Plain English guides to common security tools and testing methods, and what they can and cannot tell you.

Published entries in Security tools and testing methods:

• What is Nmap? A plain English guide to the free network scanner
• Penetration testing methodology: how a professional test is scoped, run and reported
• What is vulnerability scanning? How automated checks find known weaknesses
• What is Wireshark and how do defenders use it?
• What is Burp Suite? How web penetration testers use it, explained for defenders
• What is Metasploit? A defender’s guide to the penetration testing framework
• What is Nessus? How the vulnerability scanner works and what it cannot tell you
• What is BloodHound? How defenders use it to find Active Directory attack paths
• What is a honeypot? How decoy systems give early warning of an attacker
• How to check which ports are open on your business network
• What are canary tokens? Free tripwires that warn you when someone is snooping