Active Directory Penetration Testing Guide: The Hub
A practical Active Directory penetration testing guide: engagement order, key concepts, a worked path from foothold to Domain Admin, and the defender's view of every step.
Dominion Cyber
Cybersecurity Articles & Insights
Practical security guides, threat deep-dives and hands-on how-tos for defenders, engineers and the security-curious.
Latest articles
83 articles
SQL Injection Testing Guide: A Practical sqlmap Workflow
A hands-on SQL injection testing workflow with sqlmap: manual confirmation, safe enumeration, result triage, and the fixes defenders should verify.
Burp Suite Tutorial: Your First Intercept to First Finding
A hands-on Burp Suite walkthrough: install it, intercept traffic, replay requests in Repeater, and turn one IDOR into a verified finding.
API Penetration Testing: A Practical Guide and Checklist
A practical, repeatable method for penetration testing REST, GraphQL and gRPC APIs — endpoint inventory, identity matrices, authorization testing, and fixes that hold.
OSINT Tools for Penetration Testing: A Practical Hub
A practical hub for OSINT tooling in penetration testing: which tool fits which reconnaissance phase, how to scope it lawfully, and what defenders should fix.
Patch Management Software Compared: A Practical Buyer’s Guide
Five classes of patch management software compared on coverage, reboots, reporting, and cost, plus a default pick and the conditions that would change it.
Ransomware Response Playbook: A Copy-Paste Template
A fill-in-the-blanks ransomware response playbook you can copy, adapt, and test, plus guidance on what to change for your environment.
Incident Response Retainer Explained: What You Are Paying For
An incident response retainer is a pre-paid agreement that reserves expert help, pre-negotiated terms, and a faster path to containment before a breach happens.
Velociraptor vs osquery vs GRR: Which One Should You Deploy?
A practical comparison of Velociraptor, osquery, and GRR for endpoint visibility and incident response, with a clear recommendation and a decision checklist.
Security for SMBs: What It Is and How to Do It Right
Security for SMBs means closing the few attack paths that actually hit small businesses, from stolen credentials to untested backups, with controls sized to your budget.