@buzz_chronicles save as screeners

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...

List of companies with more than 50% Market Share:

1) Maruti Suzuki (passenger cars)
2) APL Apollo (structural & pre galvanized tubes)
3) CDSL (investors accounts)
4) Interglobe Aviation (air traffic passengers)
5) GMM Pfaudler (glass lined equipment)

6) Asian Paints (decorative paints)
7) Colgate (oral care)
8) Symphony (coolers)
9) PGHH (female care & vaporub)
10) La Opala Rg (opalware)
11) HLE Glasscoat (filtration & drying equipment)
12) Delta Corp (online poker games)
13) Bajaj Auto (3W segment)
14) Vinati Organics (IBB)

15) OCCL (insoluble sulphur)
16) LMW (textile machinery)
17) Bajaj Consumer (almond hair oil)
18) Indiamart Intermesh (online B2B Classified space)
19) Vst Tillers (power tillers)
20) Sanghvi Movers (overall domestic crane hiring market)
21) Emami (antiseptic & male grooming)

List of companies with more than 60% Market Share:

1) Concor (domestic container cargo transport)
2) Exide (lead batteries)
3) Naukri (Indian job market space)
4) Praj (ethanol plant installing)
5) ACE (mobile & tower cranes)
6) Pidilite (adhesives)
7) Jamna Auto (leaf spring)

8) CAMS (RTA within mutual fund industry)
9) Time Technoplast (polymer based industrial packaging)

THREAD: 15 of the most useful razors and rules I've found.

Rules of thumb that simplify decisions.

Bezos' Razors:

• If unsure what action to take, let your 80-year-old self make it.

• If unsure who to work with, pick the person that has the best chances of breaking you out of a 3rd world prison.

Skinner's Law:

• If procrastinating on an item, you only have 2 options:

1. Make the pain of not doing it greater than the pain of doing it.

2. Make the pleasure of doing it greater than the pleasure of not doing it.

Luck Razor:

• If stuck with 2 equal options, pick the one that feels like it will produce the most luck later down the line.

I used this razor to go for drinks with a stranger rather than watch Netflix.

In hindsight, it was the highest ROI decision I've ever made.

Bragging Razor:

• If someone brags about their success or happiness, assume it’s half what they claim.

• If someone downplays their success or happiness, assume it’s double what they claim.

The map is not the terrain.

SRI LALITHAMBIGAI, THIRUMEYACHUR (TN)
#bharatmandir #navratri2021

Kshetram where Shiva is worshipped as Meghanatha and his consort is Lalithambigai seen in Abhay mudra.
Once, a demon Pandasura was harassing the Devas who went to Devi Parashakti for protection. 
@GunduHuDuGa

Devi rose from a Yaga Gunda, mounted on the Sri Chakra Rath with the name Lalithambika, waged a war against Pandasura and destroyed him.  When her fury did not subside, Shiva asked her to go to Earth, assume the name Manonmani, perform penance and shed her fury.

Shiva blessed Devi to be Shanta nayagi. There is a sculpture here depicting Shiva pacifying Devi. If you observe closely, you can see that from your left hand side there will be a smile on Her face and if you see from your right hand side you can see anger in Her face.

Hayagriva taught the greatness of Lalitha Sahasranama to Rishi Agasthya. Pleased with his devotion, Ma Lalithambikai appeared before Agastya. He is believed to have then sung Lalita Navaratnamala in praise of Devi. He has also composed a hymn named Rahasyanamasahasram.