Blog Data Security

Varonis Seven Part Guide to Penetration Testing

Our sprawling pen-testing series has taken on a life of its own!  For your convenience and blog reading pleasure, we’ve assembled all the links to this six seven part series below....
Michael Buckbee
1 min read
Last updated October 14, 2022

Contents

    Our sprawling pen-testing series has taken on a life of its own!  For your convenience and blog reading pleasure, we’ve assembled all the links to this six seven part series below.

    Read consecutively, or since they’re mostly self-contained posts, skip ahead to the topics that appeal to you.

    Part 1: Risky Business

    Part 2: Rats!

    Part 3: Rats & Reverse Shells

    Part 4: Making a Lateral Move

    Part 5: Hash Dumping & Cracking

    Part 6: Passing the Hash

    Part 7: Exfiltration and Conclusions

    By the way, if you just want a list of good pen testing tools for newbies, check out this post.

     

    What should I do now?

    Below are three ways you can continue your journey to reduce data risk at your company:

    1

    Schedule a demo with us to see Varonis in action. We'll personalize the session to your org's data security needs and answer any questions.

    2

    See a sample of our Data Risk Assessment and learn the risks that could be lingering in your environment. Varonis' DRA is completely free and offers a clear path to automated remediation.

    3

    Follow us on LinkedIn, YouTube, and X (Twitter) for bite-sized insights on all things data security, including DSPM, threat detection, AI security, and more.

    Michael Buckbee
    Michael Buckbee Michael has worked as a sysadmin and software developer for Silicon Valley startups, the US Navy, and everything in between.

    Try Varonis free.

    Get a detailed data risk report based on your company’s data.
    Deploys in minutes.
    Get started View sample

    Keep reading

    Varonis tackles hundreds of use cases, making it the ultimate platform to stop data breaches and ensure compliance.

    from-snowden-to-signalgate:-what-we-still-haven’t-fixed-in-cybersecurity
    From Snowden to Signalgate: What We Still Haven’t Fixed in Cybersecurity
    from-snowden-to-signalgate:-what-we-still-haven’t-fixed-in-cybersecurity
    Daniela Lulli
    July 14, 2025
    Explore major data breaches, their common thread, and practical solutions for data-centric security.
    varonis-incident-response:-preventing-pii-exposure-in-box 
    Varonis Incident Response: Preventing PII Exposure in Box 
    varonis-incident-response:-preventing-pii-exposure-in-box 
    Brian Walsh
    July 10, 2025
    Learn how the Varonis Incident Response team prevented PII from being compromised, and what this means for data in cloud collaboration platforms like Box.
    how-to-prepare-for-major-shift-in-chatgpt-enterprise-data-access
    How to Prepare for Major Shift in ChatGPT Enterprise Data Access
    how-to-prepare-for-major-shift-in-chatgpt-enterprise-data-access
    Shawn Hays
    July 9, 2025
    ChatGPT Enterprise is changing in the way it retrieves data and surfaces information to users in prompt responses. Learn about the new connectors and risks.
    varonis-announces-strategic-partnership-with-microsoft-to-help-secure-the-future-of-ai
    Varonis Announces Strategic Partnership with Microsoft to Help Secure the Future of AI
    varonis-announces-strategic-partnership-with-microsoft-to-help-secure-the-future-of-ai
    Yaki Faitelson
    July 1, 2025
    The companies have formed a strategic product partnership to deliver scalable data security, governance, and compliance for the AI era