PenTestIT.com

Your source for Detection Engineering, Security Research and Adversary Simulation

You are here: Home / Home

Vulnerability Management

Microsoft Patch Tuesday March 2026 Exploitability and Patching Priority

This blog is my interpretation of the Microsoft Patch Tuesday March 2026 Exploitability and Patching Priority.

Posted: 7 months ago by 1128 views
Updated: at

This Microsoft Patch Tuesday March 2026 release addressed 93 vulnerabilities across Windows, Office, SQL Server, .NET, and Azure. Interestingly, two CVEs were publicly disclosed pre‑patch CVE‑2026‑21262 (SQL Server EoP) and CVE‑2026‑26127 (.NET DoS). However, unlike last month, no March CVE is confirmed exploited in the wild as of today. What is unusual is the fact that six of Read more about Microsoft Patch Tuesday March 2026 Exploitability and Patching Priority

Offensive Security

List of Open Source C2 Post-Exploitation Frameworks

This is a list of open source C2 post-exploitation frameworks.

Posted: 7 months ago by 1278 views
Updated: at

Restoring this post with the help of the Wayback machine - This post has been lying in my drafts for more than a year with edits all over. But two days ago, it was announced that Powershell Empire would no longer be supported by it’s authors. Hence just like I curated a list of adversary emulation tools, I finalized this list of open source C2 post-exploitation Read more about List of Open Source C2 Post-Exploitation Frameworks

Adversary Emulation

List of Adversary Emulation Tools

This is a list of open source and commercial adversary emulation tools

Posted: 7 months ago by 1239 views
Updated: at

As I went through the logs on this blog, I saw that an old post from 2018 was still being requested for! Thanks to the internet gods, I was able to find a cached copy. Currently, this is a paste of the old adversary emulation post as is. But, I will update it in a few days time. Every once in a while, the security industry brings forth a new buzz word and introduces Read more about List of Adversary Emulation Tools

Detection Engineering

Prioritizing a Threat Detection Backlog

These are a few methods that you can use to prioritize a threat detection backlog

Posted: 8 months ago by 1043 views
Updated: at

Most security teams eventually hit the same problem - the list of “detections to build next” grows faster than the capacity to actually build, test, and maintain them. Inputs from red-team exercises, threat intelligence reports, new CVEs, leadership asks, compliance requirements, and plain hype can drive a perfect prioritization backlog haywire. Without a clear model for Read more about Prioritizing a Threat Detection Backlog