PKI Threat Detection and Recon: Code Signing – “The Signed Back Door” Webinar
Below are the key highlights, Q&A from our PKI Solutions “Office Hours”: The PKI Threat Detection and Recon: Code Signing Episode https://www.pkisolutions.com/wp-content/uploads/2024/01/PKI-Threat-Detection-and-Recon-Code-Signing-The-Signed-Back-Door-Voldemort-12.13.22b-1.mp4 While our focus was on default check boxes and PKI misconfigurations, which can give adversaries access to a code signing certificate or they can just create their own, we touched on may topics. […]
SCEP and NDES, A Brief History
SCEP vs. NDES. What are they and how are they related? Simple Certificate Enrollment Protocol (SCEP) and is designated as RFC 8894 is an enrollment method to allow a device to generate a certificate request and automatically submit it to a CA. It can also support certificate revocation and CRL lookups. SCEP was originally designed […]
You cannot submit a certificate request generated by Exchange Management Console (EMC) or Exchange Management Shell (EMS) to CA
As part of joining PKI Solutions, several blog posts from my old site are re-posted here for visibility and thoroughness. You create certificate certificate by using either Exchange Management Console (EMC) or Exchange Management Shell (EMS) and save it to a file. When you attempt to submit certificate request to a Windows-based Certification Authority (CA) […]
How to create Certificate Trust List (CTL) using PowerShell
In this post, I will explain how to create custom certificate trust list (CTL) using PowerShell PKI (PSPKI) module. What is CTL? In short, CTL is a Microsoft open format of portable certificate container based on PKCS#7 format. Although, PKCS#7 already is a simple container for certificate, CTL provides several useful features: Name each list […]
RPKI – The most important Internet security component you never heard of.
What do AWS, Radware, Nintendo, Google, and Facebook all have in common (other than being some of the smartest actors in internet commerce)? Over the past 18 months, they have all been impacted by outages traceable to the Border Gateway Protocol (BGP). The BGP was designed in 1994, literally on a napkin, to route data […]
PKI Threat Detection and Recon: Code Signing – “The Signed Back Door” & Voldemort
Join us for an hour of Live Q&A at our PKI Solutions “Office Hours.” – The PKI Threat Detection and Recon: Code Signing – “The Signed Back Door” & Voldemort Episode https://www.pkisolutions.com/wp-content/uploads/PKI-Threat-Detection-and-Recon-Code-Signing-The-Signed-Back-Door-Voldemort-12.13.22b-1.mp4 A default check box or a PKI misconfiguration can give adversaries access to a code signing certificate or they can just create their […]
PKI Spotlight Latest Release
PKI Spotlight’s Latest Release Introduces New Features To Help IT Teams Solve Their Greatest PKI Challenge It’s another exciting day at PKI Solutions as we introduce our latest updated release of PKI Spotlight, the industry’s first and only real-time PKI monitoring and alerting solution. This latest release of PKI Spotlight introduces new capabilities including […]
PKI Spotlight’s Threat Detection Features Allow IT Teams to Quickly Spot Abnormal Actions in Their Organization’s PKI Environments
Unfortunately, in today’s business environment, organizations everywhere are concerned about cyberattacks and need to be vigilant about threat detection. That’s why we incorporated threat detection as a key pillar of PKI Spotlight, our new product which is the industry’s first and only real-time PKI monitoring and alerting solution. PKI Spotlight’s threat detection focuses on spotting […]