cnbird's blog

Cybersecurity Archives - CB Insights Research

关于大型互联网企业DevSecOps体系构建的总结与思考[1]https://apievangelist.com/2012/01/12/the-secret-to-amazons-success-internal-apis/[2]https://docs.aws.amazon.com/whitepapers/latest/introduction-devops-aws/two-pizza-teams.html[3]https://gist.github.com/terabyte/1...

​​​​​​​(Web-)Insecurity Blog | Flickr Account Takeoverhttps://security.lauritz-holtmann.de/advisories/flickr-account-takeover/本文主要是利用了Cognito配置错误的相关问题导致了被Account Takeover。

Final: OpenID Connect Discovery 1.0 incorporating errata set 1Microsoft 标识平台身份验证库 | Microsoft DocsMicrosoft 标识平台和 OpenID Connect 协议 - Microsoft identity platform | Microsoft Docs​​​​​​安全令牌 | Azure - Microsoft identity platform | Microsoft Docs...

List of bug bounty writeups · Pentester LandGoogle VRP WriteUpGitHub - xdavidhu/awesome-google-vrp-writeups: ???? A list of writeups from the Google VRP Bug Bounty program

dirkjanm.io

Microsoft 微软的网络安全保护https://www.microsoft.com/en-us/insidetrack/search?text=information+protectionhttps://www.microsoft.com/en-us/insidetrack/search?text=information+protection特权管理最佳实践：Improving security by protecting elevated-privilege accounts at .

https://docs.microsoft.com/zh-cn/microsoft-365/compliance/information-protection?view=o365-worldwide

https://docs.microsoft.com/en-us/azure/security-center/alerts-referencehttps://docs.aws.amazon.com/guardduty/latest/ug/guardduty_finding-types-ec2.html

https://blog.cloudflare.com/zh-cn/cloudflare-and-remote-browser-isolation-zh-cn/

https://docs.microsoft.com/zh-cn/exchange/architecture/architecture?view=exchserver-2019

http://eversec.com.cn/wp-content/uploads/2020/08/%E4%B8%AD%E5%9B%BD%E4%BF%A1%E5%88%9B%E4%BA%A7%E4%B8%9A%E5%8F%91%E5%B1%95%E7%99%BD%E7%9A%AE%E4%B9%A62021.pdfhttps://www.iyiou.com/analysis/202012231012727

https://www.secwise.be/en/how-to-bypass-mfa-in-azure-and-o365-part-1/https://docs.microsoft.com/zh-cn/azure/active-directory/devices/concept-primary-refresh-tokenhttps://docs.microsoft.com/zh-cn/azure/active-directory/authentication/concept-authent

CIM WMIhttps://docs.microsoft.com/en-us/windows/win32/cimwin32prov/cim-wmi-provider

https://medium.com/intrico-io/strategy-tool-amazons-pr-faq-72b3e49aa167

https://mp.weixin.qq.com/s/6lPdiuWkVvdFe1ZOHI6BPQ

https://mp.weixin.qq.com/s/xkeNxE99ORtVs9EOv0ellQ

云安全架构连载之一-Azure整体架构以及安全亮点详解https://mp.weixin.qq.com/s/QNBlsBJaWNXsZLEuNRQcvQ云安全架构连载之二-Azure云平台威胁检测详解https://mp.weixin.qq.com/s/Dffk-_TSCaR2SWVAIMCQUA

https://www.microsoft.com/en-us/itshowcase/inside-the-transformation-of-it-and-operations-at-microsoft#relatedcontent

https://github.com/tensorflow/privacy