New Horizons
Project Management Academy
Six Sigma Online
TCM Security
TRACOM
Velopi
Watermark Learning
Login
Our Blog
Resources and insights
The latest industry news, interviews, technologies, and resources.
How Can PCI DSS Compliance Prevent Data Breaches?
In this blog, we will take a look at how PCI DSS compliance standards actually stack up against threat actors general tactics, techniques, and procedures.
Coding Projects for Beginners
This blog post will provide some tips and suggest a few project ideas to help you acquire and develop programming skills to advance your coding abilities.
Introduction To Digital Privacy
This article contains actionable steps and resources to help you practice digital privacy, stop data brokers from collecting your information, and restore a sense of freedom and peace of mind.
So You Want to Be a Hacker: 2022 Edition
Video Version: https://youtu.be/lhz0-qAQlBM Introduction Last year, I posted a blog (https://tcm-sec.com/so-you-want-to-be-a-hacker-2021-edition/) and video (https://www.youtube.com/watch?v=mdsChhW056A) on how to become an ethical hacker in 2021. Given that it...
Bypassing Defender the Easy Way – Fodhelper
If you’ve ever tried to run a command prompt as administrator on your Windows OS before, you’ve seen a harmless popup appear. This is Windows User Account Control, or UAC. According to Microsoft, UAC “is a fundamental component of Microsoft’s overall security vision....
Pentest Tales #002: Digging Deep
Welcome to the second edition of Pentest Tales, a blog series that walks through real-world pentests we’ve performed in the past.
Kerberoasting Domain Accounts
The Gift That Keeps on Giving Few vulnerabilities in the Windows Active Directory environment have had the long-lasting impact that Service Principal Names (SPN) have. Domain-connected services, such as MSSQL servers, web servers, and more may be connected and issued...
ASREP Roasting & Pre-Authentication in AD Environments
Any Systems Administrator knows that the task of securing an Active Directory environment is a never-ending task. Since the first Windows AD was released with Server 2000, Microsoft has added countless features. Many of these features are created with connectivity in...
Should I Whitelist A Penetration Tester’s IP?
While working out the details with a client for an upcoming security assessment, whitelisting the penetration testers IP addresses always generates additional conversation. It may seem odd because you wouldn’t whitelist your adversaries to bypass a security control,...
Stay Ahead of Cyber Threats
Get expert insights on the latest penetration testing strategies, emerging vulnerabilities, and cybersecurity best practices—straight to your inbox.
Loading form...
We care about your data in our privacy policy.