>_ learn. hack. secure.
Practical offensive security, explained step by step
Hands-on articles on Active Directory, Hack The Box, Linux, Windows, CVEs and penetration testing, written for people who learn by doing.

Explore by topic
[ AD ]
Active Directory
Kerberos, ACLs, delegation and trusts, and the attack paths that connect them.
Latest articles
-

Linux Log Analysis for Defenders: auth.log, journalctl, and auditd
The Linux security model, where Linux logs live, and how auditd turns a server into a system you can investigate. Module 5…
-

What Is a SIEM? Log Management and Security Monitoring Explained
What a SIEM actually does, how to write queries that matter, and how to manage log retention and cost. Module 6 of…
-

MITRE ATT&CK for Defenders: Mapping Detections to Techniques
How blue teams use MITRE ATT&CK to describe attacker behavior, track detection coverage, and build detections that produce signal instead of noise.…
-

Threat Intelligence for Defenders: Turning Intel into Detections
What threat intelligence is for, the strategic, operational and tactical levels, and how defenders turn intel into real detections. Module 8 of…
-

What Is EDR? Endpoint Detection and Response Explained
What EDR adds beyond antivirus, how to investigate an EDR alert by walking the process tree, and how to tune it. Module…
-

Network Security Monitoring with Wireshark and Zeek
Why network visibility still matters, how Wireshark and Zeek differ, and what defenders can learn from encrypted traffic. Module 10 of The…
>_ new here?
Not sure where to start?
Begin with the Active Directory security guide, then work through the write-ups at your own pace.