Talk to a Strategist

612-656-4162

Get Started

Stay informed with expert insights from IT Audit Labs.

Blog

Our blog explores the latest in cybersecurity, compliance, and risk management, breaking down complex topics into actionable guidance. Whether you’re an IT leader, security professional, or business decision-maker, you’ll find timely updates, in-depth analysis, and practical tips to help you stay ahead of emerging threats and evolving industry standards.

Our Services

Exploring the Dark Web: What It Is, How It Works, and Why It Matters

Beneath the Surface and Deep Web lies the Dark Web—a realm of .onion sites reachable only via Tor or I2P. While it hosts illicit marketplaces trafficking drugs, stolen data, and malware, it also powers secure journalism (SecureDrop), censorship‑bypassing, and privacy‑focused services like ProtonMail. Navigating it safely means using official Tor Browser downloads, reputable VPNs, and “live” operating systems like Tails to avoid leaving any trace.

Read More »
Eric Brown March 17, 2023

Back to Basics: A Grounded Approach to Cybersecurity

You can’t secure what you can’t see. With hybrid workforces and multi‑cloud footprints, every device from home routers to AWS instances counts as ‘on your network.’ Starting with free tools like Nmap—using simple nmap -sn 192.168.1.0/24 discovery scans and nmap -sV service enumerations—lets even small teams build a reliable device inventory and spot rogue hardware before attackers do.

Read More »
IT Audit Labs February 23, 2023

Password Problems Part 3: Device Implants & Breaches

Discover how modern threat actors use device implants, SMB share enumeration, Responder poisoning, Kerberoasting, and memory scraping to harvest credentials. Learn about zero trust strategies, password managers, and endpoint controls to defend against network breaches and password hash attacks.

Read More »
IT Audit Labs December 15, 2022

Password Problems Part 2: Phishing & Social Engineering

Learn how 2025’s top social engineering attacks—phishing, smishing, and vishing—bypass MFA and zero trust. Discover best practices for hybrid work security, including phishing simulations, layered authentication, and AI‑driven email filters to stop credential harvesting before it starts.

Read More »
IT Audit Labs December 8, 2022

Password Problems Part 1: Structural Challenges

Explore the explosion of passwords in hybrid work, the risks of password reuse and complexity, and modern defenses like passwordless login, zero trust, and adaptive authentication. Learn how enterprises can move beyond sticky notes and spreadsheets to secure vaults and FIDO2 keys in 2025.

Read More »
IT Audit Labs October 17, 2022

Join Our Live Podcast | FRIDAY @ 2pm CT

LinkedInYouTube