CySA+ (CS0-001)

In March 2020, I took CompTIA’s CySA+ (Cybersecurity Analyst) exam. Along with PenTest+, this bridges the gap between Security+ and CASP. In simple terms, PenTest+ is about “red team” activities (attack) whereas CySA+ is about “blue team” activities (defence). This certification was launched in 2017 as CSA+, but it was rebranded in January 2018 because …

Palo Alto Networks Certified Cybersecurity Associate (PCCSA)

Palo Alto Networks make security products. In particular, they sell firewalls (physical and virtual), and their Panorama software will let you manage multiple firewalls centrally (e.g. for branch offices). Their certification program has 3 tiers: Entry level Administrator Engineer Palo Alto Networks offer free training for all of these, although you have to pay for …

Offensive Security Wireless Professional (OSWP)

In April 2019, I took the Offensive Security Wireless Attacks (WiFu) course and the OSWP exam. (Along with PenTest+ and Microsoft 365 Fundamentials, this was my third exam in a month!) In brief, I enjoyed this. I thought the content was interesting, and the exam was actually fun (similar to an escape room). However, the …

PenTest+ (PT0-001)

In April 2019, I took CompTIA’s PenTest+ exam. Along with CySA+, this bridges the gap between Security+ and CASP. As the name suggests, it’s all about penetration testing. This is a relatively new exam, and it’s still on the first release (PT0-001). Because of that, it’s not very well known, so I haven’t seen any …

Security+ (SY0-401)

In November 2016, I took CompTIA’s Security+ exam. NB I did the SY0-401 syllabus; CompTIA replaced it with SY0-501 in October 2017, so some of the info in this blog post will now be a bit out of date. In brief, I think that this is a worthwhile certification. It emphasises breadth rather than depth, …

Active Directory lockouts

A lot of organisations set up security policies so that users will be locked out if they enter the wrong password too many times. The idea is to prevent brute force attacks, where an attacker could sit there all day running through the dictionary until they guess the correct password. The downside is that this …

Installing dd-wrt on a Linksys WRT320N wireless router

Back in 2011 I switched ISPs to A&A, primarily because they support native IPv6. Incidentally, 3 years on I see that you still can’t get IPv6 from Zen, so I made the right choice by switching. Windows has had IPv6 support included by default since 2006 (i.e. Vista onwards), so the missing piece of the …