Rifat Security Logs

Rifat Security Logs Security observations from real labs, attacks, and failures. Offense • Defense • Thinking in systems

আজকের cyber word: TTPs.TTPs are Tactics, Techniques, and Procedures: what attackers want, how they do it, and their spec...
31/08/2026

আজকের cyber word: TTPs.
TTPs are Tactics, Techniques, and Procedures: what attackers want, how they do it, and their specific methods.
এটা কাজে লাগে যখন a phishing group’s repeated methods become recognizable ttps.
Clear concept ছাড়া tool চালানো মানে blind driving.
TTPs reveal behavior beyond simple indicators.

MITRE ATT&CK নিয়ে যত joke করি, risk কিন্তু real.MITRE ATT&CK is a knowledge base of real-world adversary tactics, techni...
30/08/2026

MITRE ATT&CK নিয়ে যত joke করি, risk কিন্তু real.
MITRE ATT&CK is a knowledge base of real-world adversary tactics, techniques, and procedures.
একটা ছোট example: SOC teams map detections to ATT&CK to understand attacker behavior.
Attacker হাসে যখন defender basics miss করে.
It gives structure to attacker chaos.

এই concept টা beginner থেকে SOC analyst—সবার জানা উচিত: Kill Chain.The Kill Chain models attack stages from reconnaissan...
29/08/2026

এই concept টা beginner থেকে SOC analyst—সবার জানা উচিত: Kill Chain.
The Kill Chain models attack stages from reconnaissance to actions on objectives.
কারণ field এ it helps defenders identify where to detect, disrupt, or contain an attack.
যে আগে বুঝবে, সে আগে protect করবে.
Break any link and the chain fails.

Security team-এর daily life: Exploitation.Exploitation is abusing a vulnerability to execute code, gain access, or bypas...
28/08/2026

Security team-এর daily life: Exploitation.
Exploitation is abusing a vulnerability to execute code, gain access, or bypass controls.
কখনো alert, কখনো misconfig, কখনো user mistake; সব মিলেই case হয়.
Example: A vulnerable server may be exploited through a crafted request.
A bug becomes dangerous when someone can use it.

Delivery মানে cyber-এর ছোট শব্দে বড় গল্প.Delivery is how the malicious content reaches the target.বাস্তবে email attachme...
27/08/2026

Delivery মানে cyber-এর ছোট শব্দে বড় গল্প.
Delivery is how the malicious content reaches the target.
বাস্তবে email attachment, malicious link, usb drive, or exposed web exploit can be delivery paths.
তাই funny meme হলেও takeaway serious.
Delivery is the courier of the attack.

Weaponization নিয়ে confusion থাকলে এইটা মনে রাখেন:Weaponization is preparing the payload, exploit, or lure before delive...
26/08/2026

Weaponization নিয়ে confusion থাকলে এইটা মনে রাখেন:
Weaponization is preparing the payload, exploit, or lure before delivery.
Attackers এই gap-গুলোকেই opportunity বানায়.
A phishing document may be crafted with macros or malicious links.
শেষ কথা: The weapon is built before it is fired.

মিমে হাসবেন, কিন্তু Reconnaissance বুঝে রাখবেন.Reconnaissance is collecting information about a target before attacking....
25/08/2026

মিমে হাসবেন, কিন্তু Reconnaissance বুঝে রাখবেন.
Reconnaissance is collecting information about a target before attacking.
একটা common case: Attackers gather domains, emails, technologies, employees, and exposed services.
SOC/IT/security team তখনই ভালো কাজ করে যখন context clear থাকে.
Good attackers study first; defenders should too.

Impact is not just a term; এটা একটা বাস্তব control/problem.Impact is the damage caused by an attacker, such as encryptio...
24/08/2026

Impact is not just a term; এটা একটা বাস্তব control/problem.
Impact is the damage caused by an attacker, such as encryption, deletion, disruption, or fraud.
Imagine this: Ransomware impact may include downtime, data loss, and business interruption.
যেখানে data, identity, system-সবকিছু ঝুঁকিতে পড়ে.
The final punch is what the business feels.

Cybersecurity শেখার সময় Exfiltration skip করা যাবে না.Exfiltration is stealing data from an environment and sending it o...
23/08/2026

Cybersecurity শেখার সময় Exfiltration skip করা যাবে না.
Exfiltration is stealing data from an environment and sending it out.
কারণ attacker তো syllabus দেখে আসে না.
তারা সুযোগ দেখে—large uploads, unusual cloud transfers, or encrypted outbound traffic can be clues.
Data leaving quietly is still an incident.

Simple ভাষায় Command and Control:Command and Control is the communication channel attackers use to control compromised s...
22/08/2026

Simple ভাষায় Command and Control:
Command and Control is the communication channel attackers use to control compromised systems.
যখন malware may call back to a remote server for instructions.—তখন বুঝবেন বিষয়টা textbook না, real.
একটা ভুল access/control/log অনেক বড় ঝামেলা বানাতে পারে.
C2 is the attacker’s remote-control line.

Address

Dhaka
1217

Website

Alerts

Be the first to know and let us send you an email when Rifat Security Logs posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share

Category