Swakriya

just DIY

[Aircorridor @_aircorridor]

Investigating Google Accounts with Ghunt

Gather custom profile pictures, activated Google services, and where a person has been moving according to Google Maps.
https://t.co/9PaqUpQOAY

[𝐇𝐚𝐦𝐳𝐚 | Networking Guy @Hamzaonchain]

SOC Analyst Tools and Their Purpose

1. Splunk → Security log analysis and threat detection

2. Microsoft Sentinel → Cloud SIEM and incident investigation

3. Wazuh → Open-source SIEM and endpoint monitoring

4. Wireshark → Network packet analysis

5. Nmap → Network discovery and scanning

6. CrowdStrike Falcon → Endpoint threat detection and response

7. VirusTotal → Analyze suspicious files, URLs, and IPs

8. TheHive → Manage security incidents and cases

9. YARA → Detect malware patterns

10. Volatility → Memory forensics

11. Burp Suite → Web application security testing

12. Zeek → Network security monitoring

13. MITRE ATT&CK → Map attacker techniques and tactics

14. Shodan → Discover exposed internet devices

15. Kali Linux → Security testing environment

[Shubham Sharma @Shubham_pen]

Basic N/w Commands
#cybersecurity #cybersecurityawareness #infosec #SOC #Networks #Linux #cheatsheet

[Hacking Articles @hackinarticles]

FISMA Mindmap 📊🔥

🔥 Telegram: https://t.co/upuP8k8ckB
✴ Twitter: https://t.co/Za7rYILz6E

FISMA (Federal Information Security Management Act) focuses on securing information systems, managing risk, and ensuring compliance through structured security controls and continuous monitoring. It provides a standardized approach for protecting sensitive data in organizations. ()

📚 Topics Covered in the Mindmap

🧠 Inventory & Asset Management
📊 System Categorization (Low / Moderate / High)
📂 System Security Plan (SSP)
🛠️ NIST 800-53 Security Controls
🔎 Risk Assessment
⚙️ Security Control Implementation
📡 Continuous Monitoring
🚨 Assessment & Authorization (ATO)

🧠 Mindmap:
https://t.co/IwItsaEcYI

#CyberSecurity #FISMA #RiskManagement #Compliance #InfoSec #Governance

[TheCyberPatronNetwork © @TheCyberPatron_]

How to implement a Zero Trust Security on Platforms

[picoez @picoez]

Ada nggak sih website atau aplikasi apaan gitu yang bisa mbikinin powerpoint yang cakep dengan kita hanya memasukkan teks dan data2?

Please.

Aku mau bikin powerpoint kok mager banget :(

[Alex Xu @alexxubyte]

Monolithic vs Microservices vs Serverless

[Raul Junco @RaulJuncoV]

35 practical thoughts on system design

Core Principles

1. Every system is a trade-off -> you never get speed, cost, and simplicity all at once.
2. Latency compounds -> every millisecond added across layers adds up to user pain.
3. Scalability ≠ performance -> one handles growth, the other handles speed.
4. Read vs. write paths -> scaling each requires completely different strategies.
5. Design for change, not perfection -> requirements will shift.

Databases & Storage

6. Indexes are levers -> high-selectivity columns are worth indexing, low ones often aren’t.
7. Replication helps reads, partitioning helps writes -> don’t confuse the two.
8. Dual writes are a lie -> without coordination, you will see drift.
9. Event stores > queues (sometimes) -> better traceability, worse simplicity.
10. Cache invalidation is still the hardest problem -> freshness vs. performance is the eternal fight.

Reliability & Consistency

11. Idempotency saves you -> retries without it will hurt.
12. Fail fast, fail loud -> silent failures sink systems.
13. Eventual consistency is a feature -> not a bug, but only if the business allows it.
14. Conflict resolution in active-active is business logic, not infra.
15. Durability isn’t free -> syncing across regions has cost and latency.

Architecture Patterns

16. Microservices are an org structure, not a tech goal.
17. Monolith first, modular second, microservices last -> don’t jump too early.
18. Choreography scales, orchestration simplifies -> pick based on team maturity.
19. Serverless buys you focus, costs you control.
20. Queues don’t remove work, they smooth it.

Observability & Operations

21. Tracing > logging -> logs tell you “what”, traces tell you “why”.
22. Metrics rot without ownership -> measure what someone actually uses.
23. Retries without backoff = DDoS on yourself.
24. Dead-letter queues aren’t optional -> every system has poison messages.
25. Levers > knobs -> design quick kill switches and controls to contain blast radius.

Performance & Cost

26. Optimize the hot path, not the cold path.
27. Most bottlenecks live in the database, not the code.
28. Horizontal scaling beats vertical scaling ->until coordination kills it.
29. Warm caches mask bad queries -> measure against cold starts too.
30. The cheapest resource is disk, the most expensive is time.

People & Process

31. The best architecture dies without documentation.
32. System design reviews aren’t about diagrams, they’re about trade-offs.
33. Small PRs are for speed, big PRs are for context -> balance both.
34. A senior engineer’s role in design is asking the uncomfortable “what if”.
35. No design survives first contact with production -> but good ones bend instead of break.

What else?

[Neo Kim @systemdesignone]

33 posts that'll teach you 33 system design concepts:

1 Idempotent API
↳ https://t.co/afe7ACuSYE

2 Saga Design Pattern
↳ https://t.co/2CffTodOHL

3 Redis Use Cases
↳ https://t.co/hZ571ruVeA

4 Actor Model
↳ https://t.co/Xj4dpBKuBv

5 Quotient Filter 101
↳ https://t.co/ISVmY29PWc

6 How Databases Keep Passwords Securely
↳ https://t.co/KSfIhpAT2j

7 How to Scale an App to 10 Million Users on AWS
↳ https://t.co/RozCGli0r8

8 How JWT Works
↳ https://t.co/SZXXrlBsWH

9 Cybersecurity 101
↳ https://t.co/t7X3mJb5Bm

10 Consistent Hashing 101
↳ https://t.co/7d6EipPcKF

11 Service Discovery 101
↳ https://t.co/BcL3tgxx1u

12 Monolith vs Microservices
↳ https://t.co/KwVAEGVkA9

13 Microservices Lessons From Netflix
↳ https://t.co/XgS7VQoBFv

13 Web Request Path Explained
↳ https://t.co/P3SiURMFlW

14 Caching Patterns
↳ https://t.co/JhviWosR1L

15 Modular Monolith Architecture
↳ https://t.co/VVV6v3KGHJ

16 How Websockets Work
↳ https://t.co/JfT6mj4mrv

17 Bloom Filters 101
↳ https://t.co/ntZXq7LxVn

18 Capacity Planning 101
↳ https://t.co/umTNhM2dVY

19 How API Gateway Works
↳ https://t.co/sJZZN0qgNG

20 Deployment Patterns
↳ https://t.co/YC7sphP77c

21 Concurrency Is Not Parallelism
↳ https://t.co/BwRHeuJ5AF

22 How Do Webhooks Work
↳ https://t.co/sTCTaFD5Nv

23 Frontend System Design 101
↳ https://t.co/ViPOQrLZzA

24 How Does HTTPS Work
↳ https://t.co/r5rUtVpw0O

25 API Design Best Practices
↳ https://t.co/I2ejJ0kbYq

26 How DNS Works
↳ https://t.co/H7hcZnws8N

27 System Design Concepts
↳ https://t.co/DgL8xz0KTQ

28 API Versioning - A Deep Dive
↳ https://t.co/OHAtKSUgVN

29 System Design Fundamentals
↳ https://t.co/Jqfyh7YfZn

30 How RPC Actually Works
↳ https://t.co/yeIgcmAxQx

31 How Message Queues Work
↳ https://t.co/bZjdqs8Py2

32 Distributed Systems 101
↳ https://t.co/yi0K5K5RIE

33 System Design Core Concepts
↳ https://t.co/8ZlHtl7vxU

What else should make this list?

===

👋 PS - Want my System Design Playbook for FREE?

Join my newsletter with 200K+ software engineers now:

→ https://t.co/ByOFTtOihX

===

💾 Save this for later & RT to help others learn system design.

👤 Follow @systemdesignone + turn on notifications.

[Dhanian 🗯️ @e_opore]

If I had to start with backend engineering, I'd learn these concepts:

1. HTTP/HTTPS

2. TCP/IP

3. DNS

4. REST APIs

5. GraphQL

6. gRPC

7. API Design

8. CRUD Operations

9. Authentication

10. Authorization

11. Sessions & Cookies

12. JWT

13. OAuth

14. WebSockets

15. Server-Sent Events

16. Middleware

17. MVC Architecture

18. Layered Architecture

19. Clean Architecture

20. Microservices

21. Monolith

22. Serverless

23. Load Balancing

24. Reverse Proxy

25. Nginx

26. Caching

27. Redis

28. Memcached

29. Database Design

30. SQL

31. NoSQL

32. Indexing

33. Query Optimization

34. Transactions

35. ACID

36. CAP Theorem

37. Replication

38. Sharding

39. Connection Pooling

40. ORM

41. Data Validation

42. Serialization

43. Deserialization

44. Message Queues

45. Pub/Sub

46. Event-Driven Architecture

47. Background Jobs

48. Cron Jobs

49. Rate Limiting

50. Throttling

51. API Gateway

52. Service Discovery

53. Circuit Breaker

54. Retry Logic

55. Timeout

56. Fault Tolerance

57. Logging

58. Monitoring

59. Metrics

60. Tracing

61. Observability

62. Error Handling

63. Debugging

64. Testing

65. Unit Testing

66. Integration Testing

67. End-to-End Testing

68. CI/CD

69. Docker

70. Kubernetes

71. Containerization

72. Deployment Strategies

73. Blue-Green Deployment

74. Canary Releases

75. Feature Flags

76. Secrets Management

77. Environment Variables

78. Encryption

79. HTTPS/TLS

80. Security Best Practices

81. OWASP Top 10

82. Input Sanitization

83. CSRF

84. CORS

85. XSS

86. Data Compression

87. File Upload Handling

88. Streaming

89. CDN Integration

90. Storage Systems

91. Object Storage

92. Data Pipelines

93. ETL

94. Batch Processing

95. Stream Processing

96. Scalability

97. High Availability

98. Performance Optimization

(...and more concepts)

===

👋 PS - Want a detailed breakdown of each concept?

Read right now:

→ Get the Backend Engineering Ebook
Link: https://t.co/GuPlsGm9YF

===

💾 Save this for later & RT to help others learn backend engineering.

👤 Follow @e_opore + turn on notifications.

[Hacking Articles @hackinarticles]

Active Directory Attack Architecture Map

https://t.co/HV2qvqd2Jj

#CyberSecurity #InfoSec #PenetrationTesting #EthicalHacking #BugBounty #ThreatIntelligence #RedTeam #BlueTeam #CloudSecurity #DataSecurity #CyberSecurityAwareness #AI

[Damilola Ashiedu | Pretty Cyber Girl 💻💡 @prettycyb3rgirl]

INCIDENT RESPONSE & FORENSICS

31. Digital Forensics Essentials - EC-Council
https://t.co/U4fMF1GITA
32. Incident Response & Advanced Forensics - SANS
https://t.co/93h5xlPDNv
33. Computer Forensics - Cybrary
https://t.co/emPtxe44TW
34. Cyber Incident Response - Coursera
https://t.co/c1iXPNy707
35. Introduction to Digital Forensics - Open Learn
https://t.co/lAGfYeCs2c
36. NIST Cybersecurity Framework - Coursera
https://t.co/KIz1LTClCD

COMPLIANCE & GOVERNANCE

37. GDPR Compliance - University of Groningen
https://t.co/jnm8gbBcYp
38. IT Risk Management - Cybrary
https://t.co/fZDi8pYIla
39. ISO 27001 Information Security - Udemy (Free)
https://t.co/h6mvOxdEEB
40. Cybersecurity Compliance Framework & System Administration - IBM
https://t.co/rPLKeOLRPQ
41. Risk Management Framework - FedVTE
https://t.co/zg7h2XzjDO
42. Security Governance & Compliance - Cybrary
https://t.co/5a4H7s0E6A

THREAT INTELLIGENCE & MALWARE

43. Cyber Threat Intelligence - SANS
https://t.co/93h5xlPDNv
44. Malware Analysis - Cybrary
https://t.co/6CIydVAVDT
45. Reverse Engineering 101 - Malware Unicorn
https://t.co/IweTdWyYwY
46. Threat Hunting - Active Countermeasures
https://t.co/P4BWXOzH1b
47. Intro to Malware Analysis - OpenSecurityTraining
https://t.co/tAvZTAVK6m
48. Advanced Threat Hunting - Cybrary
https://t.co/aSfSOq5fAu

SPECIALIZED TOPICS

49. IoT Security - Coursera
https://t.co/iKkgcBMD6c
50. Mobile Device Security - FutureLearn
https://t.co/d212rA0gKH

[Damilola Ashiedu | Pretty Cyber Girl 💻💡 @prettycyb3rgirl]

50 Cybersecurity Courses (Most are FREE with Certifications)

BEGINNER FRIENDLY

1. Google Cybersecurity Certificate
https://t.co/vpyLSJl0TP
2. Introduction to Cyber Security - FutureLearn
https://t.co/Hj7cP3xUuk
3. Cybersecurity Essentials - Cisco
https://t.co/KKRadQeNqh
4. Introduction to IT & Cybersecurity - Coursera
https://t.co/zH2XHZNpsc
5. Cyber Security Fundamentals - IBM (edX)
https://t.co/EMR5CzAbG4
6. IT Security: Defense against Digital Dark Arts - Google
https://t.co/UDW6qxL7YK

NETWORK SECURITY

7. Introduction to Network Security - NYU (Coursera)
https://t.co/VQkAilc5yZ
8. Network Security & Database Vulnerabilities - IBM
https://t.co/6M6sZXjpsj
9. Wireshark for Beginners - Udemy (Free)
https://t.co/pFNoGUe3di
10. Networking Basics - Cisco
https://t.co/Y1dpOnXJZX
11. Network Defense Essentials - EC-Council (iClass)
https://t.co/Mar7zL4Fdu
12. Network Security - Georgia Tech (Udacity)
https://t.co/eHNJWpil6U

WEB SECURITY & ETHICAL HACKING

13. Web Security Fundamentals - Google (Free)
https://t.co/aIWS3Xl9y8
14. Ethical Hacking Essentials - EC-Council
https://t.co/6IQ6KZqmGv
15. Penetration Testing - Cybrary
https://t.co/dZ0P3wYEZS
16. Web Application Security - Stanford (YouTube)
https://t.co/xh9jaNzrtN
17. Intro to Ethical Hacking - SANS Cyber Aces
https://t.co/YZbs6Six6Z
18. Bug Bounty Hunter Path - Bugcrowd University
https://t.co/9OID5fBlUs

CRYPTOGRAPHY & SECURE CODING

19. Cryptography I - Stanford (Coursera)
https://t.co/owUklN3ErA
20. Applied Cryptography - Udacity
https://t.co/FNAlDJAk98
21. Secure Coding Practices - OpenSecurityTraining
https://t.co/tLqZ7l0GJ1
22. Introduction to Applied Cryptography - University of London
https://t.co/owUklN3ErA
23. Software Security - University of Maryland
https://t.co/CnfY5kBlpP
24. Secure Software Development - Linux Foundation (edX)
https://t.co/obtIt2kxfQ

CLOUD & MODERN INFRASTRUCTURE

25. AWS Cloud Security Fundamentals
https://t.co/LHVp7iBwm8
26. Microsoft Azure Security Technologies - MS Learn
https://t.co/dzRE6n4vVa
27. Google Cloud Security - Coursera
https://t.co/oVTPjhaxPo
28. Cloud Security Fundamentals - IBM
https://t.co/iCmgyE16YA
29. Kubernetes Security Essentials - Linux Foundation
https://t.co/eZFjZpWfFI
30. Docker Security - Udemy (Free)
https://t.co/ZMHjgH6OC8

BONUS: CompTIA Security+ Full Course - YouTube (15hrs)
https://t.co/Q9r31nYT0B

[Damilola Ashiedu | Pretty Cyber Girl 💻💡 @prettycyb3rgirl]

📂 Cybersecurity Stack

┃
┣ 📂 Foundations
┃ ┣ 📂 Networking (TCP/IP, DNS, HTTP/S)
┃ ┣ 📂 Linux & Windows Internals
┃ ┣ 📂 OSI Model
┃ ┣ 📂 Cryptography Basics
┃ ┗ 📂 Security Principles (CIA Triad)
┃
┣ 📂 Security Operations (SOC)
┃ ┣ 📂 SIEM (Splunk, ELK)
┃ ┣ 📂 EDR/XDR
┃ ┣ 📂 Log Analysis
┃ ┣ 📂 Alert Triage
┃ ┗ 📂 Incident Response
┃
┣ 📂 Threat Intelligence
┃ ┣ 📂 OSINT
┃ ┣ 📂 Threat Feeds
┃ ┣ 📂 MITRE ATT&CK
┃ ┣ 📂 Cyber Kill Chain
┃ ┗ 📂 Threat Hunting
┃
┣ 📂 Vulnerability Management
┃ ┣ 📂 Vulnerability Scanning
┃ ┣ 📂 Risk Assessment
┃ ┣ 📂 CVE Analysis
┃ ┣ 📂 Patch Management
┃ ┗ 📂 Reporting
┃
┣ 📂 Web & API Security
┃ ┣ 📂 OWASP Top 10
┃ ┣ 📂 OWASP API Top 10
┃ ┣ 📂 Authentication & Authorization
┃ ┣ 📂 Session Management
┃ ┗ 📂 Input Validation
┃
┣ 📂 Penetration Testing
┃ ┣ 📂 Reconnaissance
┃ ┣ 📂 Scanning
┃ ┣ 📂 Exploitation
┃ ┣ 📂 Post-Exploitation
┃ ┗ 📂 Reporting
┃
┣ 📂 Cloud Security
┃ ┣ 📂 AWS / Azure / GCP
┃ ┣ 📂 IAM
┃ ┣ 📂 Cloud Misconfigurations
┃ ┣ 📂 Logging & Monitoring
┃ ┗ 📂 Container Security
┃
┣ 📂 DevSecOps
┃ ┣ 📂 CI/CD Security
┃ ┣ 📂 SAST
┃ ┣ 📂 DAST
┃ ┣ 📂 SCA
┃ ┗ 📂 Secrets Management
┃
┣ 📂 Digital Forensics
┃ ┣ 📂 Disk Analysis
┃ ┣ 📂 Memory Forensics
┃ ┣ 📂 Log Investigation
┃ ┣ 📂 Evidence Handling
┃ ┗ 📂 Reporting
┃
┣ 📂 Governance, Risk & Compliance (GRC)
┃ ┣ 📂 ISO 27001
┃ ┣ 📂 PCI-DSS
┃ ┣ 📂 Risk Management
┃ ┣ 📂 Policies & Standards
┃ ┗ 📂 Auditing
┃
┣ 📂 Security Tools
┃ ┣ 📂 Burp Suite
┃ ┣ 📂 Nmap
┃ ┣ 📂 Wireshark
┃ ┣ 📂 Metasploit
┃ ┗ 📂 OWASP ZAP
┃
┗ 📂 AI Security
┣ 📂 Prompt Injection
┣ 📂 Model Security
┣ 📂 Data Leakage
┣ 📂 LLM Threats
┗ 📂 AI Risk Assessment

What do you think is missing? 🔁 & ❤️

[Uday👨‍💻 @uday_devops]

🚀 𝗙𝗿𝗲𝗲 Microsoft 𝗔𝘇𝘂𝗿𝗲 𝗟𝗮𝗯𝘀 & 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗲 𝗥𝗲𝘀𝗼𝘂𝗿𝗰𝗲𝘀 - 𝗠𝘂𝘀𝘁 𝗦𝗮𝘃𝗲!

If you’re preparing for 𝗔𝘇𝘂𝗿𝗲 𝗰𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀 or want hands-on cloud experience, this resource is absolute gold 💎

Whether you’re targeting 𝗔𝗭-𝟭𝟬𝟰, 𝗔𝗭-𝟯𝟬𝟱, 𝗔𝗭-𝟰𝟬𝟬, 𝗦𝗖-𝟯𝟬𝟬, 𝗔𝗭-𝟱𝟬𝟬 or hybrid tracks - this is worth bookmarking 📌

From Security, Admin, Networking, Architecture to DevOps & Hybrid services, everything is mapped clearly with free labs aligned to real exam paths.

✅ 𝗖𝗲𝗿𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻-𝗳𝗼𝗰𝘂𝘀𝗲𝗱 𝗹𝗮𝗯𝘀
✅ 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹, 𝗵𝗮𝗻𝗱𝘀-𝗼𝗻 𝗹𝗲𝗮𝗿𝗻𝗶𝗻𝗴
✅ 𝗖𝗼𝘃𝗲𝗿𝘀 𝗯𝗲𝗴𝗶𝗻𝗻𝗲𝗿 -> 𝗮𝗱𝘃𝗮𝗻𝗰𝗲𝗱 𝗔𝘇𝘂𝗿𝗲 𝗿𝗼𝗹𝗲𝘀
✅ 𝗣𝗲𝗿𝗳𝗲𝗰𝘁 𝗳𝗼𝗿 𝘀𝗲𝗹𝗳-𝘀𝘁𝘂𝗱𝘆 & 𝘂𝗽𝘀𝗸𝗶𝗹𝗹𝗶𝗻𝗴

[Vivo @vivoplt]

- Claude = coding. ($20/mo)
- Supabase = backend. (Free)
- Vercel = deploying. (Free)
- Namecheap = domain. ($12/yr)
- Stripe = payments. (2.9%/transaction)
- GitHub = version control. (Free)
- Resend = emails. (Free)
- Clerk = auth. (Free)
- Cloudflare = DNS. (Free)
- PostHog = analytics. (Free)
- Sentry = error tracking. (Free)
- Upstash = Redis. (Free)
- Pinecone = vector DB. (Free)

Total monthly cost to run a startup: ~$20

There has never been a cheaper time to build.

[Piyush @piyush784066]

Learn Coding by playing games 🎮

1. Kubernetes
https://t.co/9wwQHkWeHY

2. DevOps
https://t.co/eOvkYf672T

3. Linux
https://t.co/U6IVaXgVJL

4. Git
https://t.co/FrAYkJ4ODK

5. Python
https://t.co/N7DOFo546b

6. CSS & HTML
https://t.co/T5s0pEXy4e

7. Cybersecurity
https://t.co/XKeznMeNLT

8. Mobile Coding (like Duolingo)
https://t.co/yR63k5vGL7

9. For Complete Beginners
https://t.co/AsJ04RJwGH

10. 25+ Programming Languages
https://t.co/NlJ6hXI464

[OccupytheWeb @three_cube]

Every OSINT investigator needs the right operating system!

Is Tsurugi Linux the best OS for open source intelligence investigations?

In this article, we break it down from the hacker perspective:

https://t.co/ZQWTFJNdSE