Revolutionizing Wazuh with NATS: Building Real-Time XDR/OXDR Platforms
Comprehensive analysis of integrating NATS messaging into Wazuh's core for real-time agent monitoring, event streaming, and XDR platform capabilities
1910 words
|
10 minutes
Windows API Security: Deep Dive into VirtualAlloc, CreateThread, and WaitForSingleObject
Comprehensive security analysis of critical Windows APIs commonly exploited in malware, with Rust implementations and defensive patterns
1485 words
|
7 minutes
The eBPF Ecosystem: Tools, Frameworks, and Production Solutions
Comprehensive guide to the eBPF ecosystem covering tools like BCC, bpftrace, libbpf, and production solutions for networking, security, and observability.
1921 words
|
10 minutes
Blocking Attacks with Active Response in Wazuh
Learn how to configure Wazuh Active Response to automatically block attacks. Implement firewall rules, manage whitelists, and create custom responses to protect your infrastructure.
3432 words
|
17 minutes
Report Windows Firewall Events Through Event Channel in Wazuh
Monitor Windows Firewall events through Event Channel in Wazuh. Learn to configure Windows agents, create custom rules for firewall events (ID 2003-2006), and build comprehensive network security monitoring.
3653 words
|
18 minutes
Getting Started with eBPF Programming: A Hands-On Guide
A practical guide to eBPF programming with hands-on examples, from hello world to production-ready programs using modern tools and frameworks.
1768 words
|
9 minutes
Using Wazuh to Monitor Sysmon Events
Learn how to integrate Sysmon with Wazuh for advanced Windows security monitoring. Detect suspicious processes, network connections, and malware activities with custom rules.
2921 words
|
15 minutes
Firecracker Production Deployment Guide: Enterprise-Ready MicroVM Infrastructure
Complete enterprise-grade deployment guide for Firecracker microVMs, covering production infrastructure, automation, monitoring, disaster recovery, and operational best practices.
7900 words
|
40 minutes
eBPF Use Cases: Revolutionizing Security, Networking, and Observability
Explore real-world eBPF use cases in security, networking, and observability with practical examples and production deployments.
1431 words
|
7 minutes
Scheduling Remote Commands for Wazuh Agents
Learn how to use Wazuh's Command module to run scheduled commands and scripts on remote agents. Monitor disk usage, automate maintenance tasks, and enhance security monitoring.
2379 words
|
12 minutes
Firecracker Performance Optimization: Maximizing MicroVM Efficiency and Throughput
Advanced guide to optimizing Firecracker microVMs for maximum performance, covering kernel tuning, memory optimization, I/O acceleration, and monitoring techniques for production workloads.
6787 words
|
34 minutes
Introducing Wazuh LLM: Fine-Tuned Llama 3.1 for Security Event Analysis
Discover Wazuh LLM - a specialized fine-tuned Llama 3.1 8B model for analyzing Wazuh security events with MITRE ATT&CK mapping, multilingual support, and SOC automation capabilities.
2160 words
|
11 minutes
eBPF Explained: What It Is, Why It Matters, and How It Works
A comprehensive introduction to eBPF technology, covering its architecture, core concepts, and why it's revolutionizing Linux kernel programming.
1172 words
|
6 minutes
How to Purge Non-Active Agents in Wazuh
Learn how to efficiently manage and purge non-active Wazuh agents using the API. Automate cleanup of disconnected and never-connected agents to maintain accurate inventory.
3339 words
|
17 minutes
Firecracker Container Orchestration: Kubernetes Integration with Kata Containers
Complete guide to integrating Firecracker microVMs with Kubernetes orchestration through Kata Containers, containerd, and CRI-O for secure container workloads.
4182 words
|
21 minutes
How to Forward Android Syslog to Wazuh
Learn how to monitor Android devices by forwarding system logs to Wazuh. Configure syslog collection, create custom decoders and rules for app installations, security events, and device activities.
2667 words
|
13 minutes
Firecracker Security: Multi-Tenant Isolation and Defense-in-Depth Architecture
Deep dive into Firecracker's security architecture, multi-tenant isolation mechanisms, and defensive security features that make it suitable for running untrusted workloads in production environments.
5577 words
|
28 minutes
GitHub Actions, Issues and Pages to build a daily planner
I'm trying a new thing: a private daily planner, where each day I note down my goals for the day and make notes on my progress towards them as the ...
1247 words
|
6 minutes
Reformatting text with Copilot
I wanted to write alt text for the following screenshot ([of this page]()), so I could include it in [this post on Mastodon](https://fedi.simonwill...
457 words
|
2 minutes
How to Send Email Notifications with Wazuh
Learn how to configure Wazuh to send email notifications for security alerts. Set up SMTP relay with Postfix, configure granular email alerts, and implement real-time Apache monitoring.
2385 words
|
12 minutes
Firecracker MicroVM: Ultra-Fast, Secure Virtualization for Serverless Computing
Comprehensive guide to Firecracker microVM architecture, features, and implementation. Learn how AWS Lambda's virtualization technology achieves sub-125ms boot times with minimal overhead.
3791 words
|
19 minutes
Root User Access Monitoring with OSSEC/Wazuh
Learn how to monitor SSH configuration files using OSSEC/Wazuh rootcheck to ensure root user access is properly restricted. Implement policy monitoring for compliance with security standards.
2031 words
|
10 minutes
RSyslog Secure Configuration: Advanced Logging Architecture and Hardening Guide
Comprehensive guide to implementing secure RSyslog configurations, covering advanced logging architectures, encryption, authentication, and enterprise-grade log management strategies.
4036 words
|
20 minutes
Running nanoGPT on a MacBook M2 to generate terrible Shakespeare
[nanoGPT](https://github.com/karpathy/nanoGPT) is Andrej Karpathy's "simplest, fastest repository for training/finetuning medium-sized GPTs".
1131 words
|
6 minutes