[B! cisa] ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ishideo id:ishideo

cisaã«é–¢ã™ã‚‹ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (36)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

GitHub - rxerium/CISA-KEV: A repo to notify me when the CISA KEV updates and how many Nuclei templates there are to scan the KEV
ishideo 2025/01/09
vulnerability

cisa

kev

nuclei-templates

cve

list

github

scannable

scan

dorks
ãƒªãƒ³ã‚¯
A Deep Dive into KEV
ishideo 2024/08/19
first

kev

vulnerability

cve

threat

youtube

cisa
ãƒªãƒ³ã‚¯
SSVC On Demand Training
ishideo 2024/07/27
ssvc

vulnerability

on-demand

training

cisa

management

triage

priority

youtube

example
ãƒªãƒ³ã‚¯
CISA Stakeholder-Specific Vulnerability Categorization Guide
ishideo 2024/07/26
cisa

ssvc

vulnerability

cisa-coordinator

coordinator

decision-tree

guide
ãƒªãƒ³ã‚¯
ICSé–¢é€£è£½å“ã®è„†å¼±æ€§æƒ…å ±ã®åˆ†æžã‚’é€šã˜ã¦è¦‹ãˆã¦ããŸèª²é¡Œ
ishideo 2024/07/23
ics

ics-patch

vulnerability

management

svss

jpcertcc

pdf

slide

cisa

coordinator
ãƒªãƒ³ã‚¯
Stakeholder-Specific Vulnerability Categorization (SSVC) | CISA
ishideo 2024/07/23
ssvc

cisa

pdf

coordinator

decision-tree

calculator

youtube

training

vulnerability

management
ãƒªãƒ³ã‚¯
GitHub - hogehuga/richmentdb: vulnrichment database project.
ishideo 2024/07/23
mysql

docker

richmentdb

vulnrichment

cisa

import

cli

github

database
ãƒªãƒ³ã‚¯
GitHub - cisagov/vulnrichment: A repo to conduct vulnerability enrichment.
The CISA Vulnrichment project is the public repository of CISA's enrichment of public CVE records through CISA's ADP (Authorized Data Publisher) container. In this phase of the project, CISA is assessing new and recent CVEs and adding key SSVC decision points. Once scored, some higher-risk CVEs will also receive enrichment of CWE and/or CVSS data points, where possible. Producers and consumers of
ishideo 2024/05/14
cisa

gov

vulnerability

threat

enrichment

cve

cvss

cwe

cpe

github
ãƒªãƒ³ã‚¯
CISAã®è„†å¼±æ€§ç®¡ç†ç’°å¢ƒã®å¤‰é©ã«é–¢ã™ã‚‹æ¦‚èª¬ã¨SSVCã‚¬ã‚¤ãƒ‰ - Qiita
ishideo 2024/03/25
ssvc

cisa

vulnerability

threat

qiita

management
ãƒªãƒ³ã‚¯
Home
ishideo 2024/01/24
crossfeed

api

monitoring

organization

attack-surface

cisa
ãƒªãƒ³ã‚¯
GitHub - cisagov/admiral: Distributed certificate transparency log harvester
ishideo 2023/08/16
admiral

cisa

python

cli

ct-log

certificate

tls

certificate-transparency-log

harvester

github
ãƒªãƒ³ã‚¯
æ—¢çŸ¥ã®æ‚ªç”¨ã•ã‚ŒãŸè„†å¼±æ€§ã‚«ã‚¿ãƒã‚°ï¼ˆæ—¥æœ¬èªžç‰ˆï¼‰
ã‚¢ãƒ¡ãƒªã‚«æ”¿åºœCISAã«ã‚ˆã‚‹ã€Œæ—¢çŸ¥ã®æ‚ªç”¨ã•ã‚ŒãŸè„†å¼±æ€§ã‚«ã‚¿ãƒã‚°ã€ã®æ—¥æœ¬èªžè¨³
ishideo 2022/12/27
kev

vulnerability

cisa

japanese

known-exploitable-vulnerabilitie

threat

cve
ãƒªãƒ³ã‚¯
SSVC Calculator | CISA
Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock (A locked padlock) or https:// means youâ€™ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
ishideo 2022/11/11
cisa

ssvc

calculator

webservice

vulnerability

threat

prioritization
ãƒªãƒ³ã‚¯
Weak Security Controls and Practices Routinely Exploited for Initial Access | CISA
Malicious actors commonly use the following techniques to gain initial access to victim networks.[TA0001] Exploit Public-Facing Application [T1190] External Remote Services [T1133] Phishing [T1566] Trusted Relationship [T1199] Valid Accounts [T1078] Malicious cyber actors often exploit the following common weak security controls, poor configurations, and poor security practices to employ the initi
ishideo 2022/09/11
cisa

threat

vulnerability

port

rdp

netbios

smb

vpn

exploit

mfa
ãƒªãƒ³ã‚¯
SMB Security Best Practices | CISA
Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock (A locked padlock) or https:// means youâ€™ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
ishideo 2022/09/09
smb

vulnerability

best-practices

cisa

gov

recommendation
ãƒªãƒ³ã‚¯
NSA and CISA share Kubernetes security recommendations
ishideo 2022/07/01
kubernetes

cisa

nsa

cybersecurity

vulnerability

pdf

misconfiguration

api

guidance

bleepingcomputer
ãƒªãƒ³ã‚¯
Kubernetes Hardening Guidanceã‚’è¨³ã—ã¦ã¿ãŸ(éšæ™‚æ›´æ–°ä¸) | Zenn
ã“ã®æ–‡ç« ã«ã¤ã„ã¦ ç±³å›½åœŸå®‰å…¨ä¿éšœçœã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚¤ãƒ³ãƒ•ãƒ©ã‚¹ãƒˆãƒ©ã‚¯ãƒãƒ£ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åº(CISA)ã¨ç±³å›½å®¶å®‰å…¨ä¿éšœå±€(NSA)ã«ã‚ˆãƒªä½œæˆã•ã‚ŒãŸKubernetes Hardening Guidance, Kuebrnetesç’°å¢ƒã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚ˆã‚Šå …ç‰¢ã«ã™ã‚‹ãŸã‚ã®ã‚¬ã‚¤ãƒ€ãƒ³ã‚¹ã‚’ç¿»è¨³ã—ãŸã¿ãŸã‚‚ã®ã§ã™ã€‚ è¨³è€…ã®è‹±èªžåŠ›ã¯å£Šæ»…çš„ã§ã™ã®ã§ã€å¤šãã®èª¤è¨³ãªã©ã‚ã‚‹ã‹ã¨æ€ã„ã¾ã™ãŒç”Ÿæš–ã‹ã„ç›®ã§è¦‹ã¦é ‚ã‘ã‚Œã°ã¨æ€ã„ã¾ã™ã®ã§ã‚ˆã‚ã—ããŠé¡˜ã„ã—ã¾ã™ã€‚ç¿»è¨³ã¯ä»¥ä¸‹ã§éšæ™‚æ›´æ–°ï¼†ä¿®æ£ã—ã¦ã„ãã¾ã™ã€‚ Kubernetes Hardening Guidance Disclaimer of warranties and endorsement ã“ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«å«ã¾ã‚Œã‚‹æƒ…å ±ã¨æ„è¦‹ã¯ç¾çŠ¶ã®ã¾ã¾ã§æä¾›ã•ã‚Œã‚‹ã‚‚ã®ã§ã‚ã‚Šã„ã‹ãªã‚‹æ ¹æ‹ ã‚„ä¿è¨¼ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ã“ã“ã«è¨˜è¼‰ã•ã‚Œã¦ã„ã‚‹ç‰¹å®šã®å•†ç”¨è£½å“ã€ãƒ—ãƒã‚»ã‚¹ã€ã‚µãƒ¼ãƒ“ã‚¹ã«ã¤ã„ã¦å•†å·ã€å•†æ¨™ã€è£½é€ è€…ã‚’ç±³å›½æ”¿
ishideo 2022/07/01
kubernetes

cisa

nsa

cybersecurity

vulnerability

zenn

misconfiguration

api

guidance

credential
ãƒªãƒ³ã‚¯
Kubernetes Hardening Guide | NSA/CISA
ishideo 2022/06/30
kubernetes

cisa

nsa

cybersecurity

vulnerability

pdf

misconfiguration

api

guidance

credential
ãƒªãƒ³ã‚¯
IRF Index - IRF
ishideo 2022/06/20
report

email

cisa

phishing

gov

url

list
ãƒªãƒ³ã‚¯
GitHub - cisagov/findcdn: findCDN is a tool created to help accurately identify what CDN a domain is using.
ishideo 2022/05/27
findcdn

python

cisa

scanner

cdn

cli

github

cname

domain
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx