows Features

• Disable Windows Script Host. 
• Disabling AutoRun and AutoPlay. D
• Disables powershell.exe, powershell_ise.exe and cmd.exe execution via Windows Explorer. 
• Sets User Account Control (UAC) to always ask for permission (
• Disable file extensions mainly used for malicious purposes. Disables the ".hta", ".js", ".JSE", ".WSH", ".WSF", ".scf", ".scr", ".vbs", ".vbe" and ".pif" file extensions 

Microsoft Office

• Disable Macros.
• Disable OLE object execution. 
• Disabling ActiveX.
• Disable DDE.

Acrobat Reader

• Disable JavaScript in PDF documents.
• Disable execution of objects embedded in PDF documents.
• Switch on the Protected Mode
• Switch on Enhanced Security

https://github.com/securitywithoutborders/hardentools

CIS Critical Security Controls version 7 has been available since March. It now has three broad categories and has been modified to align with the latest cyber threat data and reflect today’s current threat environment

You can download the PDF and the EXCEL sheet here (needs email registration)

https://learn.cisecurity.org/20-controls-download

Free tool - GeoLogonalyzer - From FireEye - Helps to weed out hackers exploiting stolen credentials to log into their targets.

Remember, this is NOT a replacement for best practices or existing protection.


Stolen enterprise user credentials are all the rage among hackers these days, but spotting the bad guys among legitimate users logging in remotely can be difficult

FireEye recommends several best practices for thwarting remote access hacks in addition to deploying GeoLogonalyzer,

• Including limiting remote access from the Internet to sensitive data 
• Instituting multi factor authentication using one-time tokens
• Whitelisting legit IP address ranges for remote access users, 

among other steps.

Pointers  that can help you in your decision making

1. Three things to know at any given point of time:
2. What are you trying to protect
3. What is the cost of  failure (to protect)
4. Who is is your enymy
5. What is the simplest and transparent way to protect
6. What is the cost (money / time / resources)
7. How do I monitor and generate valuable metrics

https://www.darkreading.com/analytics/fireeye-offers-free-tool-to-detect-malicious-remote-logins/d/d-id/1331923

Free Security Policy Templates from SANS

https://www.sans.org/security-resources/policies/?utm_medium=Social&utm_source=Twitter&utm_content=SM_Tw_Central_Policies&utm_campaign=SANS+Security+Policies

For Pentesters - Get subdomain info from here - https://findsubdomains.com/

https://findsubdomains.com/

Check If Your PC Is Vulnerable To The Spectre And Meltdown Bugs - Portaable app (single EXE) available from Gibson Research Corp

https://www.grc.com/inspectre.htm

Windows Meltdown-Spectre patches and antivirus compatibility spreadsheet

Get it  here.
https://docs.google.com/spreadsheets/d/184wcDt9I9TUNFFbsAVLpzAtckQxYiuirADzf3cL42FQ/htmlview?usp=sharing&sle=true

Interested in Penetration Testing (I mean Computer related Pen Test ) - Try this site as your starting point

This site has a bunch of

Cheat Sheets
Walk through
Pen Test tools related info


Excellent for Beginers

https://highon.coffee/

October is National Cybersecurity Awareness Month - Need Ideas? - Here is a good resource for Office, Home and even Kids

Get it Here:

https://securingthehuman.sans.org/resources/national-cyber-security-awareness-month?utm_medium=Social&utm_source=Twitter&utm_content=2017+Social+Promoting&utm_campaign=STH+NCSAM

check your password if it is already in the compromised list

You think you have a strong password
Or
You create a new password and you believe it is good enough

Are you sure it is not part of the  compromised password list?


Go the the site below and test your password.

https://haveibeenpwned.com/Passwords

Screen Recording tool in Windows 10

Nice to know

Hit the Windows key and G, and a popup will appear asking if you would like to open Game bar -- there are no Yes and No buttons, but check the 'Yes, this is a game' box (you will have to do this the first time you access the screen recorder in any application).

For More info:
http://betanews.com/2015/07/19/windows-10-secret-screen-recording-tool/

How-To: Use Autoruns and Sigcheck with VirusTotal

We know SysInternals has a wonderful set of free tools.

The following two links show how to use two of them along with VirusTotal 

Autoruns:

Shows you what programs are configured to run during system bootup or login, and when you start various built-in Windows applications like Internet Explorer, Explorer and media players. These programs and drivers include ones in your startup folder, Run, RunOnce, and other Registry keys. 

Sigcheck:

Shows file version number, timestamp information, and digital signature details, including certificate chains

How-To links from SANS:

https://isc.sans.edu/diary/Autoruns+and+VirusTotal/19933

https://isc.sans.edu/diary/Sigcheck+and+VirusTotal/19935