Revolutionizing Wazuh with NATS: Building Real-Time XDR/OXDR Platforms
2025-01-19
Comprehensive analysis of integrating NATS messaging into Wazuh's core for real-time agent monitoring, event streaming, and XDR platform capabilities
1910 words
|
10 minutes
Windows API Security: Deep Dive into VirtualAlloc, CreateThread, and WaitForSingleObject
2025-01-19
Comprehensive security analysis of critical Windows APIs commonly exploited in malware, with Rust implementations and defensive patterns
1485 words
|
7 minutes
The eBPF Ecosystem: Tools, Frameworks, and Production Solutions
2025-01-18
Comprehensive guide to the eBPF ecosystem covering tools like BCC, bpftrace, libbpf, and production solutions for networking, security, and observability.
1921 words
|
10 minutes
Blocking Attacks with Active Response in Wazuh
2025-01-18
Learn how to configure Wazuh Active Response to automatically block attacks. Implement firewall rules, manage whitelists, and create custom responses to protect your infrastructure.
3432 words
|
17 minutes
Report Windows Firewall Events Through Event Channel in Wazuh
2025-01-18
Monitor Windows Firewall events through Event Channel in Wazuh. Learn to configure Windows agents, create custom rules for firewall events (ID 2003-2006), and build comprehensive network security monitoring.
3653 words
|
18 minutes
Getting Started with eBPF Programming: A Hands-On Guide
2025-01-17
A practical guide to eBPF programming with hands-on examples, from hello world to production-ready programs using modern tools and frameworks.
1768 words
|
9 minutes
Using Wazuh to Monitor Sysmon Events
2025-01-17
Learn how to integrate Sysmon with Wazuh for advanced Windows security monitoring. Detect suspicious processes, network connections, and malware activities with custom rules.
2921 words
|
15 minutes
Firecracker Production Deployment Guide: Enterprise-Ready MicroVM Infrastructure
2025-01-17
Complete enterprise-grade deployment guide for Firecracker microVMs, covering production infrastructure, automation, monitoring, disaster recovery, and operational best practices.
7900 words
|
40 minutes
eBPF Use Cases: Revolutionizing Security, Networking, and Observability
2025-01-16
Explore real-world eBPF use cases in security, networking, and observability with practical examples and production deployments.
1431 words
|
7 minutes
Scheduling Remote Commands for Wazuh Agents
2025-01-16
Learn how to use Wazuh's Command module to run scheduled commands and scripts on remote agents. Monitor disk usage, automate maintenance tasks, and enhance security monitoring.
2379 words
|
12 minutes
Firecracker Performance Optimization: Maximizing MicroVM Efficiency and Throughput
2025-01-16
Advanced guide to optimizing Firecracker microVMs for maximum performance, covering kernel tuning, memory optimization, I/O acceleration, and monitoring techniques for production workloads.
6787 words
|
34 minutes
Introducing Wazuh LLM: Fine-Tuned Llama 3.1 for Security Event Analysis
2025-01-15
Discover Wazuh LLM - a specialized fine-tuned Llama 3.1 8B model for analyzing Wazuh security events with MITRE ATT&CK mapping, multilingual support, and SOC automation capabilities.
2160 words
|
11 minutes
eBPF Explained: What It Is, Why It Matters, and How It Works
2025-01-15
A comprehensive introduction to eBPF technology, covering its architecture, core concepts, and why it's revolutionizing Linux kernel programming.
1172 words
|
6 minutes
How to Purge Non-Active Agents in Wazuh
2025-01-15
Learn how to efficiently manage and purge non-active Wazuh agents using the API. Automate cleanup of disconnected and never-connected agents to maintain accurate inventory.
3339 words
|
17 minutes
Firecracker Container Orchestration: Kubernetes Integration with Kata Containers
2025-01-15
Complete guide to integrating Firecracker microVMs with Kubernetes orchestration through Kata Containers, containerd, and CRI-O for secure container workloads.
4182 words
|
21 minutes
How to Forward Android Syslog to Wazuh
2025-01-14
Learn how to monitor Android devices by forwarding system logs to Wazuh. Configure syslog collection, create custom decoders and rules for app installations, security events, and device activities.
2667 words
|
13 minutes
Firecracker Security: Multi-Tenant Isolation and Defense-in-Depth Architecture
2025-01-14
Deep dive into Firecracker's security architecture, multi-tenant isolation mechanisms, and defensive security features that make it suitable for running untrusted workloads in production environments.
5577 words
|
28 minutes
GitHub Actions, Issues and Pages to build a daily planner
2025-01-13
I'm trying a new thing: a private daily planner, where each day I note down my goals for the day and make notes on my progress towards them as the ...
1247 words
|
6 minutes
Reformatting text with Copilot
2025-01-13
I wanted to write alt text for the following screenshot ([of this page]()), so I could include it in [this post on Mastodon](https://fedi.simonwill...
457 words
|
2 minutes
How to Send Email Notifications with Wazuh
2025-01-13
Learn how to configure Wazuh to send email notifications for security alerts. Set up SMTP relay with Postfix, configure granular email alerts, and implement real-time Apache monitoring.
2385 words
|
12 minutes
Firecracker MicroVM: Ultra-Fast, Secure Virtualization for Serverless Computing
2025-01-13
Comprehensive guide to Firecracker microVM architecture, features, and implementation. Learn how AWS Lambda's virtualization technology achieves sub-125ms boot times with minimal overhead.
3791 words
|
19 minutes
Root User Access Monitoring with OSSEC/Wazuh
2025-01-12
Learn how to monitor SSH configuration files using OSSEC/Wazuh rootcheck to ensure root user access is properly restricted. Implement policy monitoring for compliance with security standards.
2031 words
|
10 minutes
RSyslog Secure Configuration: Advanced Logging Architecture and Hardening Guide
2025-01-11
Comprehensive guide to implementing secure RSyslog configurations, covering advanced logging architectures, encryption, authentication, and enterprise-grade log management strategies.
4036 words
|
20 minutes
Running nanoGPT on a MacBook M2 to generate terrible Shakespeare
2025-01-11
[nanoGPT](https://github.com/karpathy/nanoGPT) is Andrej Karpathy's "simplest, fastest repository for training/finetuning medium-sized GPTs".
1131 words
|
6 minutes