KHOI | Blog

Threat intelligence APT and MISP · 9 min read

2023-10-29

Advanced Persistent Threat aims to infiltrate a company’s computer systems and steal information or disrupt operations. APT is persistent, meaning the...

Incident response — NIST vs SANS · 11 min read

2023-10-24

Placed side-by-side in a list format, NIST and SANS have all the same components and the same flow. The biggest difference lies in Step 3, where NIST ...

What are SIEM and UEBA? · 6 min read

2023-10-18

Let's dive into Security Information & Event Management (SIEM) and User and entity behavior analytics (UEBA)...

Slowloris DDoS & how to mitigate with NGINX · 12 min read

2023-10-16

What is denial-of-service (DDoS) attack? Here's a brief explanation. It's a malicious attempt to disrupt the normal traffic of a targeted server by ov...

10 ways to prevent zero-day attacks · 8 min read

2023-10-16

A zero day (or 0-day) vulnerability is a security risk in a piece of software that is not publicly known about and the vendor is not aware of. These a...

Taking driver license test for international students in the US · 3 min read

2023-10-15

In the US, you need to pass 2 rounds to get the official permit: 1. Computer test - tests you about rules, car signals, traffic signs, etc. 2. Road te...

Unlocking Enterprise Sales: The Power of Permissionless Pilots · 5 min read

2023-10-10

I recently learned about Permissionless Pilots - a new pattern that’s enabling startups to close big contracts, fast...

What is a DNS SOA (Start of Authority) · 7 min read

2023-10-08

The DNS start of authority (SOA) record stores important information about a domain or zone such as the email address of the administrator, when the d...

Limitations of lean startup · 11 min read

2023-10-08

Challenge 1: Applying lean manufacturing to startups: Got its origin from manufacturing. Toyota's lean production system and how the company used vari...

Presenting at Huntsville National Cyber Summit · 1 min read

2023-10-06

I am proud to have presented at Huntsville's National Cyber Summit for the cybersecurity startup that I had interned with called Ossillate Inc....