Featured Cyber Security Services
Digital Forensics and Incident Response
The key to mitigating the impact of any cybersecurity incident is the reaction time between detection and response.
Many organisations lack the resources needed to react in a quick and secure manner. We provide your organisation with the resilience and expertise you need in a crisis to contain and identify the threat so you can become business operational again with minimum disruption and damage.
Virtual CISO Services
Are you finding it challenging to recruit a full time cyber security expert?
It's hard to find and keep good security professionals and many growing businesses can't justify the expense of hiring a full time CISO.
Cyooda Security can provide an on demand cyber security expert on a medium to long term, part time basis, at a fraction of the cost of employing a full time CISO.
Ransomware Resilience
Is your organisation prepared for a ransomware attack?
Our ransomware resilience tip sheet provides practical guidance on the things you should be focusing on now to protect your organisation from ransomware attacks.
Cyber Security How To's
How to build a successful cybersecurity program
By John Reeman |
In this video I will be taking you through a cybersecurity framework that I have developed and perfected over the last 25 years to help organisations build strong cybersecurity programs, reduce risk and remain safe. Ready to find out more? Book in a Call
Read More 
Data Security and Privacy: Time to act is now!
By John Reeman |
With the latest Data Privacy law reforms on the horizon and having just finished off Privacy Awareness Week, #PAW2024, in Australia this article is aimed at all organisations that hold sensitive data. Data breaches are nasty, and they impact everyone involved. Australia has seen some of the largest data breaches over the last 18 months.…
Read More 
To be or not to be a CISO
By John Reeman |
Do you aspire to be a CISO? As a former CISO, I felt compelled to write this article after seeing many articles about the role of a CISO and opinions on how hard it is becoming. I’m uncertain whether many people today would actually aspire to be a CISO given the pressures, the demands of…
Read More 
How To: Email Phishing, malicious payload analysis walkthrough
By John Reeman |
The other day I received a malicious phishing email with what appeared to be an invoice but in fact was a javascript embedded in an HTML document. So let’s get into it. Initial Inspection When I initially opened the document in my visual code editor it appeared as follows: The second line declares a variable…
Read More 
CyberChef : how to decode your data the easy way
By John Reeman |
Intro If you haven’t heard of CyberChef you may be thinking that it is a new robot being created to compete on the next series of “My Kitchen Rules” or go head to head with Gordon Ramsay on “Kitchen Nightmares”! Actually CyberChef or at least the one I’m referring to is actually a really cool…
Read More 
How to measure the success of your cybersecurity program
By John Reeman |
Being asked to present to the board and other key stakeholders in your business about the state of your cybersecurity program can be a daunting prospect. Putting aside the technical jargon can also be challenging for even the most seasoned security professional.
Read More 
Ransomware Resilience: How to prepare and respond in a crisis
By John Reeman |
Are you prepared for a ransomware attack? What should you do if you become a victim? This guide provides some practical advice you need to know & do to survive.
Read More 
Time altering techniques to evade your security controls
By John Reeman |
In this article I’ll be talking about ‘Time Travel’ and sadly it’s not an episode of ‘Dr Who’ or ‘Back to the Future’ and not really ‘Time Travel’ but I needed a catchy title! So what I am referring to is how hackers often change the system time of a particular system they are exploiting…
Read More 
Endpoint Security Part 5: How to setup an automated isolation workflow when malware is detected
By John Reeman |
In this continuing series on endpoint security protections I’ll be showing you how to fully automate host isolation using ‘Tines’ and ‘Elastic’. This article assumes you are familiar with using Elastic SIEM and have some exposure to Tines. Tines is a smart automation workflow solution that I came across last year. What I like about…
Read More 
Endpoint Security Part 4: How to create a playbook to isolate a machine and alert your SOC team
By John Reeman |
Overview In this fourth article of a 5 part series on ‘Endpoint Security’ I’m going to be showing you how to create a rule in your Elastic SIEM to generate an alert and isolate a host if the presence of malware is detected. Step One – Create the detection rule In your Kibana console select:…
Read More 
Endpoint Security Part 3: How to correlate threat intelligence
By John Reeman |
Overview In this third article of a 5 part series on ‘Endpoint Security’ I’m going to be showing you how you can incorporate ‘Threat Intelligence’ into your security operations strategy. There has been a lot written about threat intelligence over the last decade and it has different meanings to people depending on what industry you…
Read More 
Endpoint Security Part 2: Enriching your security event data
By John Reeman |
In this second part series on ‘Endpoint Security’ I’m going to delve into how you can enrich your security event data to provide further context to assist your security analysts when investigating incidents. In this example we will lead off where we ended from ‘Endpoint Security Part 1’ and so if you were following the…
Read More 
Why you need Azure Conditional Access Policies
By John Reeman |
Overview Having undertaken a number of Red Team assessments over the last 5 years, one of the common things that is uncovered during these assessments is the lack of robust Microsoft Azure AD conditional access policies. Microsoft Azure AD Conditional access is a premium feature and disabled by default. To enable it you need a…
Read More 
Keeping your service provider honest!
By John Reeman |
We all expect our service providers to do the right thing, abide by contractural terms, provide support when they are meant to and be available when in need. However, sometimes that doesn’t always happen and so how do you keep your provider on the hook if things do go awry? In this example…
Read More 
Export your passwords from LastPass
By John Reeman |
Unless you have been living under a rock for the last few months you will know that LastPass has suffered a major breach. If like me you feel you can no longer trust LastPass to safeguard your crown jewels then this article explains how to: Export your passwords from LastPass Delete and permanently erase all…
Read More Newsletter Archive
Recent Posts
Lvl 17, Angel Place,
123 Pitt Street,
Sydney
NSW 2000
(02) 7230 1350