Cybersecurity Engineering · Threat Intelligence · Blue Team
Engineering defenses.
Sharing knowledge.
Solving problems.
Implementation guides, troubleshooting notes, and hard-earned lessons from the front lines of cybersecurity engineering.
Build. Detect. Defend. >_ Repeat.
Platforms and tooling
Browse by technology
QRadar
SIEM engineering, deployment, DSM development, troubleshooting, upgrades, and STIG hardening.
View guides →
Corelight
Corelight and Zeek sensor deployment, Fleet Manager, virtualization, and proxy configuration.
View guides →
OpenCTI
Threat intelligence platform installation, feeds, connectors, and integrations.
View guides →
MISP
MISP deployment on AWS and containerized infrastructure.
View guides →
XSOAR
Security orchestration platform installation, certificates, playbooks, and integrations.
View guides →
Gigamon
Network visibility appliance configuration, certificates, upgrades, and troubleshooting.
View guides →Field manuals
Featured projects
Corelight
Corelight and Zeek sensor deployment, Fleet Manager, virtualization, and proxy configuration.
View guides →Gigamon
Network visibility appliance configuration, certificates, upgrades, and troubleshooting.
View guides →MISP
MISP deployment on AWS and containerized infrastructure.
View guides →OpenCTI
Threat intelligence platform installation, feeds, connectors, and integrations.
View guides →QRadar
SIEM engineering, deployment, DSM development, troubleshooting, upgrades, and STIG hardening.
View guides →Security Analytics
Broadcom Security Analytics implementation, packet analysis, upgrades, storage, and hardening.
View guides →Threat Intel
Curated threat actor and indicator research organized for defensive use.
View guides →TippingPoint
Network IPS configuration, digital vaccines, upgrades, and operational guides.
View guides →Recently added
Practical guides
"Everybody has a test environment. Some people are lucky enough to also have a separate production environment."
— PudgyDragon
