Mobile Device Forensics: Extraction, Decoding, and SQLite Database Analysis
What is the phone number of this phone? The phone number is the same as the Mobile Subscriber Integrated Services Digital Network (MSISDN) number for the SIM card….
Enterprise Cybersecurity & Applied Research – Page 5
Forensic Artifact Analysis Using Autopsy: File System Reconstruction and Timeline Carving
Academic research analysis exploring examine the evidence using autopsy within the context of Cyber Incident Response and Computer Network Forensics….
Digital Forensics: Evidence Acquisition, Chain of Custody, and Volatile Memory Preservation
Why or why not? No, because the data changed, and since hashing algorithms are designed to produce the same value for identical inputs. Any changes to the inputs result in a different hash….
Enterprise Incident Response Plan and RACI Governance Matrix
In 2008, while working at a university, I inadvertently triggered a bulk deletion script in the production environment instead of a test folder, erasing approximately 50% of the student body’s accounts before I could hal…
Software Security Metrics, Technical Debt Quantification, and Program Maturity
Risk assessment in the modern software industry must evolve beyond static checklists to address the dynamic nature of Agile and DevSecOps environments. This plan adopts a scenario-based approach aligned with ISO 27001, b…
Ransomware Simulator: Cryptographic Attack Modeling and Application-Level Defenses
Broadcom. (2016). Alpha Ransomware. Symantec Enterprise. https://www.broadcom.com/support/security-center/protection-bulletin/alpha-ransomware…
Static Application Security Testing (SAST) and Secure Web Application Design
International Information System Security Certification Consortium (ISC2). (n.d.). Cybersecurity certifications and continuing education. https://www.isc2.org…
Threat Modeling and Architectural Risk Analysis: STRIDE and DREAD Applications
Hardening a Windows Server environment requires a structured, multi-layered approach that addresses risks, threats, and vulnerabilities across organizational, architectural, network, identity, software, and auditing doma…
Secure Software Development Life Cycle (SSDLC): Comparative Analysis of Microsoft SDL and Apple Ecosystems
Security cannot be treated as a post-deployment consideration in modern software development. Microsoft’s Security Development Lifecycle (SDL) embeds security requirements, threat modeling, verification, and monitoring i…
Compromised Network Indicators and Secure Application Risk Mitigations
Cybersecurity & Infrastructure Security Agency. (2021). Best practices for securing your home network [CSIA Guide 21-01]. U.S. Department of Homeland Security. https://www.cisa.gov/sites/default/files/publications/CISA_H…