https://blog.midnightshift.dev/NoctuaCyber security learning note. 2026-07-27T09:49:49+07:00 Ariya https://blog.midnightshift.dev/ Jekyll © 2026 Ariya /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Browser Forensics2025-04-24T16:48:26+07:00 2026-07-27T09:49:15+07:00 https://blog.midnightshift.dev/posts/browser-forensics/ Ariya Browser Artifact Common objects that browsers save: Navigation history: user history Autocomplete data: suggest based on most frequently searched keywords Bookmarks: save website URL address Extensions and add-ons: small software module for a specific purpose Cache: photos or javascript files, improve loading time Favicon: small icons in tabs Browser session: store browser inform... Website Policy & Configuration2025-01-13T12:31:00+07:00 2026-07-27T09:49:15+07:00 https://blog.midnightshift.dev/posts/website-policy-configuration/ Ariya Same Origin Policy (SOP) prevent document on one website from interacting with another website Origin: protocol, host, port provides isolation access prevented: cookies, DOM access, AJAX requests exception, where resource sharing is allowed: CORS, proxy server prevent data leakage, reduce malicious script impact Vulnerability: excess permission on CORS (Access-Control-... Threat Modeling2025-01-13T12:11:00+07:00 2025-09-04T06:37:59+07:00 https://blog.midnightshift.dev/posts/threat-modeling/ Ariya What is Threat Modeling? A systematic approach to identifying, assessing, and prioritizing security risks to a system, application, or process. Helps organizations proactively identify potential threats and develop strategies to mitigate them before they occur. A threat model typically includes: Description of the subject to be modeled Assumptions that can be checked or challenged in the ... Cyber Threat Intelligence: Data Science for Security2023-09-13T03:23:32+07:00 2023-09-13T03:23:32+07:00 https://blog.midnightshift.dev/posts/cyber-threat-intelligence-data-science-for-security/ Ariya In this modern age, there is a quote “data is the new gold”. As large amount of information generated and exchanged everyday. Just as gold requires to be processed to unlock its true value, so does data demand analysis to reveal its true value. This is where cyber threat intelligence comes. A discipline field of security that collect, process, and analyze data to understand a threat better and ... Denial of Service2023-07-31T03:42:05+07:00 2023-07-31T03:42:05+07:00 https://blog.midnightshift.dev/posts/denial-of-service/ Ariya Denial of Service Denial of Service (DoS) is a type of cyber attack aimed at disrupting the normal functioning of a target system, network, or service by overwhelming it with an excessive amount of traffic, requests, or data. The primary objective of a DoS attack is to make the target resource unavailable to its legitimate users, causing service interruptions, slowdowns, or complete unavailabi...